Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
File:                     v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft (raw, json)
Hash identifier:          GeKiQ3++7zP+I1zMAXZYsZ+dr2vf4FJfkWiY6tC5/b4=
Subject key identifier:   B8:24:FE:46:13:FE:16:49:06:D3:36:43:84:42:A4:5E:8D:F1:2E:EF
Authority key identifier: BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA
Certificate issuer:       /CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
Certificate serial:       019D9C2C9992B2B24CBDA971A40AB4459FBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
Manifest number:          1561
Signing time:             Fri 17 Apr 2026 16:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:01 +0000
Files and hashes:         1: 380_fONoo0vKuEzHZKFuqEUscU4.roa (hash: KA3zr/tNX5l+b8Lbxtnhhgvm4RebrcqoWUwyDtx/yGk=)
                          2: v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl (hash: rX+hf17Nv18tE6NCt/8nHZyO6nWn5ChmLo1nC0aD02k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:99:92:b2:b2:4c:bd:a9:71:a4:0a:b4:45:9f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
        Validity
            Not Before: Apr 17 16:01:01 2026 GMT
            Not After : Apr 18 16:01:01 2026 GMT
        Subject: CN=b824fe4613fe164906d336438442a45e8df12eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f6:1f:95:82:cd:67:9d:46:1d:c7:08:d7:2f:
                    e1:f3:a3:c4:cf:fa:1f:08:ec:70:db:90:66:f1:9c:
                    97:db:3c:b7:9a:07:1c:a3:d3:d4:fb:89:2a:a1:7f:
                    10:d9:a3:9b:9e:65:92:87:fa:a7:0f:0c:f5:d9:94:
                    a6:ae:98:a3:9c:3e:f5:2d:ad:c2:41:29:16:cb:a8:
                    1b:67:73:5c:cb:7f:f9:a9:b2:68:fd:03:d4:f5:ec:
                    7f:2a:8a:d2:8b:c2:34:fd:a1:51:f7:b1:99:9f:e0:
                    81:73:ee:ea:da:9c:cd:57:89:f9:a8:4f:4a:5b:1f:
                    1d:d8:bb:6a:c5:fb:94:a4:f3:fb:d4:9c:e9:ef:e0:
                    eb:c9:16:ed:19:af:99:0d:22:a7:4e:97:fe:d5:ee:
                    45:f1:d0:f7:ef:b5:e9:ae:7e:f4:b7:e7:80:b3:5a:
                    12:bb:75:13:d5:33:2b:19:d0:6b:2c:0e:11:30:c1:
                    9a:d6:e7:82:10:c5:c6:a1:99:46:4f:39:e6:f6:48:
                    e4:ec:07:ee:16:65:f9:ab:9b:ef:d7:ba:7d:e6:9a:
                    9f:ce:2c:52:e3:6c:97:48:28:11:93:ad:66:b6:71:
                    70:45:ed:e3:93:a1:29:df:f6:72:ec:f0:fc:a5:4b:
                    01:c1:0f:19:8d:93:3e:ec:a1:c7:4f:1f:de:00:d5:
                    1b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:24:FE:46:13:FE:16:49:06:D3:36:43:84:42:A4:5E:8D:F1:2E:EF
            X509v3 Authority Key Identifier:
                keyid:BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2a:16:1f:89:03:2f:ff:ca:55:3f:97:de:10:67:b6:62:15:
         79:3f:d8:28:69:f4:60:ac:ad:56:5e:93:df:b2:4c:e2:c7:f0:
         8e:65:b6:bc:e6:4a:91:c5:b7:2a:8a:74:e0:e2:22:e8:1b:d3:
         36:f5:43:2e:09:9c:7f:50:d6:73:0c:b3:43:9f:5b:8d:c9:9c:
         d5:78:44:7e:e4:28:c7:82:66:f5:01:29:8d:70:c4:f6:32:ee:
         d7:cd:87:01:a5:cb:36:f8:cd:21:77:d9:a9:a7:9e:c4:cb:33:
         fa:8c:c7:1e:1b:de:7c:56:ff:b6:b1:df:53:3e:0d:89:51:b0:
         a2:44:6b:3b:79:a2:9d:e5:a4:97:84:79:06:2c:e4:19:bf:a3:
         81:cf:0f:77:8f:9c:27:f5:c3:db:f4:f7:5d:7c:26:7e:51:91:
         36:64:5d:26:b3:a3:57:ac:52:e6:7e:c6:0c:0e:47:d2:ec:97:
         6d:c9:12:0a:2e:f1:7d:0a:68:f5:ea:d4:0b:1e:2d:85:c7:f9:
         c6:63:f3:63:75:0d:c2:04:75:da:78:fe:51:46:90:cc:70:97:
         6f:84:87:e7:1d:33:b2:31:8c:d6:c1:7f:7d:38:62:fd:5f:1f:
         bc:18:f2:ab:0c:56:10:17:08:02:7e:af:3f:26:45:e5:45:8e:
         c5:1b:35:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:37:25 2026 by rpki-client