Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
File:                     wWorxbJu0grF0v3qnayGffkjIFo.mft (raw, json)
Hash identifier:          Mt5ngx/DFydlmG5iHtZKelJYA4LngYCsjUNcs4OqIvY=
Subject key identifier:   AC:95:F3:8F:17:06:E6:51:DB:51:AA:DC:5C:3F:E1:02:E9:9B:F7:59
Authority key identifier: C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A
Certificate issuer:       /CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
Certificate serial:       019D992B7585C3F0C5391983F70D49337721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
Manifest number:          0897
Signing time:             Fri 17 Apr 2026 02:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:55 +0000
Files and hashes:         1: wWorxbJu0grF0v3qnayGffkjIFo.crl (hash: 1S7CQFaGZhYyH3ayiySGCzYRcF3IUJioFqDq4pZLGUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:75:85:c3:f0:c5:39:19:83:f7:0d:49:33:77:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
        Validity
            Not Before: Apr 17 02:00:55 2026 GMT
            Not After : Apr 18 02:00:55 2026 GMT
        Subject: CN=ac95f38f1706e651db51aadc5c3fe102e99bf759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:87:2a:b3:9b:5b:48:ea:70:8f:dd:e9:32:6a:
                    34:69:ec:26:bf:22:57:94:c5:bf:85:24:e9:43:0e:
                    9c:58:6e:fd:16:a9:48:95:05:8e:f7:9d:c9:9a:4a:
                    18:1f:41:78:e6:90:12:c5:cc:cc:11:cd:49:45:15:
                    b2:5e:24:c5:0d:57:b2:bf:7f:44:94:85:20:0a:2e:
                    20:6d:65:76:93:2f:1c:75:18:38:38:9d:8a:84:68:
                    b1:a0:26:07:59:e1:ef:ae:57:67:9d:5d:ac:91:c6:
                    6c:75:07:28:60:8e:a2:2d:2b:0f:cd:84:7d:0c:f3:
                    a1:c5:e1:e3:b1:4c:62:cf:27:07:e3:10:f0:9c:2f:
                    98:e3:6c:60:6a:0b:54:3f:26:fe:f8:97:0a:15:4d:
                    1f:f8:9c:17:55:05:e1:71:15:9a:fe:b3:82:b5:ea:
                    f3:f2:56:f4:30:cd:80:46:ac:4d:7d:0d:6d:62:ba:
                    c9:a9:b2:f3:c5:b2:1d:b2:12:30:ce:cd:b6:02:43:
                    52:f0:54:bc:ae:9f:e9:80:5f:7b:57:0f:c4:a7:b3:
                    2c:5c:18:78:6c:42:19:6d:56:25:7d:46:84:e8:19:
                    89:03:c2:1c:05:ff:50:77:6a:bd:81:fb:2a:31:d1:
                    18:4a:bc:a2:69:b3:cd:94:dc:59:11:83:e6:7c:85:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:95:F3:8F:17:06:E6:51:DB:51:AA:DC:5C:3F:E1:02:E9:9B:F7:59
            X509v3 Authority Key Identifier:
                keyid:C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e8:e8:5d:16:bf:3a:cd:f6:6b:02:e7:20:a1:9d:eb:00:56:
         bd:fc:5b:2d:67:8d:dc:ed:24:26:9d:b8:0e:f6:88:06:bb:b5:
         46:1e:51:44:62:e0:ad:3a:00:e4:33:91:c1:0b:da:40:dd:03:
         6b:56:c4:46:ca:24:6f:64:0c:81:23:aa:ea:45:bd:c2:9a:bf:
         c8:31:da:bc:eb:9b:cb:6a:03:00:18:49:1a:8a:69:62:ab:3e:
         5c:d9:0e:43:e6:bf:9a:23:b3:fa:c1:d3:5a:0f:58:cd:a8:05:
         1f:7d:5f:32:40:5c:6b:bb:6f:90:e8:77:99:ea:f9:e1:4d:6c:
         61:fa:b6:e7:34:12:0a:91:22:93:4f:00:e7:00:d1:fb:00:5e:
         cd:b5:0a:f4:ba:32:c7:14:1c:04:e2:3e:6a:50:bb:bf:7e:e5:
         53:37:4b:22:ee:85:51:08:6e:f0:6c:fb:5b:d5:b6:39:85:99:
         72:6b:85:de:b6:9d:d1:65:d2:fa:e8:58:fa:d3:01:45:15:9d:
         9f:54:dc:78:02:9b:c4:ad:25:bb:a7:a3:a4:09:9d:6b:12:15:
         ce:72:1e:19:44:19:85:88:fe:10:d0:8e:c1:ce:98:8c:e3:29:
         b3:8a:d1:f3:b3:5e:66:18:94:ea:f5:8e:da:28:14:c7:11:c6:
         00:9d:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:47:36 2026 by rpki-client