Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File:                     VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier:          bX/rjL00o6c1jcJR9b6Q3WVRzSCmYMttYb0lGxnmQNA=
Subject key identifier:   5C:C7:EC:9B:7C:5D:14:EE:D1:50:D7:F7:DF:C4:4B:E2:99:E3:D2:7B
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer:       /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial:       019D9818EBFE024F2C9D33430B02A6D1D922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number:          071C
Signing time:             Thu 16 Apr 2026 21:01:03 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:03 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:03 +0000
Files and hashes:         1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: rBN9hEXXtpQSLsXdwXcLaDLBsggtqr158wMgH3or6ag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:eb:fe:02:4f:2c:9d:33:43:0b:02:a6:d1:d9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
        Validity
            Not Before: Apr 16 21:01:03 2026 GMT
            Not After : Apr 17 21:01:03 2026 GMT
        Subject: CN=5cc7ec9b7c5d14eed150d7f7dfc44be299e3d27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:60:29:4d:00:1e:9f:e1:60:60:67:ec:6f:
                    22:3e:3e:2a:9a:2f:a3:83:2e:8e:b8:96:83:d5:49:
                    60:9f:7c:de:a1:86:46:d4:26:4b:b9:cc:ac:9c:47:
                    12:ea:64:f4:b9:a0:6c:73:91:eb:95:fb:dd:73:5f:
                    09:bc:aa:c7:b8:fd:45:57:4e:29:fc:a0:be:6b:e4:
                    8e:d5:35:04:f1:e2:67:92:f9:cd:dc:a6:a3:2b:87:
                    c4:7d:06:6e:e7:b0:ec:47:0d:ff:25:48:6b:52:51:
                    34:1e:e4:3e:34:4a:58:74:59:17:30:c4:e3:8d:af:
                    32:ab:8a:af:46:c8:1b:b2:d2:fa:df:62:b5:00:5e:
                    73:7d:53:05:55:d0:aa:c8:4d:b4:e6:13:f3:e7:17:
                    37:41:d7:3d:65:e6:cb:c1:29:a8:04:bb:f8:be:e1:
                    46:a3:aa:b6:a8:94:82:ba:63:52:20:6c:e8:a7:68:
                    0a:bb:a4:d1:fd:1c:ec:4e:28:48:b6:e5:83:df:81:
                    e6:cd:a7:59:5c:d1:3f:54:12:e9:a0:2a:31:3e:00:
                    bb:64:ad:c4:8a:c9:3a:ed:9b:42:ba:62:55:46:64:
                    28:a7:31:35:24:18:df:97:6e:35:13:3d:99:83:e2:
                    29:28:94:cd:18:86:06:59:36:ad:66:25:46:c0:eb:
                    fd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C7:EC:9B:7C:5D:14:EE:D1:50:D7:F7:DF:C4:4B:E2:99:E3:D2:7B
            X509v3 Authority Key Identifier:
                keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:d1:ac:d6:ec:94:30:aa:9e:5a:78:80:bf:15:4c:83:6b:
         36:ba:df:f5:03:7e:88:d3:d7:f3:49:3f:80:28:63:fa:3c:8d:
         7f:cf:d9:ab:11:39:5b:da:08:12:ba:d4:b6:89:05:56:95:a8:
         d3:92:3f:a6:22:f2:9a:dd:85:5c:cc:47:9e:77:93:b0:3f:eb:
         2b:ac:a2:74:6f:46:94:23:18:f8:bc:a6:bd:da:7c:36:d5:c1:
         4c:2f:bd:20:cf:0b:29:0b:58:eb:af:ff:e0:12:4e:4b:9d:c5:
         4f:68:e7:ea:b4:09:0f:a8:59:e2:b0:29:8f:43:14:69:36:58:
         67:85:75:bc:03:09:92:c5:8f:f6:4d:a2:05:3f:72:78:ff:cd:
         26:e0:5d:09:66:f0:86:f7:5a:1e:60:e0:cd:59:a2:3c:5b:23:
         ad:db:c3:b7:08:17:0a:6f:60:49:08:0d:ec:1a:24:53:93:6c:
         a3:5d:d7:3a:ce:e7:5e:be:f3:04:22:f9:3e:08:d1:a5:6a:55:
         01:16:ea:83:4e:68:5b:a5:c9:0f:fb:d5:c4:2e:2f:2d:74:9a:
         ae:39:6a:4d:83:5e:1d:af:aa:19:91:69:96:d3:f4:ae:0b:35:
         90:8d:49:8c:7f:4b:7a:5f:b2:4c:85:63:e9:da:d7:48:20:99:
         80:e4:de:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:45 2026 by rpki-client