Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File:                     Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier:          nX6A68jxP85ggnevHh2/MKmna0PTc4TQ78dKhEnh1BI=
Subject key identifier:   E7:66:85:C3:4D:02:39:7E:41:AC:3F:05:22:72:EE:93:50:59:F6:09
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer:       /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial:       019D98F4B5C80989382335C24D7F471669C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number:          1286
Signing time:             Fri 17 Apr 2026 01:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:07 +0000
Files and hashes:         1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: bbcDEm8Kg6BomjgPzy+yZJQqttT449E8CRYHh5UNKEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:b5:c8:09:89:38:23:35:c2:4d:7f:47:16:69:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
        Validity
            Not Before: Apr 17 01:01:07 2026 GMT
            Not After : Apr 18 01:01:07 2026 GMT
        Subject: CN=e76685c34d02397e41ac3f052272ee935059f609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:65:9c:69:97:33:9d:4e:fe:93:15:aa:a3:
                    b5:d4:c4:fd:37:78:9a:dd:ca:a7:95:08:0e:35:14:
                    5c:d2:8c:51:e0:4d:14:1c:1a:6f:81:b3:a0:ef:84:
                    7f:6b:60:03:35:f4:cc:99:1c:fa:52:51:33:71:d4:
                    7c:c3:a1:34:78:8d:3e:1b:99:a1:be:32:7f:f3:9f:
                    ba:f8:44:6c:f4:05:ef:34:d1:f4:63:0e:d3:d5:24:
                    ad:42:a7:be:6b:61:42:38:9d:84:fd:08:b4:f7:d3:
                    f4:7a:e1:a8:af:d6:bf:5c:4c:59:5f:8f:83:b8:fc:
                    2a:41:b5:f9:6c:30:4e:21:df:f6:9e:b0:bf:93:9a:
                    96:1b:8c:3e:68:0b:3d:2a:f8:bd:41:2f:ee:5d:3e:
                    42:ec:cb:67:f2:62:b4:64:f4:0d:ce:ac:27:3c:44:
                    ea:5d:b5:c1:85:4e:46:d6:4d:ff:23:3d:a3:77:aa:
                    f7:fc:62:73:6f:a2:59:ae:e9:38:70:c9:26:87:f8:
                    e4:c2:9b:bf:f9:8f:ad:2f:19:cc:b9:d8:d4:73:f9:
                    11:04:e3:74:ce:26:fd:b9:56:9a:9a:cb:32:cb:6a:
                    26:fc:46:94:e1:c3:51:fa:23:2f:71:3a:67:8b:d1:
                    82:02:14:a3:1a:2b:4a:51:17:50:8a:c9:dd:38:24:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:66:85:C3:4D:02:39:7E:41:AC:3F:05:22:72:EE:93:50:59:F6:09
            X509v3 Authority Key Identifier:
                keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:2c:7d:b5:77:54:60:62:0f:3f:17:d3:be:23:70:1a:38:
         2a:84:19:35:78:ea:d6:ee:b3:b5:af:73:76:53:10:f0:af:fe:
         15:e6:52:2d:7a:2d:fd:14:7e:ed:99:d8:30:cf:32:6b:3a:42:
         55:d4:aa:af:71:28:fd:90:c5:ea:f2:fd:28:53:ef:3b:ab:7c:
         78:32:e9:25:0a:8f:e7:18:65:a7:2b:b7:43:45:46:06:7b:5f:
         67:83:7a:08:f6:ce:4f:db:61:2a:58:7f:d6:73:e2:0e:b5:e7:
         ff:9f:e6:83:36:a5:6c:f3:ca:96:8d:db:b8:0a:8e:c4:cd:37:
         d0:d0:5e:d3:57:c0:7e:9d:ec:f1:0f:7a:2d:dd:62:f1:07:a0:
         82:97:e4:9e:36:07:a0:01:fa:4d:3e:86:f4:4e:c8:7a:8c:e0:
         70:b1:7b:63:58:42:c0:5e:65:32:86:68:98:78:38:90:35:08:
         d1:9d:0a:bb:11:92:c5:a0:58:a5:60:36:81:bd:a9:7c:25:61:
         02:6f:6a:99:11:2a:83:cb:54:18:07:d7:c3:04:a7:86:12:fe:
         75:ce:ba:40:03:80:2e:de:d2:c0:9c:f5:fb:cf:15:2e:2c:df:
         6a:fc:56:c2:d2:37:fb:ae:c5:12:5c:cf:0a:cc:bc:57:c8:80:
         76:64:90:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:44 2026 by rpki-client