Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File:                     vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier:          +tqt3Jxcjq7kmKrnUtVhW2MOOeKJdk/9ENsWTxVE6+Y=
Subject key identifier:   0D:B8:77:51:90:5E:48:A8:6F:F8:55:55:97:1F:70:B1:AF:F0:D7:7C
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer:       /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial:       019D9A3ECF10AF80C3DB9056F59DECD54494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number:          0E95
Signing time:             Fri 17 Apr 2026 07:01:40 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:40 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:40 +0000
Files and hashes:         1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
                          2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: a6DQ3w9/M70xuIDQNtLHRQ9KAM7e41uwP4VHmRGMfqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:cf:10:af:80:c3:db:90:56:f5:9d:ec:d5:44:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
        Validity
            Not Before: Apr 17 07:01:40 2026 GMT
            Not After : Apr 18 07:01:40 2026 GMT
        Subject: CN=0db87751905e48a86ff85555971f70b1aff0d77c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ba:da:32:f9:19:f6:88:4c:d8:5b:f8:db:1e:
                    2c:6b:da:62:1b:c4:9e:95:47:ab:44:df:10:d6:ca:
                    7a:a6:a6:8c:7b:10:e7:13:9a:b0:53:aa:2e:c2:70:
                    39:1b:d1:de:c6:6d:19:6f:43:5e:de:2b:fd:4f:c0:
                    b8:e2:96:98:1e:cd:55:00:93:8b:d8:18:36:6f:f1:
                    0a:33:ca:51:ab:a0:03:8f:e7:a3:90:1e:0a:c7:2c:
                    c7:3e:13:9b:45:54:8a:7b:2d:c5:6b:6c:de:a1:00:
                    70:c2:2f:d6:81:1d:39:f8:08:99:6b:87:80:b5:3e:
                    14:b5:d1:be:06:b4:67:9e:8e:18:61:cb:62:b7:29:
                    b9:4d:2e:79:a3:c3:11:55:59:6f:f1:b3:04:f5:5c:
                    05:03:aa:93:d7:46:74:48:29:ea:3a:ad:4d:f5:f6:
                    ec:71:e1:77:06:83:a6:99:c4:dc:7d:07:3f:60:8e:
                    ab:64:57:54:ef:b5:9f:1d:be:aa:b3:39:75:fc:e4:
                    0e:f8:6e:6e:4d:b5:87:6d:55:40:65:af:d7:da:7a:
                    7c:28:10:ff:dd:cb:be:1a:f2:79:60:ad:ba:6b:97:
                    83:6f:ed:6d:09:02:59:78:c5:50:1b:6c:b2:c6:ee:
                    cb:b3:16:9e:9a:6a:0f:55:0a:c7:ac:c7:cf:75:0e:
                    77:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B8:77:51:90:5E:48:A8:6F:F8:55:55:97:1F:70:B1:AF:F0:D7:7C
            X509v3 Authority Key Identifier:
                keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:db:d6:62:ea:70:63:7d:46:9a:bd:bb:14:a3:9a:1f:e6:29:
         20:59:3d:d1:ad:fa:08:3b:ca:0e:c7:cd:4f:3e:91:eb:83:8f:
         ec:e9:47:8a:ed:b5:c8:a7:d8:03:8f:19:a7:f6:a3:67:35:b9:
         85:c9:84:e8:aa:42:22:7b:ee:8a:dc:6a:16:fa:10:74:af:51:
         fd:94:03:16:0c:f1:1c:56:4e:23:50:63:ae:fd:4e:5f:a2:47:
         fa:77:d4:7e:39:22:5b:a6:ba:d1:c2:8c:84:a3:20:3d:6f:39:
         67:ac:45:6b:23:63:b8:77:75:1a:a3:7c:55:39:fa:98:b6:51:
         29:7b:7e:cb:ad:cd:31:e6:36:73:d5:d2:bb:73:00:15:fb:1c:
         c8:bf:f3:69:bd:a7:aa:71:15:76:54:cb:8a:51:b7:2c:97:ad:
         44:39:42:b6:2e:21:c2:7b:d9:79:06:30:7a:28:20:a9:6e:cc:
         24:8f:9f:ad:cb:4a:ca:34:b1:93:2b:2a:a1:0e:12:7b:18:37:
         6a:42:eb:20:86:bb:f7:08:94:08:ff:ab:ee:21:96:79:40:ca:
         4a:97:70:4e:ff:68:87:af:c2:a4:4c:f1:b8:1e:3f:31:f0:5c:
         ae:cd:e5:bd:34:5f:24:00:52:13:e9:e0:15:75:a1:be:b4:99:
         39:fd:09:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:38 2026 by rpki-client