Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
File:                     CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft (raw, json)
Hash identifier:          M5/QNTGsz1+1WzcTA2UQNYZXVZlUg2rStVZz0zrcPlc=
Subject key identifier:   7A:F5:7C:82:9E:5C:89:28:FD:86:9A:60:6D:FA:13:25:F5:F0:CD:4C
Authority key identifier: 0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06
Certificate issuer:       /CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
Certificate serial:       019DA52FC13F57B05FEAA792503F9B4712EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
Manifest number:          0B55
Signing time:             Sun 19 Apr 2026 10:01:03 +0000
Manifest this update:     Sun 19 Apr 2026 10:01:03 +0000
Manifest next update:     Mon 20 Apr 2026 10:01:03 +0000
Files and hashes:         1: CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl (hash: bmD7DMuw59GunO+JpoDUH3KARbVGBoa9CHv3YRQJKqY=)
                          2: xVcSmhyk0_Qo40ofl5u_PEEu3HE.roa (hash: kK0Uj2bJIlMSuPP8uzF2AWDHl7oEe3LauznrigXJBTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:c1:3f:57:b0:5f:ea:a7:92:50:3f:9b:47:12:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b0a940cfd2eefe82f570fafc4fdc5bd07941a06
        Validity
            Not Before: Apr 19 10:01:03 2026 GMT
            Not After : Apr 20 10:01:03 2026 GMT
        Subject: CN=7af57c829e5c8928fd869a606dfa1325f5f0cd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:4b:61:4a:69:bc:74:0b:f8:e8:0b:ee:27:
                    c3:16:fb:7b:dd:cb:aa:61:6a:14:55:3b:87:36:77:
                    ec:9d:dd:3c:3c:93:9f:67:dc:8e:6f:ce:58:2f:ab:
                    e6:e3:d1:cf:e0:c8:70:c7:b0:1a:64:d2:1f:d6:0e:
                    09:38:ef:b6:2d:5f:4e:5a:e1:a1:02:5d:37:4c:63:
                    3b:4b:44:e4:21:93:b7:82:38:73:5c:ba:0d:57:a4:
                    d4:26:84:39:ec:24:73:c1:33:5a:be:dd:b4:fd:83:
                    08:96:af:aa:21:1d:f4:c0:d4:90:85:05:49:fa:b9:
                    92:e6:c3:2a:9e:45:a4:0f:b7:04:be:23:4f:a3:96:
                    96:a4:b2:15:f8:1c:c6:80:39:a9:ea:1b:f5:94:a2:
                    e5:46:36:69:8a:3d:e1:eb:76:67:e2:08:e5:99:c8:
                    79:a3:a7:96:86:df:1b:e4:b1:a0:1b:9d:68:76:c1:
                    fd:b5:e2:9c:18:ed:c4:90:68:b1:f6:6d:98:31:7e:
                    7e:3d:f1:20:f9:e6:dc:60:4f:3f:85:4b:7e:ec:e0:
                    53:1e:c5:9d:46:51:dd:c4:7c:32:67:a4:89:68:6b:
                    a6:6a:28:31:c9:4c:3d:48:56:bc:ca:6a:9f:dc:31:
                    08:b6:8f:40:b8:7b:54:8e:22:de:ee:0a:c0:95:95:
                    a3:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F5:7C:82:9E:5C:89:28:FD:86:9A:60:6D:FA:13:25:F5:F0:CD:4C
            X509v3 Authority Key Identifier:
                keyid:0B:0A:94:0C:FD:2E:EF:E8:2F:57:0F:AF:C4:FD:C5:BD:07:94:1A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CwqUDP0u7-gvVw-vxP3FvQeUGgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/305475-b224-4ea8-91ae-6e4cd836c7cb/1/CwqUDP0u7-gvVw-vxP3FvQeUGgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f3:e3:94:e6:1d:a8:65:a2:95:56:92:02:17:88:10:40:88:
         e7:98:8d:9f:bc:7f:5a:7d:f1:27:fc:9b:f0:69:b9:7c:af:54:
         c1:df:4e:25:90:b0:84:4d:36:4d:f6:89:51:82:15:6f:7d:54:
         09:52:61:58:fd:71:73:85:ec:cd:86:8a:f9