Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
File:                     r06GL461X0-CVOLIWLcvQzl_4_o.mft (raw, json)
Hash identifier:          u2ARe8eWJY6p5syRxhl9vmlv08iRWyusxAJeoiymUxs=
Subject key identifier:   70:CB:8C:C7:FC:3B:A3:F7:AB:FD:E5:4B:83:17:40:F5:AA:6E:24:17
Authority key identifier: AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA
Certificate issuer:       /CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
Certificate serial:       019D98F4D541468D6FB95F257F6FB588708F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 01:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:15 +0000
Files and hashes:         1: r06GL461X0-CVOLIWLcvQzl_4_o.crl (hash: 5GpAatMZu+N+PJp3xjXn/o1kJ+b6IjbJuSVvD3I3vP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:d5:41:46:8d:6f:b9:5f:25:7f:6f:b5:88:70:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af4e862f8eb55f4f8254e2c858b72f43397fe3fa
        Validity
            Not Before: Apr 17 01:01:15 2026 GMT
            Not After : Apr 18 01:01:15 2026 GMT
        Subject: CN=70cb8cc7fc3ba3f7abfde54b831740f5aa6e2417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6f:89:26:bf:c7:a6:33:00:1e:f7:68:dd:07:
                    b5:d1:c8:78:e6:a3:7c:6d:1c:5d:c0:79:1a:a4:4d:
                    09:cc:2d:39:56:b0:b8:b3:07:c3:72:88:af:70:bd:
                    2f:9b:2b:b4:79:31:81:97:8d:79:74:24:ed:ec:5d:
                    1a:80:09:13:8b:fd:00:62:3b:12:90:3c:b6:ed:e8:
                    26:c7:95:67:4d:88:52:89:18:80:8b:44:ab:9a:a7:
                    2f:9c:b1:86:87:be:95:5f:05:9d:c9:55:ee:d6:9d:
                    3f:42:ca:f2:7f:3a:81:72:53:73:c8:99:61:db:d7:
                    c0:f4:fc:44:9c:c9:7c:d3:7b:8b:74:1a:d9:f2:f9:
                    4d:86:49:a3:ff:1b:43:45:28:da:d5:3b:f4:af:10:
                    df:f1:22:86:7e:1a:15:51:dc:6b:2e:c0:f3:2b:a1:
                    a1:18:cd:8f:e9:a4:a4:f1:07:58:07:ba:29:d6:91:
                    8e:fb:05:61:99:12:ce:63:68:ac:68:f2:c3:6b:b2:
                    47:34:b7:3e:82:ff:5b:10:3d:0c:a4:ec:28:22:d0:
                    c9:8c:1f:1e:11:7d:40:85:6d:d7:04:6b:42:25:8d:
                    b8:07:9c:7e:16:bc:fe:b0:e2:1c:2b:78:78:66:55:
                    04:ef:c2:7e:e2:20:c4:2e:a2:c8:ba:b3:c4:7f:b6:
                    09:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CB:8C:C7:FC:3B:A3:F7:AB:FD:E5:4B:83:17:40:F5:AA:6E:24:17
            X509v3 Authority Key Identifier:
                keyid:AF:4E:86:2F:8E:B5:5F:4F:82:54:E2:C8:58:B7:2F:43:39:7F:E3:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r06GL461X0-CVOLIWLcvQzl_4_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9e37ce-2c77-450b-94c7-50d2f7a10962/1/r06GL461X0-CVOLIWLcvQzl_4_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bc:fb:69:ee:c1:f8:7c:0c:70:5f:69:ab:0f:5f:2c:bf:12:
         7e:df:9e:f5:ea:ed:4c:d2:fd:22:e7:d3:71:80:be:3e:b5:9f:
         68:a5:03:cd:0b:79:0f:f7:40:12:ce:bb:43:f9:79:8a:94:05:
         d6:35:24:50:9b:94:35:83:e9:51:fc:de:0b:71:9d:3c:bb:d0:
         2d:d0:52:83:84:d6:45:e5:1e:78:bb:74:3a:53:4c:bc:95:aa:
         3f:7c:f5:9c:32:3e:64:09:d8:db:42:48:b7:7a:7e:4d:20:ed:
         c9:17:d9:12:5e:f5:6f:77:02:72:d6:55:3a:83:e7:41:66:b2:
         68:06:7e:6b:cc:07:5a:8c:58:4e:6d:08:c0:dc:ff:14:37:94:
         cc:b2:56:a1:d8:e5:b8:e1:06:38:7d:1c:ea:70:5c:95:92:8b:
         a8:70:25:17:6e:cf:b8:de:d1:9f:6c:3a:cb:37:65:a4:b1:27:
         32:d6:ef:f8:61:93:dd:83:2d:95:42:4c:8d:e3:8a:d6:5d:9e:
         8b:3e:6f:71:7b:4d:8e:dc:b2:37:cc:c3:e6:2f:0d:45:54:66:
         5d:ed:9e:66:83:e6:d8:ce:a0:04:90:38:05:36:b9:1c:2c:37:
         f3:b9:ff:a8:d0:f9:52:d6:4d:0b:2d:ab:8d:18:ff:8c:d9:17:
         04:12:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:50:07 2026 by rpki-client