Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
File:                     RowmemR0_LfMSc8yXQ6dzF_o0g0.mft (raw, json)
Hash identifier:          hf87KmqiIr/88MKrg9PxoeGrK8L6UkOHkIojL5XJm9s=
Subject key identifier:   4D:D5:B7:9A:6B:1B:EE:47:4D:81:E4:6E:5B:C6:AC:1F:11:6A:F6:7C
Authority key identifier: 46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D
Certificate issuer:       /CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
Certificate serial:       019D9A07269B4B4AB76C15F1F6BF7C5DD02A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
Manifest number:          12E9
Signing time:             Fri 17 Apr 2026 06:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:53 +0000
Files and hashes:         1: RowmemR0_LfMSc8yXQ6dzF_o0g0.crl (hash: 77hM5JUC3I2i9LHny2tK/76ekrzBJoQ9VEYyJPDZX08=)
                          2: XhC0wvZVbOgmnkqmdg5TkjK_jkE.roa (hash: NxUjDJP+gkzyC6qL8mUykman5N4DTp6Y5GNrm0hEdsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:26:9b:4b:4a:b7:6c:15:f1:f6:bf:7c:5d:d0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468c267a6474fcb7cc49cf325d0e9dcc5fe8d20d
        Validity
            Not Before: Apr 17 06:00:53 2026 GMT
            Not After : Apr 18 06:00:53 2026 GMT
        Subject: CN=4dd5b79a6b1bee474d81e46e5bc6ac1f116af67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:22:68:a4:45:32:74:4a:60:d0:8a:87:ed:
                    db:2f:a2:f0:75:14:48:58:ff:f5:74:0a:ee:b3:c8:
                    3f:73:77:b0:bd:bc:92:54:a1:0d:4d:4e:77:2c:48:
                    4b:20:d1:c6:76:05:cb:f5:3b:3b:29:c0:39:76:6b:
                    20:e8:3d:d1:10:88:20:90:bf:93:d4:0b:9d:66:76:
                    99:66:2e:78:ef:63:c2:24:48:0a:76:70:de:7a:2e:
                    42:8b:87:ae:fa:38:fa:7c:b6:80:dd:85:b6:76:74:
                    e5:76:29:eb:31:d7:2b:ed:2a:c2:a1:02:7e:5d:24:
                    22:ba:61:7b:3e:ef:41:77:7a:0d:f3:ac:ec:79:62:
                    36:ee:b4:e6:50:9b:4a:89:06:07:50:ab:5b:df:5f:
                    8f:95:58:b3:6b:ef:41:7c:b6:b1:f8:a9:12:8a:45:
                    d7:0f:e7:2e:61:6a:33:c6:29:13:fd:24:25:b7:9b:
                    21:17:a0:81:42:cb:74:74:68:82:08:b9:a5:ad:c7:
                    e4:d6:7e:60:dc:b4:ad:3c:3b:07:c6:c3:a9:04:f8:
                    a8:fa:8b:70:8d:40:1a:df:f9:a3:ce:3e:61:07:19:
                    38:db:b5:28:e2:94:de:b2:04:ec:f0:00:f4:2d:b6:
                    45:a0:4b:9b:3a:75:8e:0f:3e:ea:b0:a6:e8:d5:d1:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D5:B7:9A:6B:1B:EE:47:4D:81:E4:6E:5B:C6:AC:1F:11:6A:F6:7C
            X509v3 Authority Key Identifier:
                keyid:46:8C:26:7A:64:74:FC:B7:CC:49:CF:32:5D:0E:9D:CC:5F:E8:D2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RowmemR0_LfMSc8yXQ6dzF_o0g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6e615f-5fd7-45b6-8acb-76999bf9999f/1/RowmemR0_LfMSc8yXQ6dzF_o0g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:66:ac:10:61:ae:80:ae:16:3e:bb:cb:49:ab:bc:c8:a0:0c:
         0a:93:63:97:31:37:e1:38:f5:57:a7:9c:ba:8e:a1:12:79:ea:
         7b:50:ca:f6:2c:1e:c9:bb:c3:c9:98:08:54:f0:f9:36:de:39:
         9b:44:08:c2:ba:5a:01:f9:55:b8:62:ad:1f:a6:b7:dd:0f:5f:
         da:5e:1c:1f:20:01:f4:31:96:95:be:71:46:03:d3:f6:85:5b:
         ba:03:50:2c:5a:73:0b:3b:51:32:9c:6f:f0:2c:ba:ac:03:f0:
         ec:b3:b2:0b:46:b6:97:57:5e:64:fd:ca:71:f7:d3:33:eb:9b:
         2e:5f:dd:e1:48:3b:9d:1b:5d:fb:ec:35:3f:43:d9:7a:de:ba:
         aa:66:07:9a:55:05:40:0d:da:74:10:fe:d4:c8:cb:4b:f9:85:
         73:47:64:b7:71:30:76:ea:66:83:01:74:01:8c:84:17:10:80:
         07:2b:b9:46:c7:73:a0:94:46:89:b3:4d:a0:70:37:a8:b7:e7:
         8e:c2:0e:e4:7b:ab:9a:1d:35:0d:46:83:40:be:30:9b:9d:02:
         59:37:60:57:d7:78:b2:01:11:91:20:0d:5a:f6:9f:e2:4d:ad:
         6f:71:44:ba:ce:1f:e6:bc:27:21:fa:b7:3d:1c:8f:b3:c1:1d:
         69:03:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:50 2026 by rpki-client