Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
File:                     VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft (raw, json)
Hash identifier:          IfWD+H9/u1hR/zWv2DERnEoFvHjooj91jD1a8bxt5D4=
Subject key identifier:   66:7A:5F:7A:08:4F:FE:AD:71:73:81:55:44:F1:9C:F1:DF:1B:B9:7D
Authority key identifier: 54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E
Certificate issuer:       /CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
Certificate serial:       019D992B7D573E3B015BCA81B47F67D730ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
Manifest number:          1532
Signing time:             Fri 17 Apr 2026 02:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:57 +0000
Files and hashes:         1: TzFMlyGi4zFmCDU2h2qG4O6pMds.roa (hash: TJpZbRVZ7iaxJCXPVUNPAifcE/xvT1lmZtmQUt0op4c=)
                          2: VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl (hash: VtwTf3xsYM09t8ez50j/31KPThIzpjS4Vcvhmlu1OQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:7d:57:3e:3b:01:5b:ca:81:b4:7f:67:d7:30:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54143bee7a7ccf47802f55eae557ba5fcf9f795e
        Validity
            Not Before: Apr 17 02:00:57 2026 GMT
            Not After : Apr 18 02:00:57 2026 GMT
        Subject: CN=667a5f7a084ffead7173815544f19cf1df1bb97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a3:2f:26:73:bc:61:a0:25:e6:a8:93:34:39:
                    80:4d:24:ff:dd:e8:25:9c:72:ae:88:c8:87:71:94:
                    27:d7:e9:ee:86:89:f9:be:d5:4c:17:d0:2e:46:dd:
                    a5:55:fb:b8:f8:46:ad:12:57:13:94:44:4b:e8:ef:
                    1b:28:ed:55:76:54:3a:98:83:11:e5:53:2d:6c:78:
                    30:5c:52:55:d7:60:03:3c:ea:c7:76:b5:95:b1:e6:
                    1e:9d:2c:c9:41:d3:98:46:1a:52:f0:d7:3a:73:23:
                    b0:97:48:f4:69:8b:28:63:94:e6:8f:fc:1a:c0:cb:
                    61:91:c8:b0:fe:b3:fe:b7:57:ab:50:de:6f:e7:df:
                    de:5b:1d:82:60:ab:5b:f0:65:f1:15:fe:e5:63:88:
                    70:43:46:ec:3f:c2:80:c9:a8:08:ea:78:7c:c2:b1:
                    6f:8b:6a:8a:0a:ba:21:e0:a2:39:f5:05:d5:6b:90:
                    70:19:d6:7b:83:0c:d5:0e:b4:01:db:a6:ba:55:de:
                    da:7d:c5:d4:92:47:38:0e:cc:29:48:a3:85:20:a4:
                    e6:64:6d:33:bf:79:ff:81:f8:5f:81:b9:8f:96:bf:
                    dd:c9:ff:fc:2d:4d:58:3a:f2:47:75:c7:41:51:7d:
                    d1:4a:cd:6f:e3:9a:b5:57:7e:16:f3:81:21:32:f1:
                    84:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7A:5F:7A:08:4F:FE:AD:71:73:81:55:44:F1:9C:F1:DF:1B:B9:7D
            X509v3 Authority Key Identifier:
                keyid:54:14:3B:EE:7A:7C:CF:47:80:2F:55:EA:E5:57:BA:5F:CF:9F:79:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBQ77np8z0eAL1Xq5Ve6X8-feV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/65e218-d751-4176-81aa-b75b5f37db09/1/VBQ77np8z0eAL1Xq5Ve6X8-feV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:2b:b3:98:a5:64:aa:63:14:81:7d:06:ae:f4:a5:48:08:d7:
         7e:d5:79:1d:f5:55:a5:f3:87:fc:71:ac:f7:36:8d:22:96:1f:
         56:7c:20:b5:17:28:4d:24:77:36:d3:b1:93:a1:ae:5b:ed:35:
         64:d0:47:76:60:94:fd:bd:19:97:fe:61:a3:c5:89:6a:a4:92:
         22:a9:4c:a8:0a:82:77:63:3e:39:a0:f8:c4:a5:54:4c:29:c8:
         8c:f8:e2:1d:02:5c:cd:ae:6d:28:43:7a:91:d6:c5:02:78:47:
         a8:19:67:37:38:e9:ed:7e:97:16:ae:ed:42:15:55:6b:7f:19:
         27:5a:47:69:3a:84:d2:f1:65:04:ea:1e:aa:a3:35:2b:ec:3e:
         59:0f:ac:42:65:50:4e:ec:7e:03:15:b0:87:aa:d5:44:35:f6:
         d7:72:5a:99:8e:96:fa:8d:d8:28:45:b7:45:f8:7a:64:2e:cb:
         a8:49:ba:57:3d:f2:81:4b:79:5a:28:a0:d3:e8:f0:2b:8b:21:
         6b:93:ba:c3:73:d8:ba:25:98:10:ac:1e:a6:b9:f2:bb:c3:f3:
         b1:5e:55:52:41:9e:ae:4d:aa:99:d5:41:56:2c:bc:80:b4:1a:
         02:04:1d:b1:7f:96:69:cc:76:4f:39:de:d2:37:6d:a0:70:02:
         4f:ff:2d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:57:33 2026 by rpki-client