Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File:                     VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier:          5oC8YiRPG2lwjx3XH2tcZMILu6PSfDfJbPb6HJqwCCI=
Subject key identifier:   90:D2:AF:E5:90:81:E6:6D:C1:B8:A7:EB:9A:80:9C:6C:DA:92:3C:0E
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer:       /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial:       019DA3418A18B7250F15F969A2BEF92931A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number:          15AD
Signing time:             Sun 19 Apr 2026 01:01:14 +0000
Manifest this update:     Sun 19 Apr 2026 01:01:14 +0000
Manifest next update:     Mon 20 Apr 2026 01:01:14 +0000
Files and hashes:         1: MxmtZpT39ziVe-pzqj79_Ed_jAo.roa (hash: 4OhUHwywmDOO3mmhT6ZwnGr79zua7TEwc4pRLTJjvFc=)
                          2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: hOJOc34n/NIlnEv8rCt3p1dLtOplJ0nAJhVk5/5Jj0A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:8a:18:b7:25:0f:15:f9:69:a2:be:f9:29:31:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
        Validity
            Not Before: Apr 19 01:01:14 2026 GMT
            Not After : Apr 20 01:01:14 2026 GMT
        Subject: CN=90d2afe59081e66dc1b8a7eb9a809c6cda923c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:35:46:ef:56:f3:eb:00:f8:78:94:17:66:a7:
                    2f:d1:27:28:f3:7b:74:45:83:bd:1b:91:08:b0:f5:
                    85:65:e6:99:9d:79:6e:78:ad:62:70:92:8a:6f:d1:
                    49:66:08:c8:f7:1e:d9:4e:06:66:a4:b1:8c:bb:40:
                    ee:47:e4:a2:00:66:91:3e:0b:c3:17:36:8c:f3:27:
                    d2:b1:7c:b8:b5:2b:26:91:9c:e1:d7:da:af:0d:cf:
                    bf:0b:ba:e4:f0:fb:94:44:80:0a:69:2a:26:c6:bc:
                    8e:95:66:b1:c1:4a:33:2e:10:34:18:7a:75:69:a4:
                    a9:23:0c:9d:03:e6:6a:90:d3:c1:c9:ec:b8:f3:82:
                    26:c2:63:6a:81:7c:de:51:97:02:84:d6:ad:60:10:
                    d2:42:97:4c:74:b6:0e:f1:d1:53:34:af:a6:9f:76:
                    b8:d8:53:84:f2:69:9c:83:53:35:57:d2:85:75:9d:
                    b2:ce:c1:da:57:a5:b0:fd:00:35:c5:f3:9f:81:60:
                    9d:e7:5b:cb:22:ba:04:82:b5:8d:c3:8a:4b:5b:97:
                    52:92:3c:74:fc:48:58:cd:c8:32:8d:cf:ba:17:ac:
                    44:f3:d1:b4:e1:8f:4c:a0:ad:0e:ab:1f:98:f7:e1:
                    69:e2:10:92:70:b1:d8:3f:c2:35:f0:da:87:29:6a:
                    55:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D2:AF:E5:90:81:E6:6D:C1:B8:A7:EB:9A:80:9C:6C:DA:92:3C:0E
            X509v3 Authority Key Identifier:
                keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:35:4d:9a:43:46:df:b0:fc:ea:8c:7c:4c:c5:6a:fd:88:4c:
         2d:8d:46:be:7a:c6:fd:f5:8a:7d:d7:88:9a:6b:f9:0a:39:d3:
         51:57:64:ef:4a:7d:bb:9c:ac:8f:81:ed:4f:b0:78:06:8e:6a:
         e1:ab:2f:4c:71:9f:cc:c4:c9:88:78:58:61:f5:ae:96:bf:85:
         c4:34:ae:6e:a0:63:82:f2:93:4c:22:94:27:43:d7:ae:ad:e8:
         ae:60:e3:20:0f:73:31:30:32:24:da:21:81:fa:ba:39:92:8b:
         89:a4:d1:17:18:ea:5b:26:20:e3:45:0b:9a:0e:ac:cf:a4:91:
         14:26:86:0d:cf:df:cc:b6:36:48:2b:02:95:c9:51:92:bf:8c:
         65:92:8a:5c:25:93:4f:7e:20:7f:20:4e:16:06:dd:53:73:4c:
         f5:26:86:fc:c3:10:6b:1e:d8:3b:3f:31:cf:37:53:7e:17:6c:
         81:d1:94:9f:a3:5e:ba:4a:c9:9e:59:9a:0c:77:76:25:a9:7a:
         3f:47:01:06:12:60:18:7a:40:03:e8:ba:73:91:9d:44:19:52:
         6f:0d:74:19:2d:96:7e:f4:41:77:5d:7b:b4:b3:57:40:b9:e4:
         e6:7b:90:e4:cd:06:08:c2:b3:40:78:57:78:8e:1b:d5:56:39:
         54:7b:6b:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQYoYtyUPFflpor75KTGoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmYwOTRmMDQyN2IxNGYzNDk5ZjdjZGY2MWQ4ODNiMDg4
ODYyOGEwHhcNMjYwNDE5MDEwMTE0WhcNMjYwNDIwMDEwMTE0WjAzMTEwLwYDVQQD
Eyg5MGQyYWZlNTkwODFlNjZkYzFiOGE3ZWI5YTgwOWM2Y2RhOTIzYzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTVG71bz6wD4eJQXZqcv0Sco83t0
RYO9G5EIsPWFZeaZnXlueK1icJKKb9FJZgjI9x7ZTgZmpLGMu0DuR+SiAGaRPgvD
FzaM8yfSsXy4tSsmkZzh19qvDc+/C7rk8PuURIAKaSomxryOlWaxwUozLhA0GHp1
aaSpIwydA+ZqkNPByey484ImwmNqgXzeUZcChNatYBDSQpdMdLYO8dFTNK+mn3a4
2FOE8mmcg1M1V9KFdZ2yzsHaV6Ww/QA1xfOfgWCd51vLIroEgrWNw4pLW5dSkjx0
/EhYzcgyjc+6F6xE89G04Y9MoK0Oqx+Y9+Fp4hCScLHYP8I18NqHKWpV3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDSr+WQgeZtwbin65qAnGzakjwOMB8GA1UdIwQY
MBaAFFQvCU8EJ7FPNJn3zfYdiDsIiGKKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGIt
MGUwNjhjNDk3MGZmLzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGItMGUwNjhjNDk3MGZm
LzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMDVNmkNG
37D86ox8TMVq/YhMLY1GvnrG/fWKfdeImmv5CjnTUVdk70p9u5ysj4HtT7B4Bo5q
4asvTHGfzMTJiHhYYfWulr+FxDSubqBjgvKTTCKUJ0PXrq3ormDjIA9zMTAyJNoh
gfq6OZKLiaTRFxjqWyYg40ULmg6sz6SRFCaGDc/fzLY2SCsClclRkr+MZZKKXCWT
T34gfyBOFgbdU3NM9SaG/MMQax7YOz8xzzdTfhdsgdGUn6NeukrJnlmaDHd2Jal6
P0cBBhJgGHpAA+i6c5GdRBlSbw10GS2WfvRBd117tLNXQLnk5nuQ5M0GCMKzQHhX
eI4b1VY5VHtrmQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:11 2026 by rpki-client