Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
File:                     0wUa-GYelCUtF1k103l-nsos2Aw.mft (raw, json)
Hash identifier:          m7oyG6/2MpgLPqtP0bSaI75rrAEV45xSpoJIX9M9xII=
Subject key identifier:   51:19:B1:A1:3E:0E:09:E7:F7:4C:39:41:3B:5D:A1:D1:56:56:F6:D3
Authority key identifier: D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C
Certificate issuer:       /CN=d3051af8661e94252d175935d3797e9eca2cd80c
Certificate serial:       019D996245A45130B26EC9493FDCAECF112A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
Manifest number:          1229
Signing time:             Fri 17 Apr 2026 03:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:47 +0000
Files and hashes:         1: 0wUa-GYelCUtF1k103l-nsos2Aw.crl (hash: QQ6SdH6xKFUrhu6dDW6fJ+bWicejAVe6diI+pyamQno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:45:a4:51:30:b2:6e:c9:49:3f:dc:ae:cf:11:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3051af8661e94252d175935d3797e9eca2cd80c
        Validity
            Not Before: Apr 17 03:00:47 2026 GMT
            Not After : Apr 18 03:00:47 2026 GMT
        Subject: CN=5119b1a13e0e09e7f74c39413b5da1d15656f6d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:64:32:48:bb:14:b7:e7:dc:b3:27:ed:df:de:
                    90:d2:24:b5:e6:37:13:4d:fc:67:8c:31:37:86:04:
                    04:9e:21:51:5a:cf:3e:d4:be:bb:b8:98:a2:53:bc:
                    67:96:ec:96:e1:5f:60:47:33:c8:36:29:c1:13:62:
                    29:d1:b3:a2:d5:53:6d:9f:8e:0c:27:aa:aa:dd:2f:
                    fe:ce:92:e0:fe:7a:2a:23:2b:66:2e:3d:0a:87:3d:
                    cd:2b:de:ad:51:6c:1c:5f:78:76:39:a7:b3:6f:20:
                    ba:56:c0:69:15:fd:5a:43:ec:08:5d:a7:cf:17:65:
                    d7:49:9e:38:c2:f3:1e:88:77:39:c4:62:db:3b:fe:
                    ea:27:3f:8f:e6:df:34:48:14:3e:43:d0:2d:28:d7:
                    07:61:34:98:79:2a:6c:57:f6:d3:11:c3:ad:2f:51:
                    41:c7:b2:34:79:76:50:1c:f0:33:57:cf:07:9d:cb:
                    71:a0:0d:b8:33:e6:f6:bb:bf:7f:77:ce:7a:74:0f:
                    be:ca:4c:b3:d8:a3:5d:76:51:30:2b:01:3c:db:11:
                    e3:b8:ba:a3:69:41:39:2c:52:66:27:ad:1c:d5:89:
                    cf:2d:4e:9b:c6:74:ab:61:d7:f7:eb:80:a6:cf:8a:
                    17:10:5b:9c:c8:b8:c6:ce:50:47:1a:17:f0:8d:b5:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:19:B1:A1:3E:0E:09:E7:F7:4C:39:41:3B:5D:A1:D1:56:56:F6:D3
            X509v3 Authority Key Identifier:
