Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File:                     W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier:          dky0Yc36vx2yPWu0bnAss0fIct1OyKguSXEt0Z8YsXI=
Subject key identifier:   67:B3:70:EB:6C:DA:F5:C4:69:BF:17:BD:AA:20:DB:DB:BB:3E:F8:F5
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer:       /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial:       019D98BDE4AB25239E3C578962028837A7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number:          0E63
Signing time:             Fri 17 Apr 2026 00:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:14 +0000
Files and hashes:         1: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: i7Rm23jmKago3JWkX2mhOwur70e9YcEOgDw/KEwUIZQ=)
                          2: XcofZ2zUXbUkXhdjGHo_Ijp3eqY.roa (hash: G155Cwdr7xdTzfgF1ccmtV2g6/W9sVULFwUJkZWAH2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:e4:ab:25:23:9e:3c:57:89:62:02:88:37:a7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
        Validity
            Not Before: Apr 17 00:01:14 2026 GMT
            Not After : Apr 18 00:01:14 2026 GMT
        Subject: CN=67b370eb6cdaf5c469bf17bdaa20dbdbbb3ef8f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:fa:cd:fc:d0:c3:f6:bc:76:f2:1b:e9:e5:
                    e8:04:e5:00:cb:28:ea:48:2a:0c:02:d5:72:0d:7c:
                    04:d5:76:6c:11:a9:28:56:97:0d:29:ae:ab:65:b6:
                    48:bd:f5:0c:94:52:55:37:9c:0e:76:a2:60:37:08:
                    a2:e2:7b:6d:63:61:2f:a4:3a:e8:fb:ea:8c:27:e9:
                    04:dd:cb:1d:93:0f:6c:32:0e:51:d4:41:80:48:b2:
                    0f:ba:34:f6:b4:7e:e8:d1:96:ec:42:e6:6c:17:29:
                    53:04:30:5c:99:4e:d6:e1:2a:c2:17:9e:26:2f:ff:
                    40:a4:4f:22:0a:7f:13:85:aa:c6:f9:e7:2f:15:03:
                    f7:30:56:8c:e4:4b:b7:23:f6:cf:aa:96:cb:ae:ed:
                    5b:9b:41:24:d4:79:52:c3:7e:5e:46:aa:2a:a6:c5:
                    f2:00:51:28:bb:68:3d:2a:b9:d4:3e:b5:26:a1:54:
                    1f:cc:40:0c:08:d5:5c:c1:97:40:bc:e8:bd:a8:1e:
                    90:da:15:87:8b:ae:69:de:6e:89:2a:5f:92:46:49:
                    00:db:41:b8:c8:19:9c:51:48:a0:34:fc:6c:d2:49:
                    f6:13:44:bb:b2:3e:55:e3:70:35:05:00:79:ec:c8:
                    d0:d0:c0:fb:1a:2d:c4:04:d6:40:a0:a5:ff:ef:88:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B3:70:EB:6C:DA:F5:C4:69:BF:17:BD:AA:20:DB:DB:BB:3E:F8:F5
            X509v3 Authority Key Identifier:
                keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d1:8c:dc:9b:66:e2:48:e2:e7:5c:03:ba:2f:86:0d:00:73:
         ce:3d:97:8a:6c:de:8c:e8:4b:a5:ad:10:a8:58:9f:18:24:7c:
         0a:4f:dd:70:72:94:93:4e:d1:9b:e5:88:dd:79:5d:7a:2d:f7:
         36:8f:00:2b:74:e2:b3:44:17:9b:c9:c0:64:4d:24:a7:6e:e9:
         e1:ba:11:79:46:2e:06:ba:fc:16:07:b4:98:a2:22:8b:ca:f2:
         60:f4:ce:ea:36:a6:cb:b2:0e:6c:ff:1a:c9:81:53:56:89:cd:
         cb:00:0f:06:a0:05:19:d7:3b:d2:d1:1f:f2:56:1d:b6:23:53:
         01:98:e0:d6:f7:a1:20:bc:3b:d9:42:12:66:9b:3c:38:14:4b:
         e3:6a:98:82:22:63:7a:2f:ce:af:a5:cd:bb:47:26:ce:3f:c8:
         b2:da:7b:2a:8e:ea:98:9c:0c:c1:17:60:84:4b:2f:2c:35:d4:
         6f:d4:bc:b3:32:07:41:43:1f:3f:84:4f:c2:92:96:98:f7:66:
         3f:55:37:ce:8d:9c:53:76:f7:4d:02:80:a9:7c:64:e4:ef:ab:
         e3:b8:7a:ee:18:1e:ec:b0:7f:2e:ec:d9:3b:21:c7:ab:ac:09:
         47:a7:54:ed:ec:62:e5:00:1c:18:60:28:7f:39:6b:86:a0:b3:
         e3:81:41:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YveSrJSOePFeJYgKIN6fUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNGI0NTJkYmZkNGM3MDRiZGE5Y2MyYTRlOTE1ZjQ3MTky
YTdmNzEwHhcNMjYwNDE3MDAwMTE0WhcNMjYwNDE4MDAwMTE0WjAzMTEwLwYDVQQD
Eyg2N2IzNzBlYjZjZGFmNWM0NjliZjE3YmRhYTIwZGJkYmJiM2VmOGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy//6zfzQw/a8dvIb6eXoBOUAyyjq
SCoMAtVyDXwE1XZsEakoVpcNKa6rZbZIvfUMlFJVN5wOdqJgNwii4nttY2EvpDro
++qMJ+kE3csdkw9sMg5R1EGASLIPujT2tH7o0ZbsQuZsFylTBDBcmU7W4SrCF54m
L/9ApE8iCn8TharG+ecvFQP3MFaM5Eu3I/bPqpbLru1bm0Ek1HlSw35eRqoqpsXy
AFEou2g9KrnUPrUmoVQfzEAMCNVcwZdAvOi9qB6Q2hWHi65p3m6JKl+SRkkA20G4
yBmcUUigNPxs0kn2E0S7sj5V43A1BQB57MjQ0MD7Gi3EBNZAoKX/74jaLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGezcOts2vXEab8Xvaog29u7Pvj1MB8GA1UdIwQY
MBaAFFtLRS2/1McEvanMKk6RX0cZKn9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgt
ZTU4ZWRjNDJmMDRjLzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgtZTU4ZWRjNDJmMDRj
LzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdGM3Jtm
4kji51wDui+GDQBzzj2XimzejOhLpa0QqFifGCR8Ck/dcHKUk07Rm+WI3Xldei33
No8AK3Tis0QXm8nAZE0kp27p4boReUYuBrr8Fge0mKIii8ryYPTO6jamy7IObP8a
yYFTVonNywAPBqAFGdc70tEf8lYdtiNTAZjg1vehILw72UISZps8OBRL42qYgiJj
ei/Or6XNu0cmzj/Istp7Ko7qmJwMwRdghEsvLDXUb9S8szIHQUMfP4RPwpKWmPdm
P1U3zo2cU3b3TQKAqXxk5O+r47h67hge7LB/LuzZOyHHq6wJR6dU7exi5QAcGGAo
fzlrhqCz44FBOw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:14:52 2026 by rpki-client