Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
File:                     0gVCphNVJBQhlMqnCOfbLMprTmM.mft (raw, json)
Hash identifier:          LggpRd0mPoCPyvEbTW2sKDOhEwOs11VLE/AI+R1HrCc=
Subject key identifier:   C9:63:82:D1:2C:FD:A3:BE:B9:45:08:E9:EE:F8:59:DB:B2:98:1C:6C
Authority key identifier: D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63
Certificate issuer:       /CN=d20542a6135524142194caa708e7db2cca6b4e63
Certificate serial:       019D9A06BDCB161752DA2C1C30B70B4E102A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
Manifest number:          119A
Signing time:             Fri 17 Apr 2026 06:00:26 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:26 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:26 +0000
Files and hashes:         1: 0gVCphNVJBQhlMqnCOfbLMprTmM.crl (hash: hdBwHzjm23Hux046C6WMF+vyWDnUtkdECqhvlUsMiN8=)
                          2: W-WGisgg-jdHv8TOeMHyK0ABKKM.roa (hash: AOrzg/e6GHv0wl5jj9rXhlmu6Xrpu+wHeWmnEnYMw/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:bd:cb:16:17:52:da:2c:1c:30:b7:0b:4e:10:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d20542a6135524142194caa708e7db2cca6b4e63
        Validity
            Not Before: Apr 17 06:00:26 2026 GMT
            Not After : Apr 18 06:00:26 2026 GMT
        Subject: CN=c96382d12cfda3beb94508e9eef859dbb2981c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:7c:fc:e5:7d:e1:14:4b:9c:63:84:c4:f4:
                    52:eb:35:32:ac:32:65:fb:f7:0a:e9:e0:46:32:4e:
                    86:3f:2f:51:09:26:d7:41:f5:26:18:e2:cb:44:a1:
                    57:8c:40:52:49:58:39:cc:ea:37:60:43:8b:4a:8a:
                    ab:c1:ae:b4:33:f5:bf:a6:fa:5d:a7:f2:75:84:ca:
                    47:c9:fb:94:23:bd:b6:3b:1f:52:b1:2a:41:3e:79:
                    0b:24:8c:09:d1:28:43:ed:7f:90:c4:6b:47:c7:aa:
                    fe:51:c8:2a:56:44:7e:c9:a7:39:53:77:20:c8:e6:
                    b9:eb:22:42:27:bf:84:c1:e8:88:1d:f8:d2:55:75:
                    5f:dc:66:7b:ce:17:10:98:3c:db:bd:f0:e5:54:88:
                    37:5b:eb:9d:e2:93:ba:26:79:bb:44:9c:bd:c8:a4:
                    21:fb:6a:b5:c8:8e:ac:c0:2b:1d:30:6f:ac:c1:db:
                    08:d1:9d:a2:18:0a:b4:44:23:dc:f6:18:9d:10:68:
                    fb:52:50:78:c3:d5:24:43:5c:44:f7:24:56:5c:a4:
                    db:84:28:b3:a3:e0:2c:b2:16:4b:e8:7c:33:bc:0e:
                    ad:b8:ce:b4:a1:40:46:5d:7e:68:5f:10:60:45:af:
                    84:93:d2:db:20:17:18:d4:f3:8d:7b:cd:80:5b:33:
                    54:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:63:82:D1:2C:FD:A3:BE:B9:45:08:E9:EE:F8:59:DB:B2:98:1C:6C
            X509v3 Authority Key Identifier:
                keyid:D2:05:42:A6:13:55:24:14:21:94:CA:A7:08:E7:DB:2C:CA:6B:4E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0gVCphNVJBQhlMqnCOfbLMprTmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c309ec-3254-4200-9a5e-ab42b4c93ed9/1/0gVCphNVJBQhlMqnCOfbLMprTmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:b1:a2:b1:fd:db:07:fe:e6:0f:34:f6:0c:3f:91:93:02:
         2e:74:c3:48:a2:61:83:da:4a:26:f8:85:14:a4:b4:75:35:60:
         bc:00:4e:44:48:ca:94:3e:f0:07:da:c4:c7:55:94:2f:8e:5f:
         05:77:24:b6:a6:9c:dc:8e:37:ef:08:79:df:f8:54:4c:cd:08:
         17:0f:14:03:a5:73:bd:21:7d:8b:f0:ae:36:22:bc:d6:6e:49:
         4b:30:48:11:16:eb:2c:1e:da:41:69:b8:15:5a:a1:ea:87:8f:
         9a:10:ef:e9:2d:84:b8:d1:e4:1e:54:83:ea:77:bd:d4:be:33:
         87:d0:52:ce:b1:89:dd:3b:e1:74:1b:53:62:d4:31:58:da:07:
         7a:c7:15:4c:b0:30:92:23:c2:0a:52:e4:97:54:ae:c3:9d:ea:
         a1:5c:49:3d:b3:68:d8:dc:96:af:46:ab:24:f2:ce:82:91:15:
         71:bf:5a:51:c9:d0:74:bb:f2:37:b7:46:49:2e:44:a2:b3:e3:
         a3:c5:fd:8c:d7:af:23:3a:74:03:87:15:27:03:05:97:b0:11:
         83:b2:11:80:93:30:ab:9a:6f:eb:7a:5e:c1:8e:9f:b9:35:3b:
         65:32:14:8d:9e:d8:3b:f9:ef:34:af:4f:57:33:03:da:ad:2e:
         df:d4:c0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:29 2026 by rpki-client