Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          3n85m4B8/YhGYAYu6GBzanNpFW9woqC361pZEa/bzGM=
Subject key identifier:   13:E2:E1:29:2F:A1:BE:BB:DC:E6:B6:31:D0:D2:26:35:4A:5F:9B:AB
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       019DCED0C53CB9617253C9B720DF9B32E6EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          152C
Signing time:             Mon 27 Apr 2026 12:01:21 +0000
Manifest this update:     Mon 27 Apr 2026 12:01:21 +0000
Manifest next update:     Tue 28 Apr 2026 12:01:21 +0000
Files and hashes:         1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: 23HRNnE1KWEpBA/2uzBlW89laV7tXBNJa4VpkIc+v5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:c5:3c:b9:61:72:53:c9:b7:20:df:9b:32:e6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Apr 27 12:01:21 2026 GMT
            Not After : Apr 28 12:01:21 2026 GMT
        Subject: CN=13e2e1292fa1bebbdce6b631d0d226354a5f9bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:d8:62:c9:73:37:89:91:fe:8b:88:f8:9e:7e:
                    3e:de:73:c7:91:43:5d:af:ba:de:fb:c2:90:e6:52:
                    4f:c5:ff:eb:85:75:55:b1:ff:6d:c4:79:e4:c5:78:
                    65:3a:c5:36:1a:58:10:85:bf:87:15:ec:10:3d:29:
                    52:dd:ac:4a:7a:9e:b2:9d:d8:53:32:ad:7f:73:82:
                    43:9a:b6:40:c0:66:f2:78:a4:a1:32:74:b8:7c:42:
                    28:a7:da:d3:55:f7:e3:f3:68:1c:fc:5e:88:f3:a3:
                    fd:81:1b:b1:60:13:f3:b1:3d:8f:37:73:52:db:58:
                    16:4e:08:66:05:a8:44:3a:81:26:3e:4e:69:29:8d:
                    7e:c9:fb:20:77:44:6f:e1:f2:ec:d6:93:9d:dc:f3:
                    23:fb:d9:b8:78:7f:41:67:d4:1d:18:81:e8:6d:22:
                    22:b6:18:28:9a:d0:a7:46:e6:89:bf:d0:44:77:fa:
                    15:e1:08:1a:ef:6f:35:d6:6e:e9:49:4a:a2:b7:31:
                    13:90:22:e7:6e:0c:1f:c6:d0:fd:02:29:76:53:8d:
                    b1:18:6c:bc:ee:fe:53:8e:df:73:70:80:09:d6:4b:
                    02:23:98:45:fe:2b:cb:68:77:72:0b:84:32:b0:c4:
                    a4:fa:96:c1:6f:30:d1:69:d3:9d:95:41:d2:73:ad:
                    1e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:E1:29:2F:A1:BE:BB:DC:E6:B6:31:D0:D2:26:35:4A:5F:9B:AB
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:14:4f:a7:80:40:46:f3:09:2b:13:74:92:2e:ab:3a:e2:6d:
         a3:6d:cd:2d:b6:0f:ef:09:77:82:a4:99:47:a7:26:43:4e:cb:
         44:d3:33:32:14:40:5b:c0:6c:e5:13:2a:11:33:2e:51:61:1d:
         14:76:cf:fe:7c:b5:cd:2e:a9:79:ce:2e:a1:a1:89:00:ec:c8:
         41:df:e9:0e:a9:d6:94:63:5c:f1:8d:9d:99:5a:46:68:f3:e8:
         86:2b:aa:60:ce:9a:2c:7f:31:a3:38:b9:65:26:45:a6:83:96:
         79:2f:f9:9c:ad:49:71:9f:74:0f:9c:b5:77:31:43:bb:db:ed:
         b6:d0:7f:56:08:bb:a2:6a:96:74:8b:e4:a8:db:a7:05:46:ff:
         02:6a:ec:85:1d:72:6f:3f:fe:18:e2:aa:7c:bc:93:66:08:d5:
         49:e2:9e:6b:fb:7a:22:14:f0:ef:d2:2a:7c:cb:88:a5:dd:46:
         57:f4:08:f1:b4:6f:4a:39:0c:3a:cc:67:95:c9:24:e9:3b:83:
         21:dd:e7:1c:97:c2:bb:04:7c:e8:8d:62:6c:1f:21:18:5d:3f:
         15:38:df:fb:af:52:10:b0:bd:7a:dd:e8:1c:b8:3d:43:53:91:
         60:60:68:e8:42:ea:d8:42:c9:a3:35:d6:bd:78:28:28:7e:b9:
         1d:11:f7:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0MU8uWFyU8m3IN+bMubrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi
NDExZDEwHhcNMjYwNDI3MTIwMTIxWhcNMjYwNDI4MTIwMTIxWjAzMTEwLwYDVQQD
EygxM2UyZTEyOTJmYTFiZWJiZGNlNmI2MzFkMGQyMjYzNTRhNWY5YmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NhiyXM3iZH+i4j4nn4+3nPHkUNd
r7re+8KQ5lJPxf/rhXVVsf9txHnkxXhlOsU2GlgQhb+HFewQPSlS3axKep6yndhT
Mq1/c4JDmrZAwGbyeKShMnS4fEIop9rTVffj82gc/F6I86P9gRuxYBPzsT2PN3NS
21gWTghmBahEOoEmPk5pKY1+yfsgd0Rv4fLs1pOd3PMj+9m4eH9BZ9QdGIHobSIi
thgomtCnRuaJv9BEd/oV4Qga72811m7pSUqitzETkCLnbgwfxtD9Ail2U42xGGy8
7v5Tjt9zcIAJ1ksCI5hF/ivLaHdyC4QysMSk+pbBbzDRadOdlUHSc60ecQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPi4Skvob673Oa2MdDSJjVKX5urMB8GA1UdIwQY
MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt
M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4
LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxRPp4BA
RvMJKxN0ki6rOuJto23NLbYP7wl3gqSZR6cmQ07LRNMzMhRAW8Bs5RMqETMuUWEd
FHbP/ny1zS6pec4uoaGJAOzIQd/pDqnWlGNc8Y2dmVpGaPPohiuqYM6aLH8xozi5
ZSZFpoOWeS/5nK1JcZ90D5y1dzFDu9vtttB/Vgi7omqWdIvkqNunBUb/AmrshR1y
bz/+GOKqfLyTZgjVSeKea/t6IhTw79IqfMuIpd1GV/QI8bRvSjkMOsxnlckk6TuD
Id3nHJfCuwR86I1ibB8hGF0/FTjf+69SELC9et3oHLg9Q1ORYGBo6ELq2ELJozXW
vXgoKH65HRH3eA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:03 2026 by rpki-client