Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File:                     VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier:          M0kM4TpdHS2HuG9cuXUUZVQja+OAye3lNj6lrkNHC4E=
Subject key identifier:   77:FC:EE:F5:71:EE:91:A0:58:8A:F3:FA:BC:5D:A1:DB:58:98:BF:0D
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer:       /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial:       019DB2EB60B7EB125174794312F3A9128357
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number:          03C9
Signing time:             Wed 22 Apr 2026 02:01:03 +0000
Manifest this update:     Wed 22 Apr 2026 02:01:03 +0000
Manifest next update:     Thu 23 Apr 2026 02:01:03 +0000
Files and hashes:         1: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: 1Te6/jl0w7djplVtHEujPNwPemwLRa1lyqWzCQCP8XM=)
                          2: rDteTEGGPxt7CaJGBgKr1ALLgTM.roa (hash: TV2GDIQbIwm8aM3NmO/8wyhyHPMnS3b2eZNvh57dJ/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:eb:60:b7:eb:12:51:74:79:43:12:f3:a9:12:83:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
        Validity
            Not Before: Apr 22 02:01:03 2026 GMT
            Not After : Apr 23 02:01:03 2026 GMT
        Subject: CN=77fceef571ee91a0588af3fabc5da1db5898bf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:51:6c:c4:8d:07:66:a4:40:c7:06:06:60:b0:
                    ad:c9:0e:5a:2e:ee:84:9a:13:e7:63:03:64:08:49:
                    b3:61:94:67:f5:e5:7f:98:04:97:52:99:3c:63:13:
                    06:4a:82:e9:2a:ea:8f:57:ab:23:e2:55:53:5e:a4:
                    c6:1f:4a:50:24:79:a4:d5:ef:a4:c3:26:03:e5:1f:
                    0b:3a:68:8c:d8:5e:f6:69:63:3f:39:8a:3b:28:bd:
                    a3:eb:de:36:63:92:ee:81:b1:00:cc:f6:82:a2:d4:
                    04:81:b8:a9:30:f8:51:37:d1:7c:10:73:74:b9:ee:
                    2e:39:7b:c8:31:34:46:fc:68:ce:51:0b:1f:03:7c:
                    a5:c1:a0:06:03:37:a9:ce:18:d4:6c:62:3f:b1:82:
                    20:3e:2f:58:d3:f5:00:4e:09:e2:2f:c5:55:87:b1:
                    74:1f:66:52:6b:eb:7f:dd:15:fc:f2:da:01:26:a1:
                    f6:93:04:f4:5a:ca:cd:f9:9d:85:09:d4:90:4a:c1:
                    74:bd:80:14:2d:c7:69:b8:58:11:13:c3:60:06:95:
                    b0:27:61:1c:3d:6c:88:fc:e6:3f:23:02:66:4f:97:
                    0f:58:e3:65:07:9b:10:e2:08:9f:b1:fe:e1:7f:34:
                    f8:3c:59:44:25:70:17:6b:f4:55:96:4e:bc:e6:e6:
                    3c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FC:EE:F5:71:EE:91:A0:58:8A:F3:FA:BC:5D:A1:DB:58:98:BF:0D
            X509v3 Authority Key Identifier:
                keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:95:1b:af:cf:02:97:93:63:c7:41:9c:1f:21:2b:97:69:59:
         63:c5:ac:e8:f0:df:03:0b:8e:3a:ac:3a:d7:91:97:12:49:8f:
         d8:3e:0f:63:3b:2c:b0:8b:27:e8:11:ba:1d:1b:34:62:fd:0c:
         21:3a:f8:1a:81:fc:13:67:27:59:de:5f:95:df:33:bc:80:9f:
         d0:8a:39:28:ec:fc:aa:71:1f:8f:fd:c8:7e:1e:81:e0:1f:16:
         c6:76:8b:33:42:64:44:c8:b2:ca:34:07:18:c7:fa:a1:c1:5b:
         58:df:92:f9:64:9c:d5:68:5b:24:7e:71:33:53:2f:bf:c3:dc:
         c5:be:f8:30:c4:06:49:ca:c8:1e:1b:57:56:69:c6:5e:8b:e4:
         42:78:c3:85:b3:a3:fc:ca:cf:0b:57:12:97:82:c6:06:1c:43:
         9f:bd:34:06:77:e4:4d:2b:fc:10:50:97:d6:51:9c:25:fc:80:
         27:f6:5a:b6:82:c5:72:f6:2a:51:0c:58:9e:b3:3b:b2:b0:2a:
         69:62:1a:63:33:6b:55:df:bd:7c:dd:34:2e:18:5f:ce:48:35:
         2e:f3:ba:f4:2c:09:fd:6c:cd:63:12:29:39:54:8c:f8:46:3d:
         a8:10:ee:92:8c:7b:01:de:c9:1e:93:46:17:71:24:cd:3b:92:
         fc:f2:b2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 09:12:29 2026 by rpki-client