Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
File:                     4oi1UXtPv_4T0fw--obcf_VWGIE.mft (raw, json)
Hash identifier:          oMJOSOeqvS0hG8437eabJfBYPo+9bD9ktI0UCMKZh/0=
Subject key identifier:   69:B4:90:D5:7A:4A:CF:A1:6F:0E:AC:9D:14:47:92:8C:93:9E:9E:2E
Authority key identifier: E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81
Certificate issuer:       /CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
Certificate serial:       019D348925173723EF34B956C1CE6607472A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
Manifest number:          48
Signing time:             Sat 28 Mar 2026 13:01:36 +0000
Manifest this update:     Sat 28 Mar 2026 13:01:36 +0000
Manifest next update:     Sun 29 Mar 2026 13:01:36 +0000
Files and hashes:         1: 4oi1UXtPv_4T0fw--obcf_VWGIE.crl (hash: UZhJYvRytPzxRq8jCtEx2fXUgXVuClh6gBOJFdA7nYk=)
                          2: bgJD44VBNgNX7QzVsv5deioMoUk.roa (hash: LSae3XGL/Q+/vG622sGPyAKFe+sgbvpW87T1AF6mcHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:89:25:17:37:23:ef:34:b9:56:c1:ce:66:07:47:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
        Validity
            Not Before: Mar 28 13:01:36 2026 GMT
            Not After : Mar 29 13:01:36 2026 GMT
        Subject: CN=69b490d57a4acfa16f0eac9d1447928c939e9e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f3:0b:4a:82:b5:b9:ad:da:af:9c:c6:e5:e6:
                    db:8e:a4:13:6e:01:56:88:59:a2:32:8c:3b:fe:28:
                    32:42:c1:83:25:18:a9:bc:2b:3f:01:81:1b:eb:8e:
                    2b:33:1f:7e:e9:35:4a:f3:7a:45:31:50:7d:19:ee:
                    74:bf:7b:ec:e2:23:e5:43:23:4a:d9:53:2f:e6:ad:
                    5d:21:a3:3e:16:7c:c6:57:29:9c:bc:13:b0:af:77:
                    39:78:d7:1d:ee:de:78:e6:38:55:ac:23:1a:cd:77:
                    ba:6e:77:fe:70:d6:5c:db:cf:92:2d:ca:2f:bd:48:
                    d4:91:ba:5d:3d:0d:0d:e2:25:30:e6:75:23:73:51:
                    50:ee:77:2d:1c:2a:47:73:16:d9:e7:60:28:e8:33:
                    3f:c6:3c:ac:15:a3:c4:cb:6a:af:1f:0f:19:9e:ef:
                    86:fe:ac:68:62:22:1c:1a:02:b2:17:ea:67:d4:c3:
                    e4:3e:29:78:42:21:1e:79:52:86:32:63:9a:8e:a7:
                    ae:1b:3a:b1:1f:62:b1:f1:4a:ac:5d:95:81:aa:73:
                    1e:e7:d6:07:51:81:53:14:62:a4:91:98:77:da:b5:
                    f9:d9:8e:0a:f9:ca:e9:83:20:42:45:51:15:b4:98:
                    9f:c8:b5:0e:8c:47:78:a3:f2:8d:0b:1c:17:98:9e:
                    8b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B4:90:D5:7A:4A:CF:A1:6F:0E:AC:9D:14:47:92:8C:93:9E:9E:2E
            X509v3 Authority Key Identifier:
                keyid:E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d7:33:b0:53:d9:3a:3b:4c:d6:cb:a3:8f:99:fc:09:52:a6:
         af:7a:0c:ee:e0:d1:0f:fa:88:de:e0:4c:96:34:e4:29:e3:23:
         12:e6:23:7c:6d:86:d5:15:b4:56:b3:ef:c9:46:c1:82:f2:16:
         1c:62:18:70:02:c5:e6:77:56:08:4e:20:02:1d:d0:9b:74:7c:
         9b:ad:d8:66:b5:27:00:3a:1a:ac:4d:85:b2:9a:11:da:aa:fb:
         4c:dd:06:65:5c:5e:fc:1f:72:99:b2:46:5d:8c:cc:f1:69:e5:
         d2:b8:e6:c8:e0:14:a2:8c:70:84:cc:ea:25:dc:c7:38:01:46:
         6c:c8:64:54:3f:2d:ea:40:39:8a:e3:09:54:73:46:6e:01:8b:
         f7:5f:6f:a9:c4:e8:8b:0d:a1:46:ad:ae:9e:0f:69:2e:12:6d:
         2a:5e:08:34:8f:f8:fb:e4:e8:ef:70:5d:98:0e:0e:30:52:96:
         b1:ef:af:67:4e:9f:f9:e8:1c:71:ac:3b:5b:3f:96:3d:84:21:
         a4:da:f1:89:c7:e3:ee:38:17:8d:f4:38:20:9d:09:db:e0:12:
         b4:5c:7d:d2:05:b1:6d:8e:e4:c0:1f:af:2e:b6:7b:a6:3f:3f:
         5a:4a:74:af:c6:21:60:c0:8a:0b:b4:ed:86:ca:7a:ef:12:20:
         12:14:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:57:08 2026 by rpki-client