Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
File:                     WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json)
Hash identifier:          XVEqQEFjo5g1DZySExj5381oaNl2qtP3VsmEFg+2KMI=
Subject key identifier:   C4:8B:FC:C1:45:93:F1:F4:90:D1:5D:14:FF:D7:BC:19:DB:AA:A1:64
Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11
Certificate issuer:       /CN=58dd1017c53457a8a921419687bde8a8b8eb5611
Certificate serial:       019D9E1BA2F5228F2E47D852CE54BCEFD7EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
Manifest number:          0F67
Signing time:             Sat 18 Apr 2026 01:01:44 +0000
Manifest this update:     Sat 18 Apr 2026 01:01:44 +0000
Manifest next update:     Sun 19 Apr 2026 01:01:44 +0000
Files and hashes:         1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: 6WcLhjf+7xjxAx1Y8liW/t1r0Ubmwg6SM1uC3eOX8os=)
                          2: YgKPBZzEptUB-VysMZ1QC19vKVo.roa (hash: UUSQjdvl7T5Qa1uewqAwgqKQq4vND4OBY/oe1BQLrg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:1b:a2:f5:22:8f:2e:47:d8:52:ce:54:bc:ef:d7:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611
        Validity
            Not Before: Apr 18 01:01:44 2026 GMT
            Not After : Apr 19 01:01:44 2026 GMT
        Subject: CN=c48bfcc14593f1f490d15d14ffd7bc19dbaaa164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:b8:c4:69:a8:e2:eb:3e:d6:3f:75:7f:13:
                    a6:73:49:0f:72:82:a9:49:99:1b:69:90:0d:c4:f5:
                    69:47:94:43:4d:7b:7c:b2:8d:d6:5d:0b:bd:32:4e:
                    54:25:01:c1:9f:8c:63:4b:d7:a5:6c:72:bd:dc:84:
                    48:23:dc:a9:ab:06:24:ca:db:bc:ad:11:c3:b5:bf:
                    ab:b7:df:ee:6a:b9:6b:41:38:28:57:f1:09:b4:b8:
                    ff:4b:c1:79:29:6b:2b:63:eb:fa:b7:3b:b2:8c:52:
                    e4:fc:ed:25:54:ee:ac:a6:33:91:61:90:db:47:e1:
                    28:10:30:9f:7a:cc:46:e6:2b:b3:06:e2:13:b1:5d:
                    8d:9c:4f:e9:0c:e5:bb:91:62:ac:5e:d7:c5:96:0e:
                    69:11:8d:62:31:3a:36:89:20:7d:6c:af:ac:1c:16:
                    91:da:18:60:be:e5:54:f9:34:a8:76:ab:ce:9f:21:
                    92:5c:5b:01:23:71:4d:b8:4e:22:1d:98:85:b1:89:
                    36:ec:ac:45:e0:89:9f:47:c0:da:d9:95:31:e1:ff:
                    8b:34:2c:5d:18:0e:99:1f:9d:e5:57:a3:b0:34:20:
                    e2:b9:7d:f1:77:d0:d9:1e:d2:84:df:c1:78:78:ff:
                    1c:4f:a6:ae:5b:cb:e9:3c:1e:30:b2:5b:5e:af:4a:
                    fb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8B:FC:C1:45:93:F1:F4:90:D1:5D:14:FF:D7:BC:19:DB:AA:A1:64
            X509v3 Authority Key Identifier:
                keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:86:8b:4d:90:0b:5f:8a:87:93:38:93:dd:2d:2c:c2:57:4c:
         ae:ec:b7:f1:56:83:12:34:8f:21:2c:94:21:58:77:0f:20:31:
         d5:78:df:a6:6d:1c:e0:ad:e6:92:de:c6:39:51:0c:dc:94:48:
         1a:12:fc:1e:11:03:41:33:2e:63:43:0e:b9:b3:b3:5a:50:ae:
         ba:7a:5c:b1:d8:59:7e:bb:ea:26:9c:0e:b2:2a:e4:78:c4:fd:
         78:26:5d:78:40:7c:d6:a2:53:a7:fe:97:15:c2:a9:39:0a:0f:
         8a:8d:f0:a4:b5:3a:c2:ac:8d:bd:6d:88:73:45:b7:08:47:83:
         f3:58:8a:6e:70:f5:12:4f:6b:1a:30:ed:38:a6:75:dd:85:2c:
         e1:67:5e:d9:d2:e5:f1:73:e8:9c:c4:a3:ad:9d:1c:2a:90:ff:
         2d:a8:03:0e:86:86:7b:f4:e4:75:87:84:58:8f:1a:22:50:b9:
         3d:cc:05:22:11:92:31:3b:1c:e1:ea:88:c0:89:53:f4:be:25:
         96:d3:e8:5e:38:65:d3:2a:dc:57:53:83:3d:8f:c2:ee:3b:a9:
         7f:19:9e:41:ef:06:21:78:3a:52:00:a1:20:0b:fc:ab:1f:0f:
         e4:8f:bc:a6:e0:e5:9e:ab:4e:e6:c0:6e:31:61:bf:a4:6c:3f:
         24:29:42:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eG6L1Io8uR9hSzlS879fsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZGQxMDE3YzUzNDU3YThhOTIxNDE5Njg3YmRlOGE4Yjhl
YjU2MTEwHhcNMjYwNDE4MDEwMTQ0WhcNMjYwNDE5MDEwMTQ0WjAzMTEwLwYDVQQD
EyhjNDhiZmNjMTQ1OTNmMWY0OTBkMTVkMTRmZmQ3YmMxOWRiYWFhMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIq4xGmo4us+1j91fxOmc0kPcoKp
SZkbaZANxPVpR5RDTXt8so3WXQu9Mk5UJQHBn4xjS9elbHK93IRII9ypqwYkytu8
rRHDtb+rt9/uarlrQTgoV/EJtLj/S8F5KWsrY+v6tzuyjFLk/O0lVO6spjORYZDb
R+EoEDCfesxG5iuzBuITsV2NnE/pDOW7kWKsXtfFlg5pEY1iMTo2iSB9bK+sHBaR
2hhgvuVU+TSodqvOnyGSXFsBI3FNuE4iHZiFsYk27KxF4ImfR8Da2ZUx4f+LNCxd
GA6ZH53lV6OwNCDiuX3xd9DZHtKE38F4eP8cT6auW8vpPB4wslter0r7XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSL/MFFk/H0kNFdFP/XvBnbqqFkMB8GA1UdIwQY
MBaAFFjdEBfFNFeoqSFBloe96Ki461YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEt
ZGNhZjdlZjdhZTNhLzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEtZGNhZjdlZjdhZTNh
LzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAroaLTZAL
X4qHkziT3S0swldMruy38VaDEjSPISyUIVh3DyAx1Xjfpm0c4K3mkt7GOVEM3JRI
GhL8HhEDQTMuY0MOubOzWlCuunpcsdhZfrvqJpwOsirkeMT9eCZdeEB81qJTp/6X
FcKpOQoPio3wpLU6wqyNvW2Ic0W3CEeD81iKbnD1Ek9rGjDtOKZ13YUs4Wde2dLl
8XPonMSjrZ0cKpD/LagDDoaGe/TkdYeEWI8aIlC5PcwFIhGSMTsc4eqIwIlT9L4l
ltPoXjhl0yrcV1ODPY/C7jupfxmeQe8GIXg6UgChIAv8qx8P5I+8puDlnqtO5sBu
MWG/pGw/JClCSg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:53 2026 by rpki-client