Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
File:                     VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft (raw, json)
Hash identifier:          NSvEDfDIPFbtNnxNDHRcf6SIP0k5ldWT9qtaA58mBM0=
Subject key identifier:   FC:33:BA:96:12:EA:D0:FE:DE:4D:EC:59:5B:1F:35:DE:03:F8:87:6D
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Certificate issuer:       /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial:       019D9A74C0B7EF96D562E2373930ADC56661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 08:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:35 +0000
Files and hashes:         1: 26y3-FCIjKPuULGuAbdkN8udFTE.roa (hash: 3xGJRZGv4+67a/QQcXMMfIKq4kUi6sQ1GWf2ofA+Ul0=)
                          2: JWW2o_oLbWGpxjMQwNSAqwhhqJQ.roa (hash: 5nCR6cc/bGUZmfvhdh345jAakzPx6XaPK0dVdsIkYOg=)
                          3: VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl (hash: gNRjEpMCM2vr8Tcs7H4Nvn2/tK2PPZrVlvYyO8BFYG8=)
                          4: ZtZBjU0WYLzqgNFkzWWLjKRWDe4.roa (hash: Aa1FwsDclr77KnL36PHDkQS2BvAV7tYr/XQOCzDjAzU=)
                          5: t5f9uZebkbDVSowLOTLeEPd0h2Q.roa (hash: 0xEPrMrVD89X+wGNKbD1d1Cor+K8kwVUKbsyOrl9tUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:c0:b7:ef:96:d5:62:e2:37:39:30:ad:c5:66:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
        Validity
            Not Before: Apr 17 08:00:35 2026 GMT
            Not After : Apr 18 08:00:35 2026 GMT
        Subject: CN=fc33ba9612ead0fede4dec595b1f35de03f8876d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:eb:94:5c:b5:f9:48:29:6f:f1:9e:07:bb:
                    b8:4b:26:6e:4a:92:26:09:2a:a3:4b:d3:dd:0e:3b:
                    29:ef:15:47:0f:cc:9b:1d:8b:47:22:76:6c:b3:17:
                    2b:96:2e:63:6e:92:9f:92:11:72:13:76:8b:1c:20:
                    ae:b2:2f:50:18:33:fc:4f:fb:b6:67:ec:23:fe:83:
                    f1:05:59:35:8c:4d:3d:b7:c4:dd:7a:bf:9e:f5:e2:
                    c3:b6:86:fb:ca:13:dc:f7:f3:19:f8:ba:ee:a2:1c:
                    4f:0c:e8:8a:4b:ce:37:86:dc:74:d1:3f:4b:80:bc:
                    21:8d:69:57:a4:67:fb:0c:c6:03:74:83:6e:36:b2:
                    42:50:cf:38:de:52:10:eb:87:52:a4:71:f2:9f:80:
                    1c:54:81:76:8b:eb:18:23:f4:95:04:c4:85:77:29:
                    3b:56:b2:44:b7:34:60:ae:62:d4:be:10:74:a7:5e:
                    e7:05:5d:c5:d6:11:e6:60:ce:13:04:c4:f6:51:84:
                    49:f0:84:65:a9:51:34:56:d5:ee:b9:82:23:13:91:
                    46:7f:42:81:7d:f5:1a:40:ac:02:10:c1:e6:97:9b:
                    0c:4e:3b:23:7d:de:74:d9:af:e8:80:be:74:d6:ef:
                    be:01:91:54:0d:8c:5d:93:c9:e1:31:e0:1a:9a:78:
                    9e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:33:BA:96:12:EA:D0:FE:DE:4D:EC:59:5B:1F:35:DE:03:F8:87:6D
            X509v3 Authority Key Identifier:
                keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:22:54:93:45:f0:9d:8d:1b:ca:4c:d6:68:be:e4:49:8e:21:
         01:47:e7:6f:27:0d:bd:27:30:9d:37:a0:23:5b:e0:c7:7c:8e:
         6f:6c:3d:19:a2:03:e3:be:0b:77:1f:cd:73:a5:07:5b:f1:72:
         53:1f:a9:7e:7e:1a:f5:28:8a:2b:61:59:ff:2f:49:32:02:52:
         d1:bf:97:ae:e1:75:99:48:f5:55:5c:3b:de:d6:93:7e:54:7c:
         1d:5f:06:82:49:d8:fa:2b:bf:79:85:fa:6b:31:f8:5c:ad:fc:
         a5:66:7f:25:bd:3e:68:bf:61:a7:30:59:3c:7a:af:8b:04:87:
         51:88:6c:a3:58:17:f7:fb:e2:94:0f:e2:ec:1e:89:c4:e8:17:
         e5:6c:78:8f:fb:ce:61:c6:36:28:fb:a7:95:36:f5:df:e8:0c:
         f2:2a:7a:98:7e:ef:ee:52:c0:c2:19:eb:80:0f:b5:ae:27:86:
         99:f0:c0:4d:da:5a:16:25:db:3c:b7:63:07:9b:ed:96:35:68:
         5a:f6:fb:c8:7e:0d:e0:59:14:38:e4:4c:48:dd:f0:17:fa:a0:
         01:d2:09:23:39:7d:76:2d:8c:a5:37:9b:0e:73:5b:fb:e1:19:
         90:38:10:68:d3:38:17:c4:62:e3:14:21:f9:c6:fc:4f:7d:88:
         a6:25:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:25 2026 by rpki-client