                keyid:D3:05:1A:F8:66:1E:94:25:2D:17:59:35:D3:79:7E:9E:CA:2C:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wUa-GYelCUtF1k103l-nsos2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7672e2-1c7f-4d2e-8961-c26c3e23baf6/1/0wUa-GYelCUtF1k103l-nsos2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:8a:50:e4:88:79:37:69:28:ec:26:51:de:67:1e:fa:84:fe:
         ad:27:10:3c:2d:b4:b6:bb:ca:fb:22:33:43:94:f9:d1:0c:1f:
         c6:bd:2f:70:12:ae:a3:7b:b0:14:27:35:e5:55:85:db:7e:28:
         8b:52:31:2f:2d:3a:a6:69:74:0f:c8:be:df:d3:a7:ec:0b:5c:
         b2:40:ec:d9:10:f5:01:16:3a:3e:11:79:de:69:db:0d:4c:14:
         d4:4d:b1:1a:15:97:6b:47:4b:0c:9b:5a:23:1f:64:71:eb:87:
         55:50:1e:e7:24:33:e0:6f:d9:15:b5:b3:0a:7f:48:c2:08:e0:
         b3:35:1f:44:db:4c:b0:19:f0:13:14:6d:ad:bd:ec:07:61:77:
         3b:ba:2a:9a:7b:f8:58:91:31:e9:ec:9f:2c:1a:3c:9f:c9:82:
         eb:e2:4c:28:79:f5:3d:43:2b:74:12:d9:3c:d5:52:c2:4a:93:
         7e:3a:04:5c:54:05:07:ad:ad:3d:e8:bb:0d:a2:5b:af:85:97:
         9c:08:b1:32:51:40:87:e9:47:3b:1a:36:c9:b1:99:4a:1e:20:
         68:e3:fc:90:c3:ba:42:45:b5:c5:96:a4:65:50:ca:b4:e8:38:
         5b:d6:a7:1b:1f:18:7e:cb:a8:6f:95:9a:9e:4b:73:db:39:9b:
         9e:87:ef:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYkWkUTCybslJP9yuzxEqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMDUxYWY4NjYxZTk0MjUyZDE3NTkzNWQzNzk3ZTllY2Ey
Y2Q4MGMwHhcNMjYwNDE3MDMwMDQ3WhcNMjYwNDE4MDMwMDQ3WjAzMTEwLwYDVQQD
Eyg1MTE5YjFhMTNlMGUwOWU3Zjc0YzM5NDEzYjVkYTFkMTU2NTZmNmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWQySLsUt+fcsyft396Q0iS15jcT
TfxnjDE3hgQEniFRWs8+1L67uJiiU7xnluyW4V9gRzPINinBE2Ip0bOi1VNtn44M
J6qq3S/+zpLg/noqIytmLj0Khz3NK96tUWwcX3h2OaezbyC6VsBpFf1aQ+wIXafP
F2XXSZ44wvMeiHc5xGLbO/7qJz+P5t80SBQ+Q9AtKNcHYTSYeSpsV/bTEcOtL1FB
x7I0eXZQHPAzV88HnctxoA24M+b2u79/d856dA++ykyz2KNddlEwKwE82xHjuLqj
aUE5LFJmJ60c1YnPLU6bxnSrYdf364Cmz4oXEFucyLjGzlBHGhfwjbUFkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEZsaE+Dgnn90w5QTtdodFWVvbTMB8GA1UdIwQY
MBaAFNMFGvhmHpQlLRdZNdN5fp7KLNgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83NjcyZTItMWM3Zi00ZDJlLTg5NjEt
YzI2YzNlMjNiYWY2LzEvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83NjcyZTItMWM3Zi00ZDJlLTg5NjEtYzI2YzNlMjNiYWY2
LzEvMHdVYS1HWWVsQ1V0RjFrMTAzbC1uc29zMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA64pQ5Ih5
N2ko7CZR3mce+oT+rScQPC20trvK+yIzQ5T50Qwfxr0vcBKuo3uwFCc15VWF234o
i1IxLy06pml0D8i+39On7AtcskDs2RD1ARY6PhF53mnbDUwU1E2xGhWXa0dLDJta
Ix9kceuHVVAe5yQz4G/ZFbWzCn9IwgjgszUfRNtMsBnwExRtrb3sB2F3O7oqmnv4
WJEx6eyfLBo8n8mC6+JMKHn1PUMrdBLZPNVSwkqTfjoEXFQFB62tPei7DaJbr4WX
nAixMlFAh+lHOxo2ybGZSh4gaOP8kMO6QkW1xZakZVDKtOg4W9anGx8Yfsuob5Wa
nktz2zmbnofvgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:10 2026 by rpki-client