Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File:                     vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier:          lhbWMU58Vrlov7SYp916m9DRow/VIPjzoMXvnoeoSzQ=
Subject key identifier:   41:2F:31:FB:F4:E8:F9:3C:2B:E5:87:0D:2B:08:69:CF:B1:50:12:B4
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer:       /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial:       019D984F929656EEBE6A23F0B6C46E7CAFF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number:          18C5
Signing time:             Thu 16 Apr 2026 22:00:44 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:44 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:44 +0000
Files and hashes:         1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
                          2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: jXPuriK145w7aXNG9rcNWllvM55bnanT5/33ZGcn7/c=)
                          3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
                          4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:92:96:56:ee:be:6a:23:f0:b6:c4:6e:7c:af:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
        Validity
            Not Before: Apr 16 22:00:44 2026 GMT
            Not After : Apr 17 22:00:44 2026 GMT
        Subject: CN=412f31fbf4e8f93c2be5870d2b0869cfb15012b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:51:a1:a0:6a:83:1b:17:5d:ae:ff:16:e7:
                    3d:8c:04:30:13:0b:1e:e6:1c:d2:60:29:84:b7:82:
                    4a:b8:f8:d9:80:00:48:f1:11:22:ff:57:ed:ef:91:
                    09:ec:a3:97:e6:70:58:7b:6b:f7:bb:1e:20:85:64:
                    82:3b:0a:a5:ee:7c:b4:51:ca:24:9e:f1:a9:b4:3c:
                    c1:cd:53:0e:4d:26:ce:d3:3b:8c:72:5f:bd:9b:83:
                    20:75:fd:44:3a:19:c3:03:90:6b:63:a0:68:4c:88:
                    aa:9f:36:8c:06:fa:19:81:55:2f:0f:25:3e:0f:22:
                    86:0a:c5:e5:b5:42:a5:a0:f4:d4:a0:bc:87:98:3b:
                    de:e5:7b:2d:de:c5:ec:53:a7:60:a5:2a:7d:df:70:
                    36:94:e9:fc:ac:0e:17:9f:f0:fe:d7:2f:6c:16:a1:
                    49:d4:1a:84:0d:42:7e:bb:5f:e9:ae:54:d0:1e:91:
                    9b:0c:bf:b2:e3:2d:fc:0e:9a:a5:bc:fb:a0:a9:1f:
                    7a:48:8a:17:a6:4c:56:8d:ea:a8:d4:fe:4b:15:02:
                    3b:ff:dc:be:3a:66:15:19:dd:95:19:f3:21:0c:79:
                    c3:cb:dc:e8:3f:3f:d7:5a:b2:f3:84:2e:63:45:89:
                    05:bd:0a:b0:e5:2b:1b:bf:67:f4:47:3a:0d:7b:82:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:31:FB:F4:E8:F9:3C:2B:E5:87:0D:2B:08:69:CF:B1:50:12:B4
            X509v3 Authority Key Identifier:
                keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:40:3f:13:e6:95:d5:3d:45:35:56:60:b1:31:65:b4:0a:87:
         b2:24:f7:cf:48:80:78:b0:8f:05:13:a7:fb:dc:dc:f9:69:83:
         e8:e8:4e:78:3f:29:0d:5d:32:50:a1:dc:55:27:a7:7d:66:da:
         95:21:a4:43:32:90:9d:46:90:34:a6:19:9f:21:37:58:fd:5a:
         dd:f1:9e:90:2b:b9:f2:ab:75:f1:7a:f1:1d:6b:74:c7:e5:55:
         a5:95:24:c4:45:e6:50:a1:a1:db:0c:11:c3:8f:72:d9:16:ff:
         46:04:cd:b5:14:8d:d9:2e:be:36:8b:b3:db:7b:7e:5e:36:22:
         3f:11:4d:99:e8:60:8e:3d:6d:88:fc:4e:b8:00:a5:8f:db:d0:
         63:5a:33:46:56:de:72:ac:96:55:db:e0:3b:45:c4:77:b1:f8:
         1f:8e:eb:a4:03:11:3c:9f:c2:70:71:d6:7f:53:ee:4b:ab:86:
         26:25:bf:3b:5f:4f:a6:87:0a:a4:ee:00:6e:0b:41:ea:23:39:
         fb:f3:24:b6:b8:c3:d7:b6:28:03:e6:d9:55:95:16:08:86:70:
         54:d6:70:d6:40:30:b9:89:cb:4d:3b:4a:40:89:c8:22:6c:f1:
         d5:25:01:8b:12:57:de:43:cc:a5:db:7d:f6:b9:3d:b7:a7:a8:
         47:59:2c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:17 2026 by rpki-client