Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File:                     DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier:          xc4JiATz4OJ6T6kVmh5m65et2b/SHgGdBK7zTUzacFs=
Subject key identifier:   57:70:B1:68:BD:DA:89:EB:95:86:DF:9A:AD:E8:9C:27:83:C9:47:36
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       019CAB6AF26E353B5EF5459063A1629A85EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number:          0B57
Signing time:             Sun 01 Mar 2026 22:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:38 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:38 +0000
Files and hashes:         1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: irvHx/aPtb/Xdj0lOK7dORykwLPmQwvCPtBzQ6waPgc=)
                          2: j8vNC93uxoh-4kk4cHhskKuIFe4.roa (hash: BN9kSSFWkYcPXBEGoOjVhdYG3iHtGqPP4CWGHkZ5iSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6a:f2:6e:35:3b:5e:f5:45:90:63:a1:62:9a:85:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: Mar  1 22:00:38 2026 GMT
            Not After : Mar  2 22:00:38 2026 GMT
        Subject: CN=5770b168bdda89eb9586df9aade89c2783c94736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:2c:1b:43:6c:c1:e2:66:04:c8:1f:73:f1:
                    be:2b:c0:d0:f7:b2:5c:f8:31:67:af:85:a0:86:10:
                    34:f9:7f:e0:98:fc:9e:d2:c2:84:fe:ae:85:20:20:
                    14:44:57:2b:6c:a0:14:3b:f5:51:17:e1:59:90:c4:
                    4c:87:35:ae:cc:a6:65:60:56:51:31:42:28:3a:e5:
                    da:cb:d2:36:a8:96:d2:99:02:ae:3d:96:ab:52:b0:
                    54:7b:ed:fb:f4:2a:2a:1f:3e:50:ba:44:87:d3:44:
                    b0:cd:c4:0c:d5:ba:22:97:58:82:25:74:28:0c:71:
                    67:a6:88:cf:c6:dd:00:62:74:11:ff:8e:59:9c:3b:
                    df:98:55:62:06:eb:6b:43:17:c5:9b:33:03:7d:b1:
                    d5:95:ae:af:65:8a:58:b3:df:5d:8e:df:4c:87:ec:
                    25:85:f5:9a:e7:2c:90:19:7f:d8:5c:1e:8b:19:fa:
                    ac:a6:7a:75:3b:13:1a:19:d8:4e:63:f1:4e:22:22:
                    cc:10:b4:7f:b3:c8:37:53:e2:b1:b8:ee:03:01:cf:
                    49:82:e6:30:03:82:02:91:5a:e3:96:8c:bc:60:e4:
                    5d:0e:fb:1e:56:13:54:c5:ad:2a:dc:3a:59:05:62:
                    61:28:b8:76:92:fa:7f:97:f3:4b:8a:bd:5b:d4:c4:
                    06:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:70:B1:68:BD:DA:89:EB:95:86:DF:9A:AD:E8:9C:27:83:C9:47:36
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:09:cf:43:fd:b0:7b:07:15:7c:19:a2:3c:6b:c3:fe:d3:57:
         b6:1e:98:c8:db:5e:fa:8d:1f:ce:eb:12:4b:b4:fa:2f:0e:bb:
         19:fc:28:b5:51:b7:98:5f:28:93:9d:45:be:42:2b:8d:7a:f9:
         85:d2:98:dd:84:56:8a:42:86:d8:53:a8:85:c6:fa:9f:30:f7:
         55:44:35:a9:a3:fe:15:18:15:dc:ed:05:dd:ab:e3:a0:25:8f:
         29:a8:07:7f:2e:7b:a8:2f:ca:93:df:a4:3e:56:7f:de:bd:d5:
         5c:8b:07:dc:cd:38:a5:d9:e7:2e:9c:1c:df:ef:3c:4e:ad:a9:
         0f:86:0d:d8:b9:52:76:c8:0f:99:28:a7:ee:cc:c0:c4:9b:46:
         64:03:f4:e6:6a:da:f2:14:2b:8f:9e:b4:b0:93:6e:dc:91:d7:
         07:6b:19:44:a3:d1:f3:07:a7:3e:a5:3c:ad:52:08:5a:ff:58:
         bb:bf:da:d3:a6:40:b7:bf:6e:45:55:3b:0e:09:4a:b7:9f:54:
         67:41:ee:ab:d2:3d:fc:d3:9f:5a:d8:7b:8f:ea:08:42:9e:7c:
         ef:e9:57:5d:9b:d6:a6:7b:5a:9f:f3:32:94:14:41:d8:d5:b9:
         07:fd:0e:05:4c:c8:df:60:ca:33:57:c5:b7:1f:6c:90:31:e7:
         d3:3c:72:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:38 2026 by rpki-client