Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File:                     vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier:          RqKbpt17w/OFSeEs1Xt0SkGpwUC+0H13wJGASNNHJDU=
Subject key identifier:   C5:BB:DF:3F:78:5F:4F:48:3F:37:0D:5E:2F:5F:9D:42:88:5F:34:BE
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer:       /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial:       019D9A3DF45C9BB65F16C8A5E9D11100F166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number:          1855
Signing time:             Fri 17 Apr 2026 07:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:44 +0000
Files and hashes:         1: pSiIaWRx2UGN4D5EcKFTNV-8gHw.roa (hash: EWBZ2UHTAmxrD1L9UAKAHW/cTFQz9Hh3HcW2rFyIPpw=)
                          2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: TtXAF5vixUUNcH1s/zjjugROmfZaEgWKUzCSIj55s2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3d:f4:5c:9b:b6:5f:16:c8:a5:e9:d1:11:00:f1:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
        Validity
            Not Before: Apr 17 07:00:44 2026 GMT
            Not After : Apr 18 07:00:44 2026 GMT
        Subject: CN=c5bbdf3f785f4f483f370d5e2f5f9d42885f34be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:36:6a:6e:58:4a:a4:e5:85:c2:33:6d:2f:
                    ce:77:69:4a:b4:ff:0b:57:e8:35:4b:60:28:f4:d5:
                    19:b8:2b:c4:f4:96:68:99:2c:dd:ec:99:b0:64:c3:
                    d5:84:83:d0:41:e8:f4:85:62:50:26:98:5f:54:e8:
                    78:9a:12:4b:c4:4f:34:6e:34:e3:cd:03:b4:e5:c6:
                    71:f0:86:d3:b0:eb:b1:fc:b3:11:7f:7c:4d:b3:39:
                    48:4f:11:a7:e6:32:d3:37:a2:44:b3:44:99:37:db:
                    75:f4:38:e1:59:00:cb:b7:7f:06:62:a7:09:85:a4:
                    7b:f4:3f:94:88:0e:0f:4d:c9:2a:ba:0e:c1:14:5f:
                    5a:8f:84:9a:4a:e5:eb:92:cf:98:0a:17:b1:c7:d4:
                    ae:85:a6:b5:57:b6:00:26:12:8d:96:24:b1:bc:f0:
                    bd:d5:ab:98:ec:3b:7d:07:42:43:60:c5:9b:04:48:
                    e5:ed:98:30:08:49:d4:47:cf:6f:60:e8:ae:a3:fc:
                    ff:cd:cf:bd:50:0b:ce:ca:84:c0:f3:95:34:8e:9f:
                    0e:1e:b5:da:0b:92:d6:3e:d4:4b:47:b6:ec:4d:3b:
                    fc:6c:a3:ad:8f:fb:79:63:54:70:20:eb:3e:c7:ac:
                    e0:1c:6e:2c:2d:a8:c6:3f:0a:e8:3d:e7:ee:b6:ed:
                    1d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BB:DF:3F:78:5F:4F:48:3F:37:0D:5E:2F:5F:9D:42:88:5F:34:BE
            X509v3 Authority Key Identifier:
                keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:90:15:b2:7b:21:47:c9:38:b1:3c:02:4e:7e:9b:47:e0:fe:
         e9:81:c4:2a:05:5a:20:d6:17:94:69:64:3b:8a:7d:38:5b:13:
         a6:94:ac:55:ea:88:c1:ee:cd:33:7f:62:61:31:32:5e:e3:50:
         dc:7d:dc:14:67:45:78:84:6a:8e:08:35:d8:5a:13:40:2f:eb:
         9e:4b:60:4d:0d:8d:a3:c5:e6:e8:0e:50:6e:af:98:51:8a:55:
         e4:30:f5:3f:6d:d8:f6:28:5c:07:ef:73:8c:df:55:a8:f2:67:
         99:6d:c3:04:06:5e:3d:13:fb:2e:8e:f8:ac:a9:e0:35:53:a0:
         8f:44:ab:87:f4:ec:2a:c9:59:13:fd:20:2e:fc:f3:dc:fe:06:
         03:74:7e:29:06:c0:a8:5b:e9:67:82:f4:09:94:1b:d7:a6:2e:
         a3:cb:9c:74:dd:2f:5c:34:58:3b:2a:65:2a:77:eb:be:a4:c9:
         df:f9:d4:59:5e:35:7d:22:1e:d1:1c:ec:3f:0f:44:a6:90:1e:
         47:26:45:c9:d3:b1:9d:08:df:9b:fe:82:c6:74:92:35:4d:de:
         35:1e:6c:4c:2e:22:dc:23:6b:c8:7f:04:d0:db:7a:8b:84:07:
         ea:13:fa:21:5a:8b:16:2e:b3:9c:9a:30:24:f8:e6:dc:4c:be:
         20:19:81:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:16 2026 by rpki-client