Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
File:                     0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft (raw, json)
Hash identifier:          cNxWmDtKFso6UEk1L57DvMDFZY01zQlkcJnlvVv2aQQ=
Subject key identifier:   54:AB:77:4D:C3:C8:7D:50:31:1B:E9:2B:3E:E4:BE:D7:EC:7B:1E:4C
Authority key identifier: D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C
Certificate issuer:       /CN=d16bdf54381f63074adf9a1bd9777877a720046c
Certificate serial:       019D9A07214A4B5592C4994F65BB63C18094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
Manifest number:          05B7
Signing time:             Fri 17 Apr 2026 06:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:51 +0000
Files and hashes:         1: 0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl (hash: cd29OyAKbACAmvmIBcR+r04qHCDzYhPsXR6jk/GBpHI=)
                          2: PBy6RtlfcDlGYKQC96uBlitoIlA.roa (hash: ojEK+JsCI/EYNMzf6oz6tDrWJ6bHMpNxw4BtdlAh7Ls=)
                          3: b-ePuu9SrmhEXBMPt86xMQ-pphc.roa (hash: ypt0as7xpwN512+ygzUQi3tGsik5JKD0RnuDrs7wXq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:21:4a:4b:55:92:c4:99:4f:65:bb:63:c1:80:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d16bdf54381f63074adf9a1bd9777877a720046c
        Validity
            Not Before: Apr 17 06:00:51 2026 GMT
            Not After : Apr 18 06:00:51 2026 GMT
        Subject: CN=54ab774dc3c87d50311be92b3ee4bed7ec7b1e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2b:0d:8a:38:ab:48:62:da:be:2a:42:28:d6:
                    d2:9f:3a:cd:2f:c7:b4:74:f5:86:f7:e1:1e:00:4c:
                    73:47:ab:35:00:e1:d1:09:00:b6:c6:a3:cc:7d:a6:
                    e2:c6:86:29:6a:06:ad:77:84:7c:7c:c5:f7:70:3a:
                    77:75:3d:6f:66:7b:b4:3d:83:bc:f9:17:19:df:46:
                    3e:62:2f:5e:eb:cc:ef:1d:b5:a9:8b:7a:0d:87:87:
                    e8:6e:a7:3a:6f:a0:8f:4f:ef:cf:17:39:87:43:4e:
                    6b:b0:af:c1:aa:f4:b6:3b:9f:a4:c8:60:4a:42:d8:
                    5e:c4:03:47:2d:52:d6:34:fa:bd:ae:aa:9f:44:fc:
                    06:db:7c:0c:7d:24:40:fa:2d:dd:aa:8d:1f:70:b0:
                    ce:d4:e8:a2:c7:76:e0:32:7e:83:47:6a:d4:61:35:
                    92:3d:0c:c8:7f:ea:21:03:e7:55:6b:af:b2:9f:49:
                    ee:df:42:b4:41:6e:8e:b9:34:28:e7:72:b6:92:a6:
                    43:4e:71:06:9f:fd:d5:86:37:8e:64:4d:d7:6d:fa:
                    84:c0:4c:c9:1e:90:5e:58:a4:22:14:28:5c:e0:5a:
                    40:2b:5e:ea:29:b2:08:e2:f2:4e:9f:cc:ff:a1:6e:
                    ff:ac:1f:23:73:0a:9b:7c:c4:47:a6:fb:2d:36:16:
                    c2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AB:77:4D:C3:C8:7D:50:31:1B:E9:2B:3E:E4:BE:D7:EC:7B:1E:4C
            X509v3 Authority Key Identifier:
                keyid:D1:6B:DF:54:38:1F:63:07:4A:DF:9A:1B:D9:77:78:77:A7:20:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvfVDgfYwdK35ob2Xd4d6cgBGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0fe8ef-5911-44c4-afa3-79dfd14c3960/1/0WvfVDgfYwdK35ob2Xd4d6cgBGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:05:17:dd:0d:61:6a:a1:d7:09:95:fb:d5:63:8d:fb:87:77:
         f7:db:f4:d5:d5:d2:65:39:61:0c:55:2b:9f:d0:c4:ce:b5:34:
         26:10:37:f7:cd:0a:18:55:ec:d6:39:26:ab:9a:db:b0:17:dd:
         21:c8:a6:df:05:46:72:7a:e7:82:58:f2:ca:c2:3f:b8:a3:f3:
         ed:6e:e9:37:ed:2d:46:6a:e7:a2:2e:7a:f6:d7:a1:09:e9:9a:
         73:71:f4:18:30:9b:20:0a:7f:08:83:c7:6d:45:8e:d7:36:42:
         4c:42:61:09:33:69:d8:ea:4a:ad:d3:4f:ea:58:0a:40:29:22:
         a9:ff:91:87:e3:ef:ce:70:cb:60:fa:5f:1f:5b:4a:dd:87:be:
         43:90:50:66:f9:6d:38:5f:54:bd:af:f2:c9:a2:69:3a:b5:f8:
         b6:f7:54:eb:c6:ec:48:e4:63:df:a6:98:2a:b6:f7:bb:eb:e7:
         b4:06:f5:ce:cf:cf:7f:6b:92:95:c7:8e:8b:e4:4b:92:ec:57:
         cf:e7:fd:55:13:a2:a0:46:fb:d6:fb:4f:d9:f1:25:72:d8:1c:
         33:16:c9:03:f5:12:54:52:7d:aa:96:6e:93:94:c2:8e:42:97:
         0d:18:90:96:d8:ab:dc:fa:87:90:f3:6a:3a:8a:ea:2d:77:36:
         2a:68:a8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:04 2026 by rpki-client