Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
File:                     VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft (raw, json)
Hash identifier:          DPZR7QSM+N4H+7IUZuCdaKuRyWeU7T0CglzB3bs57a0=
Subject key identifier:   CC:83:84:00:8B:98:52:28:8D:2A:52:DF:25:CA:96:B1:79:76:44:A6
Authority key identifier: 54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
Certificate issuer:       /CN=545ab2a3712e2556a4434b8badd6c407a5673121
Certificate serial:       019D9850323A564CE24A632D960E44124C11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 22:01:25 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:25 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:25 +0000
Files and hashes:         1: VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl (hash: SArWuHOwJSsa19BJPQGwgMHgkpn6he7Urcpd5PzZ3/E=)
                          2: Vchu28hFiP2g2wl5siwgeV6-0Mo.roa (hash: nzslrPM5r0/2SJpIcbCIN9cB87EfRDEPS3VmNNiKSEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:32:3a:56:4c:e2:4a:63:2d:96:0e:44:12:4c:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=545ab2a3712e2556a4434b8badd6c407a5673121
        Validity
            Not Before: Apr 16 22:01:25 2026 GMT
            Not After : Apr 17 22:01:25 2026 GMT
        Subject: CN=cc8384008b9852288d2a52df25ca96b1797644a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:9d:22:4e:6c:62:ba:ff:49:d7:35:ca:26:
                    94:49:94:21:2a:39:12:f4:62:65:a1:e5:f5:18:e5:
                    01:9f:25:2b:7b:57:67:67:72:5a:da:b0:2c:83:8e:
                    63:57:24:02:2a:c5:cc:2e:2e:34:82:1a:31:2b:82:
                    86:ab:1e:36:ba:c0:36:27:97:08:2b:53:36:80:66:
                    1e:52:5e:41:c4:b7:0e:32:5f:88:cc:16:49:d7:64:
                    20:a3:a3:6d:43:7b:ad:78:7c:ee:05:02:31:fc:30:
                    0a:cc:57:00:36:2b:4c:6f:ec:13:58:c9:ff:93:c6:
                    76:38:59:33:73:e3:67:c4:7e:0a:30:17:4b:62:f4:
                    2e:65:07:21:ef:2b:02:b4:ea:6f:89:15:a9:64:0d:
                    e9:e2:ce:bd:d4:1a:b1:18:20:ba:40:6d:a8:22:fa:
                    ca:82:fa:ae:2f:d8:15:c8:d4:79:73:ba:d8:4b:89:
                    5f:48:4e:df:9f:11:35:35:16:e8:0e:bc:26:35:a8:
                    1e:bf:b3:d6:69:46:19:4d:d6:18:ce:5b:60:6c:26:
                    1a:c0:87:00:78:58:65:dc:fa:bb:60:57:3b:d0:4e:
                    84:c2:55:c1:3a:ac:30:e4:5c:93:96:56:8e:e8:67:
                    5a:c8:f6:ab:4b:b0:aa:53:3e:25:d5:01:0d:53:0a:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:83:84:00:8B:98:52:28:8D:2A:52:DF:25:CA:96:B1:79:76:44:A6
            X509v3 Authority Key Identifier:
                keyid:54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:73:62:c3:de:2d:14:30:25:e2:6b:03:e3:47:25:3f:77:a0:
         a5:cd:d5:68:00:c7:e4:d6:e2:c1:ee:a5:50:39:d7:1a:84:48:
         4d:91:86:78:5b:f7:df:cf:5e:b7:f8:f6:52:a7:5c:c1:38:ba:
         e3:76:8b:dc:82:2f:bc:7c:82:c0:93:ca:71:e5:8b:c8:18:c2:
         ba:4e:33:73:ce:80:81:b8:eb:a5:e5:d2:a7:df:44:85:28:f1:
         b4:52:fb:a0:8b:b8:2b:07:fe:c4:7c:4b:00:99:78:9f:f8:29:
         8b:db:e5:ab:3b:84:fc:d8:da:11:0a:39:86:64:2f:ca:b4:1b:
         60:90:04:70:d8:51:07:94:42:bd:f1:87:e1:68:3a:f0:cf:f4:
         f1:8f:8e:4a:a8:c6:b9:98:40:34:e8:a8:9f:4d:be:07:9d:c4:
         02:8c:a6:3a:5f:0b:3f:93:38:6a:a2:1f:9b:fe:f7:9f:d6:17:
         6c:7e:b1:0e:62:db:2e:bf:4d:44:b3:6d:f7:6e:77:e1:93:45:
         1a:e8:4e:a9:92:bf:6d:e5:85:30:8f:b7:dd:98:6c:6c:11:43:
         2d:89:d9:07:84:da:73:fc:f1:49:0b:3a:b8:84:ca:6f:c1:2f:
         67:bb:8d:43:d2:5c:62:e0:f6:24:7c:b5:d1:cf:fa:07:0d:dd:
         82:bf:c2:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUDI6VkziSmMtlg5EEkwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NWFiMmEzNzEyZTI1NTZhNDQzNGI4YmFkZDZjNDA3YTU2
NzMxMjEwHhcNMjYwNDE2MjIwMTI1WhcNMjYwNDE3MjIwMTI1WjAzMTEwLwYDVQQD
EyhjYzgzODQwMDhiOTg1MjI4OGQyYTUyZGYyNWNhOTZiMTc5NzY0NGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vCdIk5sYrr/Sdc1yiaUSZQhKjkS
9GJloeX1GOUBnyUre1dnZ3Ja2rAsg45jVyQCKsXMLi40ghoxK4KGqx42usA2J5cI
K1M2gGYeUl5BxLcOMl+IzBZJ12Qgo6NtQ3uteHzuBQIx/DAKzFcANitMb+wTWMn/
k8Z2OFkzc+NnxH4KMBdLYvQuZQch7ysCtOpviRWpZA3p4s691BqxGCC6QG2oIvrK
gvquL9gVyNR5c7rYS4lfSE7fnxE1NRboDrwmNagev7PWaUYZTdYYzltgbCYawIcA
eFhl3Pq7YFc70E6EwlXBOqww5FyTllaO6GdayParS7CqUz4l1QENUwqwCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyDhACLmFIojSpS3yXKlrF5dkSmMB8GA1UdIwQY
MBaAFFRasqNxLiVWpENLi63WxAelZzEhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kMmU4ZDctNTkzZi00YWZiLWI2YjMt
YjlkOGNmYzE5Y2VjLzEvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kMmU4ZDctNTkzZi00YWZiLWI2YjMtYjlkOGNmYzE5Y2Vj
LzEvVkZxeW8zRXVKVmFrUTB1THJkYkVCNlZuTVNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXNiw94t
FDAl4msD40clP3egpc3VaADH5Nbiwe6lUDnXGoRITZGGeFv3389et/j2UqdcwTi6
43aL3IIvvHyCwJPKceWLyBjCuk4zc86AgbjrpeXSp99EhSjxtFL7oIu4Kwf+xHxL
AJl4n/gpi9vlqzuE/NjaEQo5hmQvyrQbYJAEcNhRB5RCvfGH4Wg68M/08Y+OSqjG
uZhANOion02+B53EAoymOl8LP5M4aqIfm/73n9YXbH6xDmLbLr9NRLNt92534ZNF
GuhOqZK/beWFMI+33ZhsbBFDLYnZB4Tac/zxSQs6uITKb8EvZ7uNQ9JcYuD2JHy1
0c/6Bw3dgr/Ctw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:31:50 2026 by rpki-client