Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
File:                     vIPChDwWSbAFTJEST-4DEUCV4WM.mft (raw, json)
Hash identifier:          Y+y02mhTE9kamRJ8Qh8FGnvhJpZbrb5IJH6DHdDRUmM=
Subject key identifier:   C9:64:62:04:C3:90:4B:A9:01:48:E6:B6:40:F9:D3:0F:A8:DE:0D:4D
Authority key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Certificate issuer:       /CN=bc83c2843c1649b0054c91124fee03114095e163
Certificate serial:       019D98506FE2BC006A01E5CC928335C2BF32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 22:01:41 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:41 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:41 +0000
Files and hashes:         1: t38nL5oN5Hl7YW2Um4h4b4mkFQY.roa (hash: yo6pqMRWLvkyp3h1nhu6jmRo6lvB15VlScam6f7A8qw=)
                          2: vIPChDwWSbAFTJEST-4DEUCV4WM.crl (hash: ZWDaK6VBXiUr0kYhhA7QlKPdmzN93VyG1RBcbgYTB+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:6f:e2:bc:00:6a:01:e5:cc:92:83:35:c2:bf:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc83c2843c1649b0054c91124fee03114095e163
        Validity
            Not Before: Apr 16 22:01:41 2026 GMT
            Not After : Apr 17 22:01:41 2026 GMT
        Subject: CN=c9646204c3904ba90148e6b640f9d30fa8de0d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c9:c6:93:a4:10:e0:3c:2f:97:f8:07:40:8a:
                    b0:fd:a5:ca:1a:6f:db:b8:37:2e:59:09:2e:ae:37:
                    5d:44:39:ce:58:94:92:44:37:88:81:fb:b3:0a:e8:
                    ea:ff:1a:57:ef:0d:21:d8:7a:f7:5f:ec:22:ef:87:
                    30:3f:4a:9a:41:99:68:99:03:44:7c:85:f3:de:94:
                    d6:9c:73:02:4b:ef:61:89:f7:c0:c3:b9:26:36:b8:
                    62:f4:7a:24:4f:be:2a:38:13:0c:b0:26:01:b7:1f:
                    22:12:d1:66:36:2f:60:6a:f2:16:04:00:73:9a:b4:
                    29:74:2e:e4:9e:ed:db:fc:39:7c:25:b3:95:6c:1e:
                    8c:d7:35:97:02:d2:02:b8:f4:98:35:ad:a1:ab:0d:
                    ed:91:40:d6:51:b7:31:5e:13:a9:66:4c:ef:47:64:
                    49:d4:4f:2b:bf:d6:a3:9a:e7:84:42:46:67:aa:5c:
                    af:32:2e:80:19:97:75:ca:aa:6f:8a:75:1c:27:0a:
                    25:6f:b8:a1:24:6a:45:34:c6:08:4a:47:21:6f:ac:
                    46:d4:77:28:60:86:35:4c:17:03:5f:31:5c:fb:98:
                    11:f8:88:b7:2d:a4:08:5e:6f:5a:3b:e4:64:8f:9c:
                    74:f5:1a:7c:4e:2c:0e:33:c8:bb:e1:af:a3:c5:95:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:64:62:04:C3:90:4B:A9:01:48:E6:B6:40:F9:D3:0F:A8:DE:0D:4D
            X509v3 Authority Key Identifier:
                keyid:BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:01:16:96:02:8c:b3:8a:03:1e:d7:b5:b2:aa:1b:77:1b:
         71:d4:b7:13:5c:e0:92:00:c5:d5:2a:b7:1d:1e:de:47:b2:84:
         cc:1e:d6:d9:ea:79:80:96:20:1c:f4:29:38:8d:02:73:f6:e7:
         8b:dc:a3:cd:ef:4f:66:de:81:06:58:1c:eb:bf:fc:35:f9:30:
         ef:80:93:2c:79:dd:07:23:17:3a:c0:70:49:64:99:90:62:18:
         0d:4b:1d:60:d0:b2:31:19:ce:2d:8c:c1:90:fa:bd:01:13:92:
         10:45:eb:e7:97:7a:62:7d:8d:f7:2b:96:cc:b9:7a:f5:84:a8:
         54:fb:a4:97:d5:9b:ea:96:d1:45:72:fa:e5:78:aa:5a:c7:ed:
         11:cb:84:a5:4e:bb:2c:5f:5b:89:7f:79:fa:4a:94:e9:3a:9f:
         93:7d:99:df:c2:d5:ff:b8:f8:41:48:4b:3f:cf:9e:33:89:79:
         ec:6d:af:be:d7:36:26:ad:68:fb:27:1a:f5:a8:e9:33:32:1c:
         3f:f1:99:91:f0:d6:5d:e9:46:d1:32:fc:92:30:b3:f2:f0:63:
         af:8b:7e:f9:5e:ee:1f:7a:f9:ba:fa:0b:5b:59:e9:c0:e5:d9:
         bc:8a:bf:ec:cc:39:d5:43:35:2d:6b:5a:4c:17:d7:b1:74:24:
         e3:ab:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:41:58 2026 by rpki-client