Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File:                     vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier:          Odbov38bg3asLhBz3w0fV78FiBW6ZwbItTf2WTRzq0E=
Subject key identifier:   DC:DC:2D:6B:23:1A:95:87:93:30:C9:B9:65:6A:0E:C6:41:DC:47:E4
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer:       /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial:       019D9AAB822651EA53DDD4984AE65E8B9241
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number:          1926
Signing time:             Fri 17 Apr 2026 09:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:24 +0000
Files and hashes:         1: 8TA7t7HrUBV_MAyX5n-91LJHqkY.roa (hash: /S+gSBwTzcXM3LZzCzX/nuyybzqrF+WlaDQm17WzHkw=)
                          2: 9l2oclfmlLyGg_cZ5DedOdHOx8s.asa (hash: EriSD3YQgyQhumusVxuYLUf/vOtHLIHDjRPcfxqNXsw=)
                          3: LkIQdTCDAyRkTL--fns1mcSje7M.asa (hash: 7eizC5wFY7b2dkwAA5Tl7GOcBdql3G3vRPprad1SEao=)
                          4: QDmIW26JPLiCQPg0QkWFjA_yXvQ.roa (hash: lNF+nwAKLXvKgpTrABWuuKjeHqZ2vPmIOlH0x80veow=)
                          5: qxoyNmMUKUfyFkVyuAGZAM4YuT8.roa (hash: 32HDKvNSzbAK7fB6zWT8id6Yo7qRMY5K04pfmrZY4Ms=)
                          6: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: tStPccurLD41w1/hEY9dc2MeGyN13j5ThaWFmi9RmBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:82:26:51:ea:53:dd:d4:98:4a:e6:5e:8b:92:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
        Validity
            Not Before: Apr 17 09:00:24 2026 GMT
            Not After : Apr 18 09:00:24 2026 GMT
        Subject: CN=dcdc2d6b231a95879330c9b9656a0ec641dc47e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:b8:83:b5:62:80:aa:c6:69:5a:f8:56:28:
                    cf:2d:65:46:8f:06:bd:7c:3a:93:5c:03:ce:cd:a8:
                    c5:3b:3a:a7:79:de:13:88:24:97:fb:85:d4:5e:6c:
                    99:01:a2:7f:48:bc:14:b3:79:81:2b:40:30:cc:55:
                    5a:d5:ca:b5:98:c0:87:05:04:45:8c:2e:1c:51:2c:
                    7a:7a:a8:14:47:99:52:f6:64:9e:94:57:45:76:7c:
                    ae:fc:d3:57:43:f5:c1:fb:62:29:52:1c:ab:28:c3:
                    60:64:e0:5d:42:34:94:e9:1b:55:0b:54:93:cb:ba:
                    d0:63:d7:26:bf:73:58:70:9a:64:10:6b:7e:8b:62:
                    8c:55:da:09:d9:55:35:06:49:5f:94:b5:ef:0e:4a:
                    e3:d8:8a:8d:0a:4b:9b:b9:9f:5f:09:aa:c0:b1:d7:
                    1a:af:b4:94:1b:b7:f4:a5:8e:58:22:60:2b:dd:27:
                    8d:70:58:a2:fa:dd:75:fb:25:d3:12:07:ca:d8:17:
                    26:89:fd:c7:52:a3:43:69:24:ab:6f:ea:4d:0a:27:
                    a5:7b:a5:d9:e0:bd:a1:00:23:35:8a:07:c8:2b:63:
                    b2:b4:e0:78:b9:95:0f:ab:a1:4d:25:93:f5:0b:33:
                    36:83:b7:08:fa:d6:fa:34:dc:8e:43:fb:9c:ea:f0:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DC:2D:6B:23:1A:95:87:93:30:C9:B9:65:6A:0E:C6:41:DC:47:E4
            X509v3 Authority Key Identifier:
                keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:4e:c6:91:f0:3f:01:6d:69:9d:19:cc:e7:ef:ae:31:ff:34:
         13:b6:b6:62:e3:f0:58:a4:cf:98:fa:84:1a:d3:df:89:9d:15:
         f6:c0:c0:23:8f:2a:ca:90:95:1d:70:fa:51:bd:05:e9:9e:03:
         09:bb:25:27:81:2b:a3:0a:e2:3b:47:3f:8d:c8:8b:8f:9e:78:
         56:9d:bf:b8:57:46:4b:3d:ea:52:fd:bd:ea:c1:c7:af:08:f1:
         20:c7:fc:8d:e1:5d:4f:4e:3a:cd:ce:2c:f2:dd:56:b8:5d:7b:
         5f:ae:09:3d:35:49:be:d0:e4:b8:30:80:41:4b:79:8a:b3:53:
         b0:3c:b0:1c:c9:68:bd:ca:76:41:1b:58:1f:b2:67:af:de:81:
         2d:87:8d:1c:13:c1:2f:2f:4e:98:8e:6d:57:3e:81:32:4d:98:
         87:23:91:62:8a:ac:f5:c4:07:98:a4:51:0b:92:f7:7a:d6:ad:
         b2:97:fe:44:68:84:db:da:66:2f:31:b1:50:c5:52:eb:aa:d7:
         6f:fe:ee:c4:b2:54:f2:dd:4a:5f:47:bb:b0:ac:75:ea:37:a0:
         10:0b:3f:10:8c:70:f1:2b:03:7d:17:ab:f2:b6:da:df:fa:8a:
         f3:f6:04:28:39:2f:85:0a:fd:d0:7d:34:8c:45:17:08:85:5d:
         a1:82:7f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:45 2026 by rpki-client