Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File:                     V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier:          TIgn96TirEArZDmnEbHrVYjxWphOzYtc6HArNv7MFiM=
Subject key identifier:   91:1B:11:1C:4C:A5:F6:A4:EA:47:05:8C:12:BE:ED:CB:DE:7F:47:71
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer:       /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial:       019D99D014ECEC8A2D3D045FD9BEAFA639C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number:          187D
Signing time:             Fri 17 Apr 2026 05:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:44 +0000
Files and hashes:         1: 1K2LFFiurWkSS6BehPIABgELzig.roa (hash: eUzuwicyTeWiMVFNehYoQf9+T/XhqLc10wnGWFbChM0=)
                          2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: SpGi1pdDuOvOlmtnwJymlAcYoOetQJfBn03edA7Sy6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:14:ec:ec:8a:2d:3d:04:5f:d9:be:af:a6:39:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
        Validity
            Not Before: Apr 17 05:00:44 2026 GMT
            Not After : Apr 18 05:00:44 2026 GMT
        Subject: CN=911b111c4ca5f6a4ea47058c12beedcbde7f4771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:0b:50:f6:73:ab:ee:32:f2:f5:3d:bc:81:
                    b3:d3:b1:c7:93:5a:b4:7d:8a:e1:78:e0:ef:d0:02:
                    bd:7a:dd:c7:f3:01:51:65:b6:c4:f4:41:5b:ad:f1:
                    47:57:f4:0d:d8:96:e0:42:a8:b8:41:08:a7:cb:4f:
                    b6:9f:ac:e9:29:54:4f:35:b6:9e:58:d8:0f:32:38:
                    8d:d5:b3:9a:46:a7:61:0b:24:1e:28:ed:f1:fc:87:
                    7e:a4:5b:44:40:86:c7:ed:7a:48:d7:fb:bf:bd:a3:
                    b6:27:34:17:bf:55:1b:5c:90:29:32:a2:2a:41:27:
                    2c:e1:46:c9:e4:3c:52:9a:7c:78:1c:c2:bb:81:93:
                    c6:51:78:2d:75:5d:12:c0:e5:2d:53:f3:d8:60:61:
                    fd:41:ed:51:07:fe:c1:24:a7:97:96:5c:4e:b0:58:
                    68:f3:d5:ca:37:69:48:64:4c:fa:8b:5f:65:c7:b5:
                    6b:52:9d:13:da:5f:1e:f6:f0:ab:87:67:68:e0:b5:
                    35:94:0a:9a:17:be:0c:ce:6e:0c:c3:92:1d:12:e6:
                    be:7e:93:53:8b:2d:6a:00:ba:2d:20:ab:a3:53:c5:
                    bb:4b:39:03:bd:cf:64:f5:28:f0:41:28:78:07:1b:
                    45:d2:2b:22:4f:40:4a:a2:a6:99:9b:00:e9:ee:45:
                    74:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:1B:11:1C:4C:A5:F6:A4:EA:47:05:8C:12:BE:ED:CB:DE:7F:47:71
            X509v3 Authority Key Identifier:
                keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:3c:dc:62:ac:bc:c5:c5:9a:5c:8c:1d:ed:42:c5:16:a2:ef:
         02:9a:11:20:ed:8c:12:33:eb:c1:6c:c6:20:d4:a7:c9:1f:fc:
         cb:67:3d:ff:0a:88:ce:54:3d:f9:e4:82:25:29:4f:f4:ff:ac:
         fe:f5:c9:01:30:6e:bd:f7:df:8e:d1:e4:be:cf:3a:de:01:0a:
         40:7e:b8:6d:63:14:16:da:af:9e:90:12:d5:a6:21:b6:54:e8:
         2a:8f:7d:3d:54:07:7d:80:dd:c1:04:f6:b0:d8:73:e5:0f:3c:
         a2:7f:43:b6:30:b0:c8:04:30:fc:7b:a2:6d:4c:86:0c:bc:7f:
         53:90:68:75:44:1f:1e:65:89:74:b5:4a:36:01:b4:e6:17:d6:
         60:47:e1:9d:7b:ae:d3:64:1f:07:c5:c8:17:6d:b4:60:63:47:
         24:62:22:44:04:0a:5b:9f:16:0f:5f:9c:26:c3:fa:62:ae:43:
         6e:a6:62:d0:8f:f2:16:e9:6e:ef:2a:a1:1c:f2:73:2a:26:3e:
         c6:cc:a8:4a:15:f1:a6:20:22:8e:80:0e:79:3f:3c:fe:bf:9b:
         7d:96:fe:91:d2:90:31:d3:bb:68:65:51:8c:ae:8b:d1:b2:69:
         81:63:ba:6e:55:85:99:bc:c4:5c:64:45:79:c6:48:be:33:4a:
         e4:ae:7b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:53:07 2026 by rpki-client