Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
File:                     wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json)
Hash identifier:          GKiWuqXI/7DhHbvbYpnj93aKP5IKyUPlfhFMSE89xM4=
Subject key identifier:   DE:16:B5:18:F6:F1:AA:CE:08:9B:1E:B9:33:D7:41:9E:5C:91:01:CD
Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98
Certificate issuer:       /CN=c0f0ee9842627031eca264dac65e5fef63943f98
Certificate serial:       019D992BCB0EE0B4932AED016CAAA893C278
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
Manifest number:          0F90
Signing time:             Fri 17 Apr 2026 02:01:17 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:17 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:17 +0000
Files and hashes:         1: U7ys6itFnvuaePn4ScsbAtbzsp0.roa (hash: d+i6tJ5mzYcRwG/S0qIlnLIWWa0XIkizyeSNRfnsoAI=)
                          2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: J9i+aPpmCSts6Y/opdAd6rejx2hb51KwsE913fviyGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:cb:0e:e0:b4:93:2a:ed:01:6c:aa:a8:93:c2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98
        Validity
            Not Before: Apr 17 02:01:17 2026 GMT
            Not After : Apr 18 02:01:17 2026 GMT
        Subject: CN=de16b518f6f1aace089b1eb933d7419e5c9101cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3c:4d:0e:02:24:5d:ff:e3:94:89:b4:e4:6b:
                    eb:72:3e:ce:61:83:cc:d1:07:30:7b:84:f2:48:7c:
                    0b:86:73:68:9e:36:60:9b:6a:17:03:de:10:0e:92:
                    7d:38:ad:6c:d8:16:01:b9:39:17:84:05:a7:3a:12:
                    58:c4:30:48:8c:26:bf:11:6f:4f:58:71:6b:26:51:
                    4b:57:ee:59:b7:6b:bd:86:3b:f2:5e:b2:ba:ef:a7:
                    3c:05:55:b1:10:3d:b9:fb:91:3f:23:d7:26:85:c8:
                    d4:a0:51:77:fa:30:d5:e0:5f:cf:c1:78:2d:da:2d:
                    a3:6a:39:e6:ec:62:e0:6c:f0:c4:73:ef:58:51:12:
                    d8:a6:ce:fd:50:cb:12:16:9b:4c:d4:34:4d:cf:e3:
                    d5:08:cf:3e:d0:02:52:c6:e0:af:90:cd:c2:d5:d3:
                    d8:65:10:2b:e7:5e:62:8c:d1:12:3c:7a:17:55:4d:
                    56:bc:46:5e:2f:53:07:2a:e1:76:72:55:b5:1d:21:
                    7d:7c:53:e5:fc:11:d5:14:8a:16:2f:05:59:a5:91:
                    e3:99:57:84:4a:2b:8f:d2:be:48:d3:81:82:7d:fe:
                    c2:47:b6:3e:5b:c7:d7:81:d2:32:af:56:14:5e:7e:
                    3f:d8:87:09:4b:82:90:bf:e5:f5:10:3a:eb:eb:d9:
                    57:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:16:B5:18:F6:F1:AA:CE:08:9B:1E:B9:33:D7:41:9E:5C:91:01:CD
            X509v3 Authority Key Identifier:
                keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:21:8a:bf:83:21:69:a1:38:d5:80:e0:f8:8c:4c:c7:46:88:
         c5:fa:79:9b:dd:11:43:f1:68:0b:ea:fe:fa:e8:3c:8e:90:e9:
         23:bf:d0:0b:17:80:62:e6:4f:ac:76:b5:9d:a5:82:26:bd:c0:
         a7:7b:cd:39:67:63:c0:b9:ca:d1:17:9a:4f:f1:e6:e4:1a:1c:
         e4:4b:bd:b2:e1:90:9b:a9:90:06:6a:9a:b7:ac:09:53:6f:07:
         52:09:a0:6b:ab:af:23:1b:8f:25:58:29:db:a2:19:85:b1:41:
         82:69:2f:02:b0:8a:a9:8b:84:21:04:2f:d7:0b:4e:40:39:0b:
         ba:f0:39:11:67:84:b8:12:1c:1d:88:c7:b7:dd:92:57:80:c5:
         bb:f6:84:2b:ec:63:44:a7:f2:5e:ce:fa:2e:6a:f1:62:6a:0d:
         91:f6:26:87:bc:89:55:73:c4:f4:2d:49:2f:2e:69:23:e9:83:
         fe:2d:4a:16:fa:a8:b6:3c:de:ed:90:99:1c:74:75:8e:30:e9:
         cd:98:13:dc:2d:46:4e:99:f8:77:a3:27:7f:87:73:9f:7e:8a:
         b2:26:4a:72:80:68:27:a0:7e:71:a8:db:ae:20:b1:e3:f8:ef:
         3b:9f:31:60:cf:2e:e2:f5:84:d8:af:24:00:02:91:c6:9f:ee:
         ab:56:07:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK8sO4LSTKu0BbKqok8J4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjBlZTk4NDI2MjcwMzFlY2EyNjRkYWM2NWU1ZmVmNjM5
NDNmOTgwHhcNMjYwNDE3MDIwMTE3WhcNMjYwNDE4MDIwMTE3WjAzMTEwLwYDVQQD
EyhkZTE2YjUxOGY2ZjFhYWNlMDg5YjFlYjkzM2Q3NDE5ZTVjOTEwMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTxNDgIkXf/jlIm05Gvrcj7OYYPM
0Qcwe4TySHwLhnNonjZgm2oXA94QDpJ9OK1s2BYBuTkXhAWnOhJYxDBIjCa/EW9P
WHFrJlFLV+5Zt2u9hjvyXrK676c8BVWxED25+5E/I9cmhcjUoFF3+jDV4F/PwXgt
2i2jajnm7GLgbPDEc+9YURLYps79UMsSFptM1DRNz+PVCM8+0AJSxuCvkM3C1dPY
ZRAr515ijNESPHoXVU1WvEZeL1MHKuF2clW1HSF9fFPl/BHVFIoWLwVZpZHjmVeE
SiuP0r5I04GCff7CR7Y+W8fXgdIyr1YUXn4/2IcJS4KQv+X1EDrr69lXtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4WtRj28arOCJseuTPXQZ5ckQHNMB8GA1UdIwQY
MBaAFMDw7phCYnAx7KJk2sZeX+9jlD+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAt
YzZlY2U1OTAxNTgwLzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAtYzZlY2U1OTAxNTgw
LzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciGKv4Mh
aaE41YDg+IxMx0aIxfp5m90RQ/FoC+r++ug8jpDpI7/QCxeAYuZPrHa1naWCJr3A
p3vNOWdjwLnK0ReaT/Hm5Boc5Eu9suGQm6mQBmqat6wJU28HUgmga6uvIxuPJVgp
26IZhbFBgmkvArCKqYuEIQQv1wtOQDkLuvA5EWeEuBIcHYjHt92SV4DFu/aEK+xj
RKfyXs76LmrxYmoNkfYmh7yJVXPE9C1JLy5pI+mD/i1KFvqotjze7ZCZHHR1jjDp
zZgT3C1GTpn4d6Mnf4dzn36KsiZKcoBoJ6B+cajbriCx4/jvO58xYM8u4vWE2K8k
AAKRxp/uq1YHQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:44 2026 by rpki-client