Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File:                     VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier:          ddYBSTTOTPb75rh//iqbLAgi2xh4uJbXwf8Ei5qy5HU=
Subject key identifier:   11:57:90:C2:A2:21:7D:BE:DA:6B:93:1A:D3:E2:FC:09:68:62:6D:07
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer:       /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial:       019DA2D352D6A07797D9B107CF0B8787110A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number:          0331
Signing time:             Sat 18 Apr 2026 23:00:51 +0000
Manifest this update:     Sat 18 Apr 2026 23:00:51 +0000
Manifest next update:     Sun 19 Apr 2026 23:00:51 +0000
Files and hashes:         1: MdhTY8foQJKx0mdlP05igAT5a9E.roa (hash: 1qZJayac2vfyAfUyRCRfqXyKoeJ0mRVVfL/eLJWxk1s=)
                          2: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: Ay31Jqyl+Dd8DPhQHGic9xh0umND3L3Nm7FkC2kdOnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:52:d6:a0:77:97:d9:b1:07:cf:0b:87:87:11:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
        Validity
            Not Before: Apr 18 23:00:51 2026 GMT
            Not After : Apr 19 23:00:51 2026 GMT
        Subject: CN=115790c2a2217dbeda6b931ad3e2fc0968626d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a1:72:3b:b4:86:11:25:b3:82:ff:5c:d8:13:
                    79:1f:b3:28:94:d6:b8:6f:2a:da:e7:47:8b:0e:1c:
                    c0:61:5a:26:a0:03:2e:c3:b3:47:c2:18:a1:9a:7a:
                    69:5f:52:a0:cf:74:b3:82:68:b9:9f:ba:4e:5e:2a:
                    eb:7b:37:b4:f9:2e:b1:f0:1d:b0:9f:ae:84:75:a2:
                    7d:a9:5a:21:ad:ee:02:be:16:3e:82:eb:20:7d:f8:
                    f4:97:ea:99:00:3f:a0:5d:70:35:84:e6:45:fc:88:
                    f4:70:51:14:c2:f7:43:db:27:b1:38:3b:33:8d:4a:
                    1c:79:af:fd:ec:08:21:63:78:90:51:91:2d:dd:3a:
                    84:43:51:a6:8c:35:66:ec:f4:fe:75:50:4c:67:1b:
                    9e:48:c0:be:c6:8c:3c:77:e5:6e:83:d0:1d:4f:92:
                    18:41:a9:b1:72:be:74:2e:66:3e:5e:4a:40:db:0f:
                    35:44:41:99:a6:e4:dc:99:13:78:5f:25:d0:de:28:
                    72:fd:60:88:ba:1f:e9:5f:b2:40:27:b3:8d:9e:73:
                    da:52:2a:48:c5:79:ea:de:c6:94:38:eb:47:97:82:
                    6d:7e:65:74:c1:75:57:6b:5d:67:a2:99:00:40:b6:
                    ff:84:77:f4:41:8a:48:21:40:1a:2b:44:9b:3f:ca:
                    b6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:57:90:C2:A2:21:7D:BE:DA:6B:93:1A:D3:E2:FC:09:68:62:6D:07
            X509v3 Authority Key Identifier:
                keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5e:8d:e4:40:2d:97:24:00:03:ac:1b:23:8f:9e:1d:c2:d8:
         33:83:20:6d:1b:e0:ee:d6:e5:c8:2f:c9:e6:ea:08:7a:37:45:
         05:32:df:50:29:bd:12:cd:47:c7:5b:bd:71:72:8d:54:b8:09:
         50:b4:e0:16:c5:e8:22:73:4c:09:71:a9:57:2a:8d:2e:01:7a:
         13:5e:98:35:c6:3c:85:c7:df:c9:08:f8:df:5b:e5:8f:99:e4:
         b8:3c:53:b8:14:42:b5:fa:7a:77:c5:b1:0f:b9:94:c6:86:73:
         d1:44:a3:3d:50:ea:19:a5:6f:10:f2:36:71:b3:0c:8e:69:88:
         ec:aa:ea:cd:14:d6:b5:14:09:40:fa:68:73:bd:9a:86:b6:73:
         87:5f:23:11:19:ef:36:8d:ad:d6:7a:63:09:c3:99:a5:da:c2:
         58:72:a3:9d:16:51:e3:b0:f3:78:ca:c2:de:b6:8a:b8:b9:7a:
         ad:9e:8d:3b:26:f7:13:88:83:b3:d2:ed:ef:38:d3:d8:12:da:
         3b:f4:10:27:18:b5:d6:54:3b:ac:f7:c5:ed:3a:8c:2b:6a:ba:
         0f:77:37:7b:24:3d:18:8b:28:df:1d:d8:bb:8b:71:52:94:b3:
         9c:7c:6d:cd:e0:ae:62:18:89:56:f0:e7:50:09:7e:72:bc:ce:
         2b:c2:f3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 07:00:02 2026 by rpki-client