Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
File:                     Vw0bOThaPe0e8GPRob6TWTtx_C4.mft (raw, json)
Hash identifier:          bNlZqd1KGfrGCLdAqJg77NkJJWQy6fmqF6+k7Rd6kcs=
Subject key identifier:   1E:58:AE:F2:D4:89:97:F3:0A:62:49:E8:9B:B9:50:AD:0F:3F:00:55
Authority key identifier: 57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E
Certificate issuer:       /CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
Certificate serial:       019D992B90F3B387F26EC5DA90EF7ABF073F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 02:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:02 +0000
Files and hashes:         1: Vw0bOThaPe0e8GPRob6TWTtx_C4.crl (hash: u5t3e7lYHvvrsKXH8wJA0WH3PiMlO537l3cmU7JLw4A=)
                          2: yrpQZLNucx1j8PywITpDY3JOGP8.roa (hash: 4F+vRyqIvM13I+8M46omVsNmWEmbQ6DoH7yXWjC/gow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:90:f3:b3:87:f2:6e:c5:da:90:ef:7a:bf:07:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
        Validity
            Not Before: Apr 17 02:01:02 2026 GMT
            Not After : Apr 18 02:01:02 2026 GMT
        Subject: CN=1e58aef2d48997f30a6249e89bb950ad0f3f0055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:33:aa:66:a9:e2:25:fd:23:08:bb:83:c3:
                    21:4e:9a:16:be:81:c5:0d:aa:46:e5:03:4a:83:a6:
                    1d:22:e5:48:68:8c:9a:0a:52:de:09:56:27:82:77:
                    22:b4:0a:3b:f1:3a:b7:c9:0e:6e:92:da:93:0c:35:
                    58:f4:96:e4:93:84:54:98:e0:da:58:b2:ce:1c:2f:
                    76:2c:80:d4:91:6c:ea:9b:59:75:3f:4e:1e:b4:2d:
                    af:6e:79:1a:9e:c0:f3:b8:84:88:a4:cb:bb:6c:d4:
                    fa:1a:ef:cb:b5:0c:e3:3f:12:25:34:70:7e:0a:1a:
                    5a:da:53:45:c7:6b:06:ce:0f:74:36:d6:0b:f0:cb:
                    cb:d2:8e:db:a6:41:d7:44:63:47:20:7d:34:d5:16:
                    5c:a8:92:1f:5d:1c:da:55:bc:9d:39:b9:1d:34:ee:
                    a8:4b:4d:e0:83:51:7b:56:c3:6a:94:7c:ef:3c:d0:
                    ad:7c:50:50:35:3a:33:67:57:3d:8c:06:0e:01:bb:
                    4f:60:9f:0e:62:9d:4d:59:c7:ca:71:b2:aa:a4:3c:
                    bb:6b:f4:67:3c:87:a1:82:f6:33:af:08:d7:25:33:
                    73:f4:61:c2:dc:8e:93:9d:ff:ad:0f:b7:2e:56:fd:
                    22:b5:9a:a8:67:84:04:49:2e:9e:56:0d:94:d7:b5:
                    1b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:58:AE:F2:D4:89:97:F3:0A:62:49:E8:9B:B9:50:AD:0F:3F:00:55
            X509v3 Authority Key Identifier:
                keyid:57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b1:d7:01:7e:ca:34:83:fc:56:bd:20:3a:87:10:cd:db:40:
         2f:e4:f4:f5:be:5d:72:9a:7e:e6:e5:80:01:a8:5a:58:67:ee:
         29:60:dd:b7:d8:90:21:2c:8f:61:fe:84:d8:e4:01:81:04:8d:
         04:e2:4e:73:3f:b0:64:f0:e1:d4:3e:41:8f:60:a8:35:d9:dd:
         d7:22:71:97:41:2e:a5:c5:11:62:59:86:23:6f:b3:ed:25:c8:
         ff:25:48:82:c7:71:c6:3c:f2:da:14:83:ac:d4:e7:9a:99:e0:
         08:ce:41:f1:b5:30:74:bf:27:ad:a9:93:8d:26:ef:d7:df:82:
         a9:86:9e:f4:fd:e3:e5:20:13:e9:21:5f:ae:02:b2:09:09:14:
         dd:7e:97:83:fe:ad:d0:6c:d9:c9:8a:55:a2:54:57:20:12:e9:
         ed:28:21:ea:9b:a0:6f:78:1a:67:e2:01:0d:21:97:79:e5:ef:
         be:f8:39:37:46:38:3f:88:b4:ab:cd:c1:20:40:87:21:7e:8e:
         b6:34:a3:01:a2:cf:49:88:0e:d2:b1:7c:69:f8:6b:d8:85:81:
         f0:45:19:f8:e9:57:2b:51:fa:f7:74:1b:fe:74:c7:9f:ef:7f:
         26:50:07:54:10:4e:e2:76:f6:6a:86:b4:52:c2:75:25:27:d7:
         1f:09:dc:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:23:51 2026 by rpki-client