Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File:                     Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier:          4LSOtE9Y5jIxwSxoed035BPqJpffVhwj0viJJzjPPs0=
Subject key identifier:   A6:C1:5D:2E:61:EF:48:AE:28:90:B0:40:94:96:1E:EC:6B:03:C1:33
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer:       /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial:       019D9AE2D5257DB35B66D2544FBABF3BEC6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number:          073D
Signing time:             Fri 17 Apr 2026 10:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:49 +0000
Files and hashes:         1: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: m6dl2QEedOV9fm7ubME13qEUl4LGhG4Sn5pZ1JC2jjk=)
                          2: XLYP7p5RdRYcFYlzrcGWJvzM9yA.roa (hash: tHVjpzIZv9hKwBcDf9rhYgJAorYOKfN7gsmTFS3LleQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:d5:25:7d:b3:5b:66:d2:54:4f:ba:bf:3b:ec:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
        Validity
            Not Before: Apr 17 10:00:49 2026 GMT
            Not After : Apr 18 10:00:49 2026 GMT
        Subject: CN=a6c15d2e61ef48ae2890b04094961eec6b03c133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:55:3f:9a:8a:e2:b2:49:e2:9b:34:1f:69:61:
                    a8:c0:5b:f0:85:af:bc:cb:0c:8f:6b:e8:70:db:0a:
                    54:1d:b7:37:28:b1:ce:4d:a2:29:b9:12:30:f1:19:
                    65:af:47:a4:a5:db:3d:59:79:23:1f:d8:b9:9c:82:
                    6f:c0:3d:08:54:c6:44:cf:d1:6c:4f:a1:64:de:4e:
                    e5:be:09:1d:4f:36:6b:2a:4d:2f:bb:10:0a:42:2c:
                    f9:d0:c7:7d:25:da:f1:ec:1b:df:71:d0:b3:56:c8:
                    42:94:4f:05:14:f4:d6:b9:6b:a0:3b:b9:c2:f5:e1:
                    10:68:fb:2e:98:f8:5e:a7:14:ed:4c:85:2f:d6:7e:
                    fb:71:35:d2:1e:f0:b2:21:4a:00:d7:f2:90:f2:90:
                    a8:63:5b:45:7f:d9:02:0b:7a:9c:27:2e:04:33:95:
                    b0:2d:32:7f:06:f2:43:d5:7e:fe:5b:59:f7:61:46:
                    05:8a:3e:20:11:a1:89:2a:32:b3:90:ae:d0:c3:fc:
                    55:16:5e:5d:86:84:5b:52:6f:fd:86:eb:c7:c0:8b:
                    2f:a1:ac:1f:d8:0c:c8:26:83:12:4a:a7:c9:a3:ba:
                    92:72:26:e1:94:19:8b:a6:03:da:70:b5:e4:c0:4a:
                    a1:30:d0:62:61:93:c6:67:da:82:0a:b6:0b:d9:f2:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C1:5D:2E:61:EF:48:AE:28:90:B0:40:94:96:1E:EC:6B:03:C1:33
            X509v3 Authority Key Identifier:
                keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:2a:0a:e4:eb:76:40:13:bc:48:91:a6:c2:50:89:8c:62:4f:
         ee:61:9f:e0:86:55:24:fe:92:7e:27:19:52:54:e8:78:d9:dd:
         86:85:9b:a0:c5:c5:97:48:18:d8:0b:56:e3:95:f8:bf:6c:c2:
         e2:cd:e5:34:f9:0b:e3:d1:53:b1:3b:3e:dc:b9:01:50:1c:00:
         6f:4f:7d:cf:6d:0a:7b:19:6d:3e:96:98:b5:04:52:9f:21:f5:
         37:35:54:fc:7f:c5:18:c6:f7:da:2d:65:0a:39:53:1c:74:e7:
         1d:c7:ed:93:5a:84:9f:c9:57:5b:cb:75:9a:66:e6:ee:ea:f5:
         8e:b8:6b:e5:6b:7f:82:eb:16:14:43:1f:23:c8:a9:1b:1f:c9:
         ee:a2:ee:c3:bb:f5:27:2a:7e:cb:43:a9:62:2c:9a:7a:f3:dd:
         e1:c8:b3:a8:74:cf:04:97:92:c6:cb:71:83:a2:fa:18:3c:5e:
         b6:3c:23:5a:49:71:75:f1:84:78:98:b6:2b:fe:97:ad:69:cd:
         fc:0e:70:a8:5d:d7:e2:39:94:6f:63:d7:49:23:2c:09:ea:40:
         8b:ba:79:e6:d9:e1:6e:3b:c1:52:6d:63:cd:3b:49:b2:b1:49:
         79:b2:ca:c7:bc:fd:d4:86:8a:9f:28:6a:06:4c:2a:9b:dd:b8:
         bc:cd:52:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:57 2026 by rpki-client