Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File:                     0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier:          pTb7YNwl1Bj3166lGjDt5AVv3iG4IuBv+DFEs3BahMk=
Subject key identifier:   75:1D:FB:6B:91:7C:4A:71:0D:B5:31:DD:6F:35:27:6E:6E:81:1E:D8
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer:       /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial:       019D9C9A632076A61D06C5CB3657CE6E5C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 18:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:56 +0000
Files and hashes:         1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: 8xgsTO12REhMEeIoiMPkYNGWbj81HQVr5fA3APuoyMo=)
                          2: 13qi8AI2-EVNpOSQSS-2sC_j3KU.roa (hash: Ao/N1CH5IyqTs+C/2xXMQjWZkUvQDWoCz0AZMzqUUQQ=)
                          3: C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa (hash: g8qNTYkk+kkeSWc3XwhwJA4ghsKgURElfaxWHrKjSQA=)
                          4: jv_YABzSModWtlchMh_9InM60gw.roa (hash: 4R+lUnXKrDrYcGJOHmhH6oyg2E2dK50I55PSI9u6SrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:63:20:76:a6:1d:06:c5:cb:36:57:ce:6e:5c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Validity
            Not Before: Apr 17 18:00:56 2026 GMT
            Not After : Apr 18 18:00:56 2026 GMT
        Subject: CN=751dfb6b917c4a710db531dd6f35276e6e811ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8f:34:50:ad:f9:b5:c9:46:c0:32:ee:2d:a2:
                    1d:d5:07:d9:3a:e9:3d:2f:32:f2:de:80:d0:13:7b:
                    11:06:2a:70:e7:ae:cc:22:08:25:24:41:fc:36:28:
                    f2:e5:dd:d8:ab:fa:48:0d:91:52:d2:59:95:34:fa:
                    fb:88:9f:aa:2e:e7:03:bb:72:1d:2e:99:c1:d1:8a:
                    9d:59:e7:9a:8c:3b:a9:31:ea:63:e0:41:3b:5f:58:
                    a9:50:90:f4:a2:d7:93:29:98:52:72:44:e2:a4:e0:
                    53:3a:23:4e:c1:ea:9e:ad:de:c1:00:a4:0d:25:0d:
                    35:c6:f2:38:64:88:9c:b8:87:4b:59:9c:f7:3e:2e:
                    06:0a:71:18:c5:a2:f1:8a:52:61:bd:8b:11:34:8d:
                    80:e8:46:53:c6:00:22:f8:08:6c:57:aa:3a:5e:a6:
                    ba:a1:58:e4:41:4d:34:de:61:53:47:66:c6:cb:84:
                    43:0c:d6:00:47:f8:b2:05:d7:50:35:42:01:af:c2:
                    4d:fb:98:77:02:04:ea:55:8f:dd:5c:cd:75:17:24:
                    1a:db:56:46:b6:a9:a7:29:f9:0a:3e:a3:e0:2a:0e:
                    d3:4c:9d:13:d7:f8:f5:7a:45:71:2b:d5:68:d1:b4:
                    7c:1a:cc:b7:9f:8e:a3:ef:2e:3b:19:62:1c:b6:cf:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:1D:FB:6B:91:7C:4A:71:0D:B5:31:DD:6F:35:27:6E:6E:81:1E:D8
            X509v3 Authority Key Identifier:
                keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:c4:7e:68:84:39:13:b1:1f:b7:54:99:cd:c4:e3:ff:3d:ac:
         3f:f1:a0:92:f4:85:06:27:42:40:c9:e3:ec:ae:88:da:fd:06:
         a2:c7:d3:63:af:11:4b:b2:2d:13:cf:f2:a9:59:b6:ef:b2:f6:
         0e:df:c9:5e:9a:f4:ad:b7:f6:1b:05:4b:87:95:8c:d7:a3:c4:
         b1:77:3e:85:d2:80:db:2e:d1:6f:20:a2:2a:eb:83:21:a7:18:
         94:fd:b4:48:a0:b7:65:54:a6:77:11:bb:34:1d:56:51:5a:07:
         8d:3a:01:18:c0:33:3f:03:fe:b4:c5:d4:74:1d:b3:dd:a0:77:
         c3:e4:e3:9e:02:43:6b:db:1e:76:3f:97:96:9a:e7:e0:ad:da:
         64:3f:73:f4:f0:30:13:87:9f:e7:b1:4a:08:d0:b9:0d:54:19:
         7b:a2:62:7c:21:a5:f0:da:6c:07:5e:63:30:6e:af:df:14:da:
         49:dd:22:76:39:b3:9c:ce:11:7c:72:6c:ac:c2:c4:2a:d1:2c:
         c0:43:b8:4a:3a:65:60:69:42:79:2e:c0:2c:3d:44:20:e9:d2:
         e2:da:48:24:bc:2a:47:32:93:28:1d:73:56:79:e5:5c:a7:13:
         9c:1f:13:7c:2a:c9:0f:ee:39:c9:c3:69:f9:56:e8:dc:b0:f9:
         62:8f:e5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:36:13 2026 by rpki-client