Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
File:                     4oi1UXtPv_4T0fw--obcf_VWGIE.mft (raw, json)
Hash identifier:          ytm7zyydq6Cdi2KiUqLydhckK93B7n/4MI2QXhl0a/E=
Subject key identifier:   8C:35:D9:45:A1:E1:98:EE:2D:17:CD:23:37:58:D5:0B:0F:FA:CD:69
Authority key identifier: E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81
Certificate issuer:       /CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
Certificate serial:       019E1C474ABBBFD915FD8102AF7C46B3B98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
Manifest number:          C0
Signing time:             Tue 12 May 2026 13:01:34 +0000
Manifest this update:     Tue 12 May 2026 13:01:34 +0000
Manifest next update:     Wed 13 May 2026 13:01:34 +0000
Files and hashes:         1: 4oi1UXtPv_4T0fw--obcf_VWGIE.crl (hash: egFYk5GK9weHjrs233xCspvf73tH5NJflKKl7oKNBcU=)
                          2: bgJD44VBNgNX7QzVsv5deioMoUk.roa (hash: LSae3XGL/Q+/vG622sGPyAKFe+sgbvpW87T1AF6mcHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:4a:bb:bf:d9:15:fd:81:02:af:7c:46:b3:b9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
        Validity
            Not Before: May 12 13:01:34 2026 GMT
            Not After : May 13 13:01:34 2026 GMT
        Subject: CN=8c35d945a1e198ee2d17cd233758d50b0ffacd69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:92:cb:45:3e:23:99:e2:0e:3e:62:89:49:
                    7f:7e:0d:15:6d:41:79:e9:63:2d:1d:ed:96:e9:7b:
                    78:10:64:d0:8b:73:94:b1:23:ed:da:d9:37:cb:89:
                    3b:89:51:a1:ea:26:15:b0:e0:69:c9:d2:ea:41:69:
                    ed:72:6a:76:6d:bb:81:80:ef:cd:77:8e:2a:11:34:
                    09:39:c7:85:b9:85:e9:66:03:7e:56:3a:f0:d0:ce:
                    06:ae:7d:0f:27:27:25:15:47:1c:a8:3a:81:b7:b8:
                    09:43:c1:cb:4d:55:c7:0a:0d:ce:0d:7a:4b:dd:bd:
                    bf:dd:c7:39:69:c6:ac:87:de:f7:90:e9:b7:f6:d2:
                    dc:5c:49:bf:30:d5:ca:b6:cd:8f:ff:6b:db:bd:11:
                    14:c4:5d:78:84:40:96:86:66:8d:a4:f1:bd:2a:26:
                    f8:5f:47:5d:92:2e:a2:ae:8f:2c:37:08:d9:6d:94:
                    e4:12:22:9a:36:60:1a:9c:91:38:de:a7:43:24:04:
                    ad:d8:8f:ed:ee:27:ed:cb:5c:46:ac:2e:93:93:94:
                    38:33:40:e7:db:60:5f:79:14:58:1c:55:c1:6b:ba:
                    9b:36:37:20:5d:b7:c7:3b:27:bb:5e:9c:a5:a9:44:
                    e3:c2:16:47:66:eb:04:84:84:ce:38:a9:c1:45:b3:
                    ba:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:D9:45:A1:E1:98:EE:2D:17:CD:23:37:58:D5:0B:0F:FA:CD:69
            X509v3 Authority Key Identifier:
