Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
File:                     Vw0bOThaPe0e8GPRob6TWTtx_C4.mft (raw, json)
Hash identifier:          Zf2luDsm4uwykP3ilR1iKARNRMxidKk4qHEQfmQya2k=
Subject key identifier:   0B:4A:72:93:33:85:F3:22:7A:4C:CA:D1:13:61:4A:5E:A7:9D:74:64
Authority key identifier: 57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E
Certificate issuer:       /CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
Certificate serial:       019D3A8AD2C58F975C2DD50EB7348E2730EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 17:01:09 +0000
Manifest this update:     Sun 29 Mar 2026 17:01:09 +0000
Manifest next update:     Mon 30 Mar 2026 17:01:09 +0000
Files and hashes:         1: Vw0bOThaPe0e8GPRob6TWTtx_C4.crl (hash: ZsQFxP23T4h6G/gwt59TL3Qvc69f+oE2VMslJ5WeDb0=)
                          2: yrpQZLNucx1j8PywITpDY3JOGP8.roa (hash: 4F+vRyqIvM13I+8M46omVsNmWEmbQ6DoH7yXWjC/gow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8a:d2:c5:8f:97:5c:2d:d5:0e:b7:34:8e:27:30:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570d1b39385a3ded1ef063d1a1be93593b71fc2e
        Validity
            Not Before: Mar 29 17:01:09 2026 GMT
            Not After : Mar 30 17:01:09 2026 GMT
        Subject: CN=0b4a72933385f3227a4ccad113614a5ea79d7464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:c1:62:de:8b:0c:13:db:6b:6c:7b:59:19:
                    ca:6b:d7:48:91:91:56:a0:2e:35:33:17:aa:ca:db:
                    48:cb:cf:32:73:85:08:f7:29:e8:4d:42:85:54:71:
                    15:fe:b2:1c:cc:1d:8e:a3:74:9c:ab:0a:11:32:18:
                    07:bd:e9:5e:a7:b7:ed:cc:1c:df:ed:d2:3d:8b:69:
                    45:a9:6c:8d:b2:49:af:7c:10:3a:13:fa:dd:91:c9:
                    2a:bb:f3:25:04:a6:33:6a:61:ff:0a:97:b2:dd:a0:
                    56:f3:81:37:55:0e:e3:69:eb:0e:bf:94:5d:2b:b1:
                    50:df:bf:00:d6:86:44:ff:03:a7:da:fe:76:14:80:
                    67:df:0b:12:e0:50:cd:f1:c8:eb:bb:b0:22:6e:24:
                    e4:a6:0b:6d:b5:ad:80:4e:73:53:fb:7a:09:38:6e:
                    71:db:ad:e5:6c:a3:c3:b0:3a:15:ef:a7:a7:4f:8b:
                    db:ff:41:41:60:03:0f:52:01:51:38:cf:8d:27:3f:
                    5c:d4:cd:f7:7d:b2:36:5c:11:93:31:8b:71:fe:a1:
                    41:b4:a5:58:94:68:6b:b8:e6:72:19:7d:b8:53:06:
                    8f:9e:3f:55:4b:33:bd:8f:e6:5a:a7:db:7d:08:af:
                    0d:db:60:44:0b:3d:c0:89:56:33:77:09:9d:0c:72:
                    e9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:72:93:33:85:F3:22:7A:4C:CA:D1:13:61:4A:5E:A7:9D:74:64
            X509v3 Authority Key Identifier:
                keyid:57:0D:1B:39:38:5A:3D:ED:1E:F0:63:D1:A1:BE:93:59:3B:71:FC:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw0bOThaPe0e8GPRob6TWTtx_C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b13164-2fc3-4e31-bfc3-c58c5393cff8/1/Vw0bOThaPe0e8GPRob6TWTtx_C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3e:0f:ca:f2:24:86:32:93:b3:a6:92:28:3f:0b:13:4c:75:
         46:50:82:17:4b:7c:26:1a:4a:49:a4:64:5e:9c:75:f5:11:a1:
         61:73:61:5b:5c:27:63:82:aa:60:23:ea:8d:2c:8c:18:5e:99:
         55:58:10:96:cd:a6:34:2b:d3:80:de:db:ba:d7:2c:06:b2:03:
         00:67:e7:89:e4:af:96:d2:c1:e0:44:df:ee:f3:be:8c:2f:92:
         e5:4a:eb:ca:06:09:5d:c3:37:96:44:c0:bd:01:3c:6b:19:3b:
         af:bd:47:90:ff:60:91:1f:c8:bc:f7:fc:9d:55:b2:8e:84:63:
         9a:be:09:7f:09:78:7a:00:d2:7e:92:9b:c2:b6:7b:07:9c:f6:
         f9:b1:67:cb:9a:30:92:77:54:62:f5:e8:e0:51:4a:2a:de:90:
         8f:92:31:bc:7a:ea:0c:01:cf:4b:ea:e5:19:70:c8:87:40:fa:
         1e:c3:95:4b:c3:2b:1d:15:29:d1:c9:79:ff:2a:33:94:ad:e3:
         73:b2:e9:d5:93:ac:0c:03:20:5c:43:e5:f1:5c:e6:86:71:bd:
         d4:9e:16:cd:28:43:dd:d4:21:76:67:cf:b1:4e:e1:01:2f:84:
         ef:aa:69:4f:59:0a:b2:b7:d3:16:d5:0e:83:c0:67:e3:25:c0:
         55:99:54:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:50 2026 by rpki-client