Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
File:                     4oi1UXtPv_4T0fw--obcf_VWGIE.mft (raw, json)
Hash identifier:          83vDPSxB0JxJ2WyCG1KS/FlNLah4fcJ7aSdVIwDXMyQ=
Subject key identifier:   F8:DD:2B:50:6C:76:CC:8C:10:D4:F6:ED:3E:34:22:35:DD:67:0F:5F
Authority key identifier: E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81
Certificate issuer:       /CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
Certificate serial:       01A0CFA492B5DC319E4B2174EE9B62C1775F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
Manifest number:          0226
Signing time:             Wed 23 Sep 2026 19:01:04 +0000
Manifest this update:     Wed 23 Sep 2026 19:01:04 +0000
Manifest next update:     Thu 24 Sep 2026 19:01:04 +0000
Files and hashes:         1: 4oi1UXtPv_4T0fw--obcf_VWGIE.crl (hash: jJfxHkQ7soLmZklVbtZbS9vLJiEHku/+3Lx0DxTjH6k=)
                          2: bgJD44VBNgNX7QzVsv5deioMoUk.roa (hash: LSae3XGL/Q+/vG622sGPyAKFe+sgbvpW87T1AF6mcHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:92:b5:dc:31:9e:4b:21:74:ee:9b:62:c1:77:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
        Validity
            Not Before: Sep 23 19:01:04 2026 GMT
            Not After : Sep 24 19:01:04 2026 GMT
        Subject: CN=f8dd2b506c76cc8c10d4f6ed3e342235dd670f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:02:d9:b4:b2:eb:38:cb:15:df:ef:90:8c:7d:
                    e9:f6:0d:9a:95:ae:17:e9:55:77:a4:88:17:ee:97:
                    e9:c4:c3:70:a2:13:7c:4c:3e:58:e2:52:be:8b:11:
                    ad:3e:a7:97:2d:a1:0d:fa:78:9d:04:48:af:c5:7b:
                    a1:88:0b:76:fe:8d:16:54:3d:58:f0:2e:92:d4:01:
                    88:67:c3:c7:54:a4:65:ae:26:67:9f:96:04:c0:5c:
                    d3:30:f2:be:fd:6a:66:0e:39:e1:ac:13:db:3a:d0:
                    67:37:60:4f:e8:30:9d:76:ec:aa:81:88:a7:29:8a:
                    d9:fd:1e:be:06:57:4b:d0:02:11:fb:4b:b8:1f:f1:
                    dc:3f:96:d0:40:96:84:a5:b5:14:f0:ed:e2:ca:d0:
                    a7:24:eb:5e:cd:51:e4:76:24:59:85:ce:21:13:18:
                    47:6d:0d:39:35:d0:c0:e9:9d:49:75:28:6f:63:e4:
                    af:c0:5b:f7:94:31:f5:6a:9c:29:fd:f7:a2:91:b9:
                    0c:e7:9c:20:46:b3:3a:64:33:21:0a:24:f2:7f:4a:
                    c7:d0:43:1e:78:3b:3e:be:7b:0d:1b:f8:4f:c6:c3:
                    7e:a4:e3:df:23:76:83:0b:17:79:c9:bd:b3:06:98:
                    50:33:71:25:e1:a9:e2:c2:9c:af:45:e2:f9:e1:6e:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DD:2B:50:6C:76:CC:8C:10:D4:F6:ED:3E:34:22:35:DD:67:0F:5F
            X509v3 Authority Key Identifier:
                keyid:E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:11:5a:9e:85:59:90:5f:c4:d6:3e:43:66:9c:ed:9c:89:1e:
         7a:19:7e:b1:89:42:dc:69:92:3e:61:fc:be:dd:bc:91:9b:d0:
         cf:a6:43:7e:b5:9a:c2:2b:11:81:b5:1d:9c:43:80:e8:d0:0a:
         59:3f:4f:d5:2b:cd:30:74:53:96:b9:43:9c:f4:d0:93:a3:76:
         6a:75:b0:8b:24:11:29:2e:91:11:5e:0b:44:2d:39:14:ca:e8:
         3b:f8:44:c9:e1:26:94:a0:15:22:29:72:76:40:fb:3d:97:c4:
         b1:e5:25:3c:f2:49:fe:08:49:80:4e:ba:7b:06:c5:f2:0c:3b:
         5d:fb:a3:ce:c3:24:3c:61:49:a6:36:71:d1:fa:96:4e:95:e1:
         ca:70:6a:4a:e7:b4:37:41:07:60:88:18:7c:74:fa:f2:83:e2:
         52:05:28:b0:ae:bf:20:a9:72:9b:2d:7c:09:43:89:8e:f1:98:
         81:4d:a5:6d:71:9e:3e:2f:0c:87:4b:50:d3:6c:16:45:80:a9:
         e8:9b:05:9e:d6:72:38:48:f0:b1:90:d5:d3:e1:27:2a:71:39:
         e9:1d:d6:66:2c:2f:95:04:a8:f2:20:12:98:7c:89:62:94:b8:
         0e:4c:fc:8f:e0:33:73:fa:60:70:ec:05:77:e1:43:ae:37:73:
         5b:e3:fe:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:52:46 2026 by rpki-client