                keyid:E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a2:1e:83:07:c4:94:4c:f3:ce:2e:36:9e:4b:c4:13:ad:0a:
         e6:4c:9b:7e:38:4c:84:a1:1b:b2:2a:a6:03:e0:c6:17:e8:9f:
         56:cd:c2:1f:57:a8:05:6c:cc:09:fe:e3:3e:c6:49:fb:ea:49:
         26:e7:60:b2:0c:7d:67:5f:d9:39:ab:db:4f:2f:03:0b:b8:a5:
         e7:15:2d:ef:76:03:ff:2a:99:2e:09:84:ab:16:bb:ec:d7:12:
         fc:22:91:97:3a:4e:73:1f:f2:df:36:12:57:d4:ff:5c:cf:92:
         0a:e7:6e:65:d8:dc:c8:16:62:26:2a:b3:43:ba:d4:04:8b:2e:
         90:4f:c3:b6:df:82:13:47:34:68:7d:c7:07:cb:69:cb:0d:2a:
         b7:2c:98:df:8c:23:04:ac:21:51:0e:73:6a:31:0f:dc:c2:fd:
         98:de:b0:f7:91:26:a0:0d:d7:cf:e4:8f:d5:f9:7c:9a:76:37:
         33:1a:3d:ab:40:58:7d:ab:e5:68:6d:41:98:66:66:39:a8:f7:
         e6:88:1c:6a:7e:bc:1e:09:51:86:79:ba:84:9b:9f:9c:1f:7c:
         c7:c7:66:4f:d8:da:8d:ea:22:4e:64:d1:21:5f:3f:2e:55:65:
         96:0f:14:06:95:80:c3:bf:1d:aa:a8:3c:54:7d:b7:32:3c:af:
         98:66:d3:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cR0q7v9kV/YECr3xGs7mOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODhiNTUxN2I0ZmJmZmUxM2QxZmMzZWZhODZkYzdmZjU1
NjE4ODEwHhcNMjYwNTEyMTMwMTM0WhcNMjYwNTEzMTMwMTM0WjAzMTEwLwYDVQQD
Eyg4YzM1ZDk0NWExZTE5OGVlMmQxN2NkMjMzNzU4ZDUwYjBmZmFjZDY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdSSy0U+I5niDj5iiUl/fg0VbUF5
6WMtHe2W6Xt4EGTQi3OUsSPt2tk3y4k7iVGh6iYVsOBpydLqQWntcmp2bbuBgO/N
d44qETQJOceFuYXpZgN+Vjrw0M4Grn0PJyclFUccqDqBt7gJQ8HLTVXHCg3ODXpL
3b2/3cc5acash973kOm39tLcXEm/MNXKts2P/2vbvREUxF14hECWhmaNpPG9Kib4
X0ddki6iro8sNwjZbZTkEiKaNmAanJE43qdDJASt2I/t7ifty1xGrC6Tk5Q4M0Dn
22BfeRRYHFXBa7qbNjcgXbfHOye7XpylqUTjwhZHZusEhITOOKnBRbO6RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw12UWh4ZjuLRfNIzdY1QsP+s1pMB8GA1UdIwQY
MBaAFOKItVF7T7/+E9H8PvqG3H/1VhiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9pMVVYdFB2XzRUMGZ3LS1vYmNmX1ZXR0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9hMTliODAtNzlkYS00MTJkLTk5YjUt
MTIwMmVjYzgwOGU4LzEvNG9pMVVYdFB2XzRUMGZ3LS1vYmNmX1ZXR0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9hMTliODAtNzlkYS00MTJkLTk5YjUtMTIwMmVjYzgwOGU4
LzEvNG9pMVVYdFB2XzRUMGZ3LS1vYmNmX1ZXR0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKIegwfE
lEzzzi42nkvEE60K5kybfjhMhKEbsiqmA+DGF+ifVs3CH1eoBWzMCf7jPsZJ++pJ
Judgsgx9Z1/ZOavbTy8DC7il5xUt73YD/yqZLgmEqxa77NcS/CKRlzpOcx/y3zYS
V9T/XM+SCuduZdjcyBZiJiqzQ7rUBIsukE/Dtt+CE0c0aH3HB8tpyw0qtyyY34wj
BKwhUQ5zajEP3ML9mN6w95EmoA3Xz+SP1fl8mnY3Mxo9q0BYfavlaG1BmGZmOaj3
5ogcan68HglRhnm6hJufnB98x8dmT9jajeoiTmTRIV8/LlVllg8UBpWAw78dqqg8
VH23MjyvmGbTyQ==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:21 2026 by rpki-client