Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
File:                     VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft (raw, json)
Hash identifier:          hjvEHAGXtu4DWa47HZO+dRDZn54BDPuNieRy2EIwi7I=
Subject key identifier:   E9:84:24:FD:EB:18:06:37:F7:9F:96:78:5A:AD:78:6C:4E:72:D7:8E
Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71
Certificate issuer:       /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
Certificate serial:       019DB2EB9419815CDC17306B9CD04441B4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
Manifest number:          0342
Signing time:             Wed 22 Apr 2026 02:01:16 +0000
Manifest this update:     Wed 22 Apr 2026 02:01:16 +0000
Manifest next update:     Thu 23 Apr 2026 02:01:16 +0000
Files and hashes:         1: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl (hash: +IxqVmljB+0fu6W8e75WhLK+YVcVGJBSoH+1Km8CTgE=)
                          2: ubGuCjFPVxiulreO2SsJV28pVp0.roa (hash: 3l6ifc5EarfHeykyetQk/cEwR8Fv+CohcJmFJI84qI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Apr 2026 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:b2:eb:94:19:81:5c:dc:17:30:6b:9c:d0:44:41:b4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
        Validity
            Not Before: Apr 22 02:01:16 2026 GMT
            Not After : Apr 23 02:01:16 2026 GMT
        Subject: CN=e98424fdeb180637f79f96785aad786c4e72d78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:1f:ef:d2:92:24:0b:4e:fb:de:14:44:f9:
                    8a:38:61:29:03:ba:10:39:40:1f:70:96:54:19:68:
                    88:dd:25:19:2c:a9:85:7d:57:ca:ae:af:d8:4c:0d:
                    24:4f:92:f8:e7:20:3f:aa:cd:3f:be:92:98:f2:be:
                    42:30:c0:b2:e1:fe:4c:65:e8:59:34:5b:69:82:82:
                    74:06:46:d4:81:0b:ca:7c:52:1b:ef:54:b9:c3:85:
                    f5:28:45:4e:d1:23:0d:c6:a9:ef:09:f1:be:9a:98:
                    0a:af:77:e5:75:a9:f9:4f:7f:da:e8:2d:a2:a5:52:
                    9c:d3:a0:22:db:75:8f:53:32:f8:f2:8f:0e:7a:aa:
                    b9:9f:01:79:af:4f:cb:44:dd:57:62:13:e5:7c:55:
                    99:28:fe:24:7d:29:80:94:53:67:c2:d7:00:a5:0f:
                    15:c6:00:26:a4:e9:ca:da:78:4b:1e:77:8d:77:df:
                    42:59:c4:85:5c:57:30:ff:d7:c7:15:0d:ad:61:71:
                    ee:96:d0:49:ab:15:14:5c:40:f2:4d:14:5e:7a:fe:
                    93:10:96:c4:4c:84:71:b2:e7:17:f1:72:a3:5e:8b:
                    08:d1:44:b0:3d:a2:69:2e:fe:b9:c2:02:25:5c:d9:
                    a9:b2:55:16:f9:db:05:30:bc:53:18:fc:54:b9:c1:
                    97:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:84:24:FD:EB:18:06:37:F7:9F:96:78:5A:AD:78:6C:4E:72:D7:8E
            X509v3 Authority Key Identifier:
                keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f3:bd:36:3d:06:e4:f8:9e:04:42:f2:fd:a2:f4:49:2e:82:
         6d:ab:e7:88:d2:40:f1:72:a9:68:5d:24:52:a0:58:56:af:1f:
         7a:20:c4:95:a0:51:d1:b3:ed:dd:6f:ce:88:6d:d3:04:83:e6:
         c9:76:40:c2:03:fb:89:70:c4:ff:29:4b:98:66:66:13:f4:09:
         c6:5c:c9:4f:41:5e:c5:69:3c:be:d6:24:67:91:cb:84:8b:c2:
         17:ff:ea:e8:fe:d9:e5:66:75:76:c3:e7:7c:03:dd:0a:1d:4e:
         9c:f2:70:3b:fc:b5:f1:55:ec:3d:fc:f8:47:fe:7b:29:c7:a2:
         78:1c:63:a5:c8:fb:af:f8:59:99:a1:93:79:3a:65:1d:04:17:
         4d:b5:12:9a:2c:82:fa:09:58:10:72:89:c9:6a:89:63:af:bc:
         35:51:cc:40:49:b6:c8:db:e8:33:37:ee:39:83:18:63:d8:05:
         69:cf:2e:1d:55:c8:f8:72:95:8e:a1:44:31:70:9a:9a:1b:28:
         ac:d5:24:88:73:0a:e6:33:e1:37:4b:1d:06:7e:e0:1a:9b:e0:
         ce:be:13:0b:5f:b0:53:aa:03:74:2e:a1:fa:7d:1b:18:24:7f:
         bc:8c:21:85:bb:6c:17:5d:a3:2c:f8:8d:1d:3b:79:ec:fe:ad:
         80:b3:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 12:04:45 2026 by rpki-client