Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
File:                     uoGySm1gML8IjeowyaWTL-vcanw.mft (raw, json)
Hash identifier:          2G+U/2ChHGrVL9xlVO7aQp2DFQm/rfKdXqwP03H03ws=
Subject key identifier:   4F:52:6F:C8:DD:5D:7F:51:02:58:58:D5:67:0D:CF:30:A2:A8:48:3D
Authority key identifier: BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C
Certificate issuer:       /CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
Certificate serial:       019D9D763D9CD8EABE34A0F5E9E8000051AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
Manifest number:          038B
Signing time:             Fri 17 Apr 2026 22:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 22:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 22:01:05 +0000
Files and hashes:         1: uoGySm1gML8IjeowyaWTL-vcanw.crl (hash: 8A1nD16u8mZBJj/6gwLHxUUXMHUKWqvHqxafTuL68YI=)
                          2: zl-n2q1Zb7EgYohA26XnxYXqdxE.roa (hash: BY/YVHNSQVEAmKd+rhuDTBW07jn5TB4TSJNB9lFmcSs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:76:3d:9c:d8:ea:be:34:a0:f5:e9:e8:00:00:51:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba81b24a6d6030bf088dea30c9a5932febdc6a7c
        Validity
            Not Before: Apr 17 22:01:05 2026 GMT
            Not After : Apr 18 22:01:05 2026 GMT
        Subject: CN=4f526fc8dd5d7f51025858d5670dcf30a2a8483d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:29:d2:ed:f2:3e:d7:91:86:91:5f:bb:e1:
                    57:df:cd:e9:2b:ca:9f:27:fd:b4:32:96:76:b4:ba:
                    1f:2b:a6:af:d9:16:2a:96:e2:50:76:37:59:2e:8a:
                    82:7b:b3:16:6c:0e:9d:fa:1d:bb:f1:f1:6b:0e:e7:
                    84:3c:48:8a:a7:9e:02:29:75:ee:cb:10:04:1c:e6:
                    6a:31:ad:60:1e:97:00:fd:ed:c0:57:87:62:bd:e8:
                    81:63:52:cc:0c:67:2a:99:f0:3f:33:3b:91:db:a3:
                    22:53:1e:ea:07:3e:59:0d:1e:66:35:89:35:ff:5e:
                    e8:2f:74:65:76:ed:19:7d:08:21:cf:67:d1:0b:85:
                    b1:ee:19:b2:ff:d8:73:38:7f:3b:6a:02:04:f5:9b:
                    39:20:ef:fc:7f:14:fc:60:25:fe:ae:91:7a:78:7f:
                    6f:46:a8:89:e0:2f:df:b1:7b:19:2c:c9:c2:bc:19:
                    08:54:09:0d:6e:34:ff:0a:d1:de:31:15:1c:e1:dc:
                    a9:e8:a8:1c:17:cf:9d:38:3b:d6:f0:c5:ff:50:00:
                    4b:e6:d6:23:df:44:48:a8:c2:39:99:89:f1:b0:a6:
                    22:3c:c2:7c:05:7d:07:c2:8b:e6:f5:4d:42:25:8d:
                    6e:e9:4b:bf:38:cb:5a:f3:0f:88:66:49:ee:0f:b5:
                    d1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:52:6F:C8:DD:5D:7F:51:02:58:58:D5:67:0D:CF:30:A2:A8:48:3D
            X509v3 Authority Key Identifier:
                keyid:BA:81:B2:4A:6D:60:30:BF:08:8D:EA:30:C9:A5:93:2F:EB:DC:6A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoGySm1gML8IjeowyaWTL-vcanw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/700333-aa9c-4bd3-8204-48cd05eca736/1/uoGySm1gML8IjeowyaWTL-vcanw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:43:d1:a0:5c:8a:46:3b:63:eb:c6:7f:66:aa:3d:0e:6b:6d:
         87:72:86:00:42:e3:08:87:4a:7d:7f:02:5f:56:31:e4:c6:c7:
         d2:25:6f:d5:17:67:3c:f3:25:45:88:f1:88:15:42:d5:dd:ee:
         27:d1:6f:a4:80:16:bd:04:e7:bb:6c:88:0d:ec:9b:18:d2:87:
         ac:85:4b:0a:a2:b9:ee:53:83:4b:ab:59:c3:28:10:44:49:17:
         67:1c:57:bd:ee:62:8b:01:4a:9c:e5:2f:76:6b:bd:f5:58:19:
         d6:85:c4:f6:0e:85:54:71:43:9e:18:e8:48:f4:88:b9:82:0c:
         c5:a7:b5:26:a5:25:60:af:6e:e3:8f:e0:a5:97:f5:20:a2:30:
         e5:21:f1:e9:d3:d2:52:1e:41:17:d2:80:48:7e:7a:dd:94:03:
         63:b4:e8:fb:07:45:99:15:8d:23:91:29:96:e0:76:12:ed:d4:
         63:9d:c0:8f:34:60:74:2f:64:9a:29:4a:0e:cb:b1:4c:0a:d4:
         97:ca:fd:ca:d7:8a:ea:15:2d:be:67:19:c2:91:25:77:d3:fe:
         e7:25:fa:8c:a4:12:a1:9a:a7:0c:05:22:1b:99:8f:4a:21:fe:
         29:fa:8d:d4:5a:f8:ac:22:f6:1b:0d:1e:4c:92:28:bb:ef:34:
         2b:03:3e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:33:02 2026 by rpki-client