Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File:                     Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier:          YeN9Kb1yfVR9Ckd0zMNrPjk9N7vgvs1NroyqvfAYIDw=
Subject key identifier:   4B:16:E0:57:3B:0F:FD:02:E3:0D:F4:3B:E2:A1:9A:DF:C1:5B:C9:B5
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer:       /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial:       019D984FAABB91BB7CAB0A5002F011F7F697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number:          0636
Signing time:             Thu 16 Apr 2026 22:00:51 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:51 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:51 +0000
Files and hashes:         1: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: rH19Lr0i11uBcTBpaqfugZMdGhdt2ZuwOUKTU8guG38=)
                          2: m0yOtQ4zzaWwbkLA2mct7O9eAl8.roa (hash: TTt4vBq0ts1GuSUcOF2cVVxmQbeDaFKzFBYDNYxTze8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:aa:bb:91:bb:7c:ab:0a:50:02:f0:11:f7:f6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
        Validity
            Not Before: Apr 16 22:00:51 2026 GMT
            Not After : Apr 17 22:00:51 2026 GMT
        Subject: CN=4b16e0573b0ffd02e30df43be2a19adfc15bc9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fd:ab:78:dc:d4:74:d6:db:10:7a:e6:73:9f:
                    a9:b0:f5:ac:8a:0d:a2:65:7c:84:b0:7a:37:a1:b9:
                    78:d7:1a:ba:b4:28:c3:d5:d4:f5:5d:ea:23:fb:c1:
                    f5:fe:cc:dc:d3:2c:66:74:b2:50:71:e1:44:ab:a2:
                    71:09:39:4f:d4:f5:33:39:25:4b:93:86:8a:e2:f8:
                    17:c0:74:47:83:67:ab:c9:46:1b:6b:d6:c3:06:81:
                    13:71:45:3b:21:50:90:0f:77:97:f5:02:0d:54:5d:
                    10:87:4d:95:ab:d8:b9:ee:ca:a0:b3:4f:eb:54:22:
                    0d:a3:48:76:59:6f:bf:73:f5:b6:47:70:ca:6e:45:
                    1d:91:50:f0:a1:e2:a9:e6:0b:b1:b2:ee:1c:35:af:
                    02:28:5f:8e:4e:1b:5c:d9:5a:fd:59:d4:3a:8b:91:
                    88:a4:dd:c8:48:74:6d:12:5b:a8:21:07:c5:ff:48:
                    94:05:cc:4f:9b:9b:40:71:53:a7:57:1e:8d:96:f7:
                    a6:f5:20:c7:d6:0c:1e:9c:f7:ef:f1:03:96:15:8c:
                    cb:4e:16:6a:b2:7d:17:41:c3:cb:14:4d:6d:c0:ed:
                    ca:85:e1:e1:64:63:38:e8:45:94:3d:f2:a7:36:2b:
                    c2:93:3c:dc:5f:aa:78:70:fe:c8:3b:35:61:10:0a:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:16:E0:57:3B:0F:FD:02:E3:0D:F4:3B:E2:A1:9A:DF:C1:5B:C9:B5
            X509v3 Authority Key Identifier:
                keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:26:04:98:7a:55:12:ac:87:c0:64:c7:0d:10:86:ee:f7:4e:
         b6:8b:9c:10:e0:f2:bc:e4:68:90:50:95:97:0b:8c:e6:0b:3b:
         4e:7f:7e:1a:22:1a:37:88:b6:0d:ea:62:6b:30:3f:6d:f7:6a:
         7b:c0:c1:5d:90:5a:62:93:6a:94:2c:fd:68:0e:07:87:a9:7d:
         1c:6b:03:fa:c8:d1:dd:97:c5:52:ba:3e:94:83:22:51:36:fd:
         bd:ee:55:20:15:98:c5:21:95:15:0a:f2:e0:2a:08:de:67:44:
         8f:01:85:96:d6:fc:b2:1a:a8:84:72:5c:6f:ae:4a:ad:d7:c9:
         27:bd:39:69:54:7d:a6:26:98:f8:37:e0:2a:14:9d:dc:15:f7:
         a6:91:33:cd:ee:d5:34:fb:f0:26:40:39:5c:89:9a:96:4c:75:
         71:e2:ba:29:9e:52:e6:87:2f:c6:20:92:1a:79:73:79:94:02:
         b3:91:16:78:eb:df:71:94:b1:68:84:8c:10:7e:e7:ed:f9:0e:
         d5:c5:16:61:09:e2:48:34:11:a6:29:51:04:22:0c:43:b9:88:
         d0:aa:d3:cf:55:52:f4:79:78:7e:f8:cf:3d:59:c5:ad:e4:f0:
         6d:8b:43:e0:a2:2b:c4:4d:60:da:a4:3e:4b:62:ad:69:1a:26:
         76:69:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:39 2026 by rpki-client