Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
File:                     VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft (raw, json)
Hash identifier:          NYQB9QVi9XilA7PPco2mVsE2KtYy4C0UU0XMV0W2gJ0=
Subject key identifier:   18:2F:25:80:2C:A5:B9:8D:72:E2:E1:2A:6F:72:EB:BD:A3:B1:BA:D2
Authority key identifier: 54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D
Certificate issuer:       /CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
Certificate serial:       019DA453A03B67717A3635668D9A4F9D393F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
Manifest number:          0DA6
Signing time:             Sun 19 Apr 2026 06:00:37 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:37 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:37 +0000
Files and hashes:         1: AKJixgIyoiFRAuVwrU9Uh1udzZc.roa (hash: ohFD+m2QlHY4K3mvt7FqZXItot4Ux3ki91yXb1hPG1s=)
                          2: VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl (hash: Sry1fnbbrJVLHRSehTuZGbgDMwEuBlYQfkahP54JeXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:a0:3b:67:71:7a:36:35:66:8d:9a:4f:9d:39:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546ec217e9b129316c23a6fa9f9a721f10c2d95d
        Validity
            Not Before: Apr 19 06:00:37 2026 GMT
            Not After : Apr 20 06:00:37 2026 GMT
        Subject: CN=182f25802ca5b98d72e2e12a6f72ebbda3b1bad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:87:4d:8b:a9:4f:c6:78:b5:d5:6d:78:d5:4a:
                    6c:1d:38:97:47:64:bb:0a:c7:49:25:e3:82:ab:e6:
                    6b:76:83:6f:89:0e:bb:cb:26:f8:e8:0a:5a:e3:c6:
                    9d:37:c9:5a:30:3f:f1:bf:a0:e5:fe:ea:14:67:31:
                    e1:62:03:47:37:04:09:9f:83:06:05:5d:c3:60:b7:
                    af:8b:bb:df:fe:91:f9:73:24:a8:ab:60:86:fb:1e:
                    ab:67:8f:93:01:91:b9:50:55:3a:2b:f5:c8:87:13:
                    c9:85:12:f8:49:fa:50:ea:46:92:5d:7b:b1:35:cb:
                    ef:00:4e:a9:51:52:8d:d0:a1:71:a9:02:d3:2d:32:
                    58:a7:41:bd:e6:85:cf:a1:03:9a:a0:4e:05:61:3c:
                    1b:ad:34:31:8d:73:8d:bf:71:35:e6:5b:2a:01:56:
                    13:12:10:fc:cf:46:44:ab:9e:fd:c4:c4:5c:58:c7:
                    3e:24:33:c3:89:51:63:7e:d1:1a:ed:de:4f:0f:a2:
                    bc:8f:42:23:9d:a7:31:0e:96:41:b2:8b:b8:bf:3d:
                    55:59:a1:69:b1:79:9f:43:e9:29:67:00:7f:90:9c:
                    b1:79:32:3a:ca:4e:65:c9:d7:5a:87:25:fe:ff:02:
                    42:b4:50:bc:0c:19:3a:c7:44:75:0f:b7:88:53:50:
                    ae:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:25:80:2C:A5:B9:8D:72:E2:E1:2A:6F:72:EB:BD:A3:B1:BA:D2
            X509v3 Authority Key Identifier:
                keyid:54:6E:C2:17:E9:B1:29:31:6C:23:A6:FA:9F:9A:72:1F:10:C2:D9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG7CF-mxKTFsI6b6n5pyHxDC2V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/9bb7d6-7f7a-486c-8a0d-c47c26fa68af/1/VG7CF-mxKTFsI6b6n5pyHxDC2V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c3:a5:15:d3:96:8c:82:dc:cd:6c:6d:00:f9:5a:67:ff:8e:
         0e:9b:4e:76:62:34:d8:0d:0e:81:fb:3a:31:36:1e:cf:68:e8:
         79:e9:10:f8:f9:6f:f7:53:60:3a:8b:84:b1:82:af:7a:da:96:
         0b:e3:31:57:6c:87:03:92:17:2c:38:c8:5c:83:7a:40:00:f1:
         18:8b:84:34:01:07:72:51:4b:15:4b:da:c2:54:e8:dd:b3:7c:
         99:d1:e5:12:1e:4a:46:93:3f:c3:96:40:ec:d3:c9:fa:1b:73:
         82:f4:f4:89:c3:a4:5a:75:2d:73:c9:2c:ec:36:70:45:e3:8d:
         40:f3:60:0b:8d:d4:fb:cf:32:9c:2c:9a:cc:62:48:07:76:24:
         6f:3d:25:59:4e:98:4f:66:af:21:a8:e8:8c:fa:86:c7:a2:da:
         f4:0f:f6:7b:29:40:04:2c:6f:9e:5d:ef:f6:ca:4c:48:ea:86:
         43:83:72:29:b5:f2:41:c2:24:97:8d:bf:a3:f4:6c:72:95:47:
         5e:10:53:6a:be:aa:df:5d:14:da:03:5c:60:be:fe:25:32:59:
         62:49:64:f3:14:91:08:41:3d:fe:92:a4:34:04:a5:3d:db:3d:
         39:b2:69:8c:55:84:fb:a4:a0:2e:6a:7e:05:cb:80:04:dd:62:
         eb:f3:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:13 2026 by rpki-client