Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
File:                     Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json)
Hash identifier:          JiS0aKaff3FNJm8PK3xqWuQhJ+ANSZAgTL2le86EXls=
Subject key identifier:   49:4C:6B:62:0C:0F:61:68:AB:5B:17:E8:C5:FA:A1:74:6A:D9:34:7F
Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD
Certificate issuer:       /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
Certificate serial:       019D9AAC293AF53BDB377B7AE76397CFF8FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
Manifest number:          0D5B
Signing time:             Fri 17 Apr 2026 09:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:07 +0000
Files and hashes:         1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: dy9jMORIHRDwFmjF4DD7lyaqnBJzGBKjC6387GC/wZY=)
                          2: V74Jz1wXKEOVFxFJuc3IlOQAtRc.roa (hash: f0NajtksvBvEsqeKrzgLbgQXCMvGxhAemXF0EzhQ/c4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:29:3a:f5:3b:db:37:7b:7a:e7:63:97:cf:f8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd
        Validity
            Not Before: Apr 17 09:01:07 2026 GMT
            Not After : Apr 18 09:01:07 2026 GMT
        Subject: CN=494c6b620c0f6168ab5b17e8c5faa1746ad9347f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:8b:f7:81:63:3f:85:aa:d3:6c:42:74:d8:
                    40:e7:37:58:2c:81:31:c2:f6:43:fe:3e:c2:6d:68:
                    f1:1f:eb:4d:1f:16:30:0a:c8:93:f5:55:ed:d1:7d:
                    bb:b3:0b:a5:8f:b1:b3:15:50:2e:2e:0b:ce:11:76:
                    c6:49:00:a4:e4:13:6c:0b:9e:25:15:58:d3:d1:be:
                    41:6e:28:dc:13:3a:ee:03:60:f7:49:9a:b7:78:3b:
                    46:5e:bd:ad:94:52:8f:40:5c:55:c7:f4:a0:43:bf:
                    0d:df:a4:b5:4d:f9:ee:f0:d1:a7:a1:58:5f:86:f4:
                    70:fa:c5:98:52:6b:ed:08:9d:0e:01:ab:fa:5b:36:
                    cc:ef:d5:5b:9b:91:0a:ea:da:b5:8e:f7:5a:b3:ce:
                    4c:6b:7d:66:0d:c6:00:38:8e:ab:3c:b1:a0:c8:8e:
                    b8:16:26:1f:9e:83:55:10:27:1e:de:8a:2e:b5:32:
                    6d:90:5c:86:da:3c:54:2d:50:5b:e2:c4:f4:20:38:
                    cb:2c:ac:e5:32:4a:13:c8:00:84:7c:50:1f:28:f0:
                    92:ff:bb:47:58:3a:12:dd:ba:ba:68:df:c5:07:ac:
                    f8:29:82:c0:32:cd:e5:bb:3a:34:1c:d1:30:02:2a:
                    b4:9f:6f:c8:df:d5:2e:c1:41:58:0d:ad:df:c7:e2:
                    9f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4C:6B:62:0C:0F:61:68:AB:5B:17:E8:C5:FA:A1:74:6A:D9:34:7F
            X509v3 Authority Key Identifier:
                keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:4d:0d:83:a4:55:bd:08:3b:90:33:f4:5f:87:48:b4:94:
         9c:09:29:7a:5a:73:a2:a0:d7:3a:65:17:62:5c:12:cb:23:c7:
         98:be:ac:a7:8d:c5:54:ed:6e:21:4d:ad:01:f9:97:8b:39:10:
         ad:db:89:e4:05:13:b4:53:01:f6:e2:54:37:9b:2c:40:ab:1b:
         a6:06:9f:9d:6e:fe:7c:b8:74:d4:30:cc:c8:82:d9:90:db:36:
         2d:58:fe:54:26:68:71:dc:65:f2:dd:50:46:02:6a:66:ab:82:
         9f:39:4e:c9:68:ee:2c:81:ad:b2:36:ec:b2:b0:af:de:06:b0:
         a8:7b:a2:61:56:fc:3a:b8:5e:a0:7c:b5:e2:80:2f:b5:e5:80:
         a2:10:3f:f8:fa:1d:ec:04:e8:1d:cf:e5:59:75:57:d1:fe:2a:
         88:18:9c:de:ed:65:a5:0e:6a:f8:42:d9:e1:14:ca:76:f5:5a:
         46:9e:7a:4f:96:36:8a:ab:34:9f:e2:7d:8d:eb:8c:05:33:ab:
         25:c3:7a:87:d8:7d:f1:1b:5e:24:7b:5b:06:4c:1d:0b:01:d9:
         a2:0b:7e:07:36:72:65:73:41:f2:8b:28:d7:92:8f:92:4a:c7:
         ed:2e:0a:f0:c7:98:67:0d:06:ad:b8:f4:f2:80:c2:97:54:66:
         b2:6f:c2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:03 2026 by rpki-client