Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File:                     VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier:          Xyf8jq1+5P8Q+r2vMBJLvYPVBa6bPpd5jrpxikbeTEo=
Subject key identifier:   B5:EB:82:1A:CD:95:C0:5C:C2:B1:87:EA:D7:41:EB:65:AE:55:EB:77
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer:       /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial:       019D9AE2EB02D5B5AA5376347D307D8C1AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 10:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:55 +0000
Files and hashes:         1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: wmAGSWDrpjk8PSioQjGOJN/5RTZAJUns+2Rh8+MhrP4=)
                          2: mzMqmoVSIFuCLCPTGJNgkppjofc.roa (hash: wetUFpoO1LIZACM6xLS3nZwdIp4jjp+fdNMN2abBvwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:eb:02:d5:b5:aa:53:76:34:7d:30:7d:8c:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
        Validity
            Not Before: Apr 17 10:00:55 2026 GMT
            Not After : Apr 18 10:00:55 2026 GMT
        Subject: CN=b5eb821acd95c05cc2b187ead741eb65ae55eb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:b3:89:51:75:b1:44:66:56:95:6f:87:67:
                    6c:d2:c5:5b:42:09:48:b7:3c:50:09:88:59:ad:d0:
                    2c:d4:c7:07:ee:6f:98:f0:c1:ac:d8:59:c3:f0:2c:
                    7e:fe:6e:e9:bd:34:32:8b:db:eb:a3:07:af:0f:a7:
                    ab:20:0b:02:58:82:36:60:73:71:c1:d7:57:c4:62:
                    33:0f:90:01:96:81:7e:a1:03:87:ab:af:d0:88:d7:
                    de:d0:e6:de:ff:41:c9:03:28:62:2f:f3:ce:73:9d:
                    37:b6:48:b6:d7:00:15:74:99:0f:44:91:9f:17:9d:
                    e1:15:bb:af:c5:be:a1:bf:ad:51:a7:0a:fd:d1:6f:
                    bd:94:e0:a3:97:60:0f:2a:75:fa:80:7f:e6:20:19:
                    4c:d1:a4:14:22:91:ca:77:42:ee:ac:8a:77:e2:81:
                    70:6c:2b:26:37:3c:e2:8f:a4:01:32:ee:c2:e5:84:
                    6c:7c:1c:d6:c2:58:2e:6a:a4:75:eb:79:24:b5:03:
                    0b:2d:fc:39:f4:76:42:f1:9b:a8:ba:6f:36:ec:de:
                    d2:56:6d:29:32:4c:93:04:68:f8:74:57:29:e1:3d:
                    88:59:05:d7:9d:8d:73:7c:ad:bc:c3:c8:06:3c:d9:
                    35:a7:66:f5:0d:9b:ec:07:13:39:8d:77:ec:45:4c:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EB:82:1A:CD:95:C0:5C:C2:B1:87:EA:D7:41:EB:65:AE:55:EB:77
            X509v3 Authority Key Identifier:
                keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:04:3e:d4:bf:2a:60:c6:78:76:89:2d:45:1b:78:b7:8b:33:
         98:81:51:19:24:a5:af:05:8a:cb:98:91:40:ce:80:b5:45:de:
         86:b2:5b:9e:38:c5:de:76:4b:b7:8c:66:da:89:4d:56:55:86:
         76:de:77:4c:66:03:84:bb:d6:6a:93:d4:d1:92:ef:84:57:80:
         a5:02:bd:8d:a0:9b:36:bc:48:53:10:4b:b5:e5:bc:6c:26:0e:
         ee:0e:fe:4a:91:c1:17:d5:27:73:81:8e:14:c3:cc:da:e0:f7:
         a9:33:c9:0f:b8:f3:96:ca:5b:57:41:1c:4a:a2:f1:87:cb:b6:
         27:59:32:e8:e2:27:ff:ff:76:89:90:0e:32:5c:47:db:f3:39:
         bc:a9:58:45:3c:6a:89:34:f3:02:4e:4e:89:53:df:d0:c2:17:
         0b:66:98:f5:ae:5d:27:3b:08:8b:c8:58:2a:30:47:44:ea:e1:
         04:fe:dd:5f:fe:12:28:c1:4e:6e:9c:81:25:3d:ca:d4:51:ab:
         32:e7:36:6e:c1:27:46:c2:64:68:bd:0f:5f:cb:2f:3a:0d:19:
         e0:50:d9:be:82:34:6f:48:2d:c2:fd:72:10:d4:e9:96:7c:1c:
         9e:98:eb:0a:62:67:26:f6:9f:c7:b8:ce:de:b0:15:2b:ac:30:
         dd:86:1a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:13 2026 by rpki-client