Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
File:                     VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft (raw, json)
Hash identifier:          5HyNQ2pvz3X/EvSui6Ldcj1ZOyUMavToADF8An00SJc=
Subject key identifier:   16:51:72:6B:7D:B7:39:6C:55:51:0D:F2:61:79:53:46:60:92:7F:0F
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Certificate issuer:       /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial:       019D992B6C0AFE4CE309C5F750771F27E66A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
Manifest number:          1444
Signing time:             Fri 17 Apr 2026 02:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:52 +0000
Files and hashes:         1: CZLgI1TrOoXIuuR8mtRn5Oxdnrc.roa (hash: aPXgiMnEH0aukIEV+u/T5KK1iHMqS2/X9emnoyzGOAM=)
                          2: SLZtN31ceYrOky3sUddoMo-Zyd0.asa (hash: Mg1W7yj5mjt/I157Chfa/2ODdFHcKS2JBnmxs2U+y/4=)
                          3: VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl (hash: s9ewqtf+cnr7Rpz2TpadzqGkSCwvgzcOmjZFrtq8ShU=)
                          4: YhZ9fwff9w4xgatIGpRL14zM3PM.roa (hash: iA9BHQGCf6MQBqEfoa7a5mJjbUujB8oZXq8R3pndWb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:6c:0a:fe:4c:e3:09:c5:f7:50:77:1f:27:e6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
        Validity
            Not Before: Apr 17 02:00:52 2026 GMT
            Not After : Apr 18 02:00:52 2026 GMT
        Subject: CN=1651726b7db7396c55510df26179534660927f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:97:0a:fc:d0:1a:b3:f9:c7:d3:b3:44:1d:0e:
                    43:a2:73:6e:68:a4:7f:da:57:49:7d:4f:9a:ef:9b:
                    a5:23:6c:7d:ff:3c:5c:58:55:ec:79:65:aa:49:61:
                    ec:4d:30:7b:8e:a0:8b:c8:f7:3d:a6:aa:c8:59:0e:
                    67:93:9d:37:c2:5b:32:31:33:cd:54:89:1d:e3:0b:
                    ee:6f:ac:ea:c0:e2:8d:5f:0f:04:4a:fa:a4:d2:bb:
                    86:a4:e6:53:91:76:8f:cf:74:7c:7c:ac:b5:c3:bf:
                    34:1b:9e:5c:f7:00:8c:dc:5a:c9:99:3a:f8:4e:c5:
                    e6:a4:f9:d1:10:25:9b:02:c6:0c:63:9a:fe:cf:e9:
                    6a:8b:35:d9:7e:58:b0:9a:f5:53:bf:1c:c9:87:a9:
                    58:32:8b:8b:e6:65:10:26:f2:f8:a8:1a:35:8d:0b:
                    61:01:81:d3:3c:70:72:6b:40:5d:9a:ae:d2:85:84:
                    da:21:65:2d:ae:b1:a7:6d:8f:dc:5e:0b:f7:38:49:
                    aa:78:22:91:ec:c5:17:8d:9c:8c:03:a5:5b:10:c6:
                    5e:a9:4d:1e:15:2a:2d:71:1a:4f:3a:ae:24:08:3c:
                    15:c6:78:d6:d3:bc:25:84:90:b6:5f:f6:f8:4d:2f:
                    01:38:d8:c3:ee:b3:e5:a3:27:80:e4:94:7d:4f:05:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:51:72:6B:7D:B7:39:6C:55:51:0D:F2:61:79:53:46:60:92:7F:0F
            X509v3 Authority Key Identifier:
                keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:93:56:38:bf:f0:4a:95:90:16:b1:d1:5a:45:40:29:d9:e3:
         92:3c:fb:4c:4b:5b:f7:1a:94:a0:63:9d:f6:fb:8b:45:04:6a:
         f2:44:c0:ea:21:a6:84:e1:01:db:ff:54:5c:66:2a:90:8c:50:
         8b:fc:cc:48:60:62:42:14:12:4f:69:2c:f1:e1:08:a6:b4:a4:
         a8:21:3c:99:67:f2:51:8e:ad:af:bc:6f:41:13:8f:bf:b1:fb:
         aa:f9:9a:4c:6d:d7:80:5a:f2:51:82:d9:df:60:77:01:b4:08:
         a2:a7:99:93:b4:cb:fd:6e:d5:b1:a1:aa:80:32:8a:f7:83:c8:
         b9:86:9c:35:22:d6:6e:2a:a9:e3:ba:44:c3:de:a2:67:48:df:
         81:68:e2:ed:b3:cd:1e:df:ce:f0:ee:f0:85:3c:ce:02:36:1a:
         ad:1d:51:5f:d5:bf:a0:c5:95:86:8e:2b:57:1c:51:6f:7c:d8:
         e2:69:d3:73:da:a5:2c:c9:ca:18:34:0a:95:5b:2f:b0:5b:91:
         36:f5:e3:74:82:83:d1:3e:f0:cc:d0:d4:5e:6a:b4:7a:11:37:
         ae:fb:0c:27:86:65:1e:1c:64:d0:99:16:1a:99:e6:fc:22:84:
         3b:a2:71:ed:3e:1e:34:79:37:74:79:7a:45:f4:38:1f:b0:ba:
         a8:22:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:17:27 2026 by rpki-client