Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          Wo2GUFSxsb04NSq4MUDAJfWmaC+bkwEt38Q18GmaurM=
Subject key identifier:   3A:B1:85:EB:3F:E8:31:38:BD:24:E1:DB:42:F1:23:84:15:3F:2F:2C
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       019E21DB267C402C2BFF43EE009AB9F8B3AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          1557
Signing time:             Wed 13 May 2026 15:01:10 +0000
Manifest this update:     Wed 13 May 2026 15:01:10 +0000
Manifest next update:     Thu 14 May 2026 15:01:10 +0000
Files and hashes:         1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: nbovgkTsuXLjItvP3n327dUpCH1GOymKgmRK9U+4k/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:db:26:7c:40:2c:2b:ff:43:ee:00:9a:b9:f8:b3:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: May 13 15:01:10 2026 GMT
            Not After : May 14 15:01:10 2026 GMT
        Subject: CN=3ab185eb3fe83138bd24e1db42f12384153f2f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:95:66:42:34:1b:9d:64:3c:8f:a9:a5:eb:
                    1a:04:d1:bd:43:47:58:0f:be:6e:1f:90:fe:b8:19:
                    2c:fa:39:2f:a6:49:a5:7d:c3:40:31:02:ab:36:b8:
                    31:d7:ea:c7:2d:96:b6:8a:7a:a5:dc:8e:4e:82:74:
                    b9:de:32:df:e0:66:c5:3c:46:55:99:0b:3a:2c:0a:
                    fb:32:d5:db:5b:78:2c:19:d8:29:f9:4f:7a:47:af:
                    b1:00:d2:37:d9:0d:5d:1c:fa:5b:9b:4d:a6:12:e2:
                    77:b8:b6:20:ca:98:79:c4:c0:f8:ba:40:bf:f2:b8:
                    d1:7c:1f:79:b5:62:57:55:bb:10:7b:44:4c:74:16:
                    40:f5:44:7c:35:b4:d2:7e:af:e4:1b:08:cb:ae:e8:
                    49:75:ed:14:75:e3:de:a6:33:12:37:05:63:13:23:
                    e5:10:0f:57:5e:f3:5f:bc:ef:6d:81:3c:c5:1a:5d:
                    8c:91:23:67:05:2d:f9:c0:36:90:9e:e7:02:fc:08:
                    ce:45:67:4e:22:e9:6c:c2:34:22:22:8d:77:a8:d0:
                    e0:2b:49:2c:e6:fc:48:12:ec:2d:2b:30:67:a1:80:
                    b7:78:2b:9f:36:42:d6:ea:63:70:10:f7:df:53:ea:
                    ae:2a:03:33:d3:99:2d:90:c7:32:a5:fd:b0:7e:09:
                    c1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B1:85:EB:3F:E8:31:38:BD:24:E1:DB:42:F1:23:84:15:3F:2F:2C
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b3:0a:c6:89:ec:58:91:eb:32:c6:22:16:ef:46:96:48:9f:
         48:de:5b:75:e5:50:2b:9f:0a:a5:48:12:0a:57:b7:96:9d:24:
         1f:c1:77:b1:63:ec:02:57:4e:16:07:d2:5d:5a:05:89:27:d0:
         86:2b:d0:f6:dd:20:28:c6:51:77:39:ab:7c:29:2a:3d:e5:a2:
         a6:05:7b:20:7d:3c:bb:5c:a8:21:4a:8c:93:9c:9d:63:9e:bc:
         23:33:7a:62:6b:e8:dc:9c:70:cb:94:30:18:05:35:17:bc:33:
         ef:54:17:43:1e:99:d5:70:df:25:3c:10:bc:f7:ee:b5:58:9d:
         69:27:5c:b2:a6:45:c5:ff:17:40:cc:6e:ce:f4:35:da:55:32:
         9c:6d:59:70:34:a7:1d:f2:a2:be:21:f6:52:16:5a:16:0c:58:
         01:cf:11:81:3b:c8:17:17:f9:8c:93:e6:c2:d1:7d:23:5d:ce:
         04:eb:bb:9c:5c:2d:38:5d:ed:8c:1d:91:2a:a4:43:61:84:8d:
         70:19:96:92:9c:69:4f:f2:5a:ab:7b:c7:20:4a:44:3e:f2:64:
         7e:e2:fb:f6:66:99:3b:68:17:3b:8a:7f:d1:8e:e7:3c:b5:a1:
         ef:1a:3b:75:43:e7:05:73:94:39:5c:e2:a4:ae:64:2b:5f:01:
         d1:4e:63:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:03:14 2026 by rpki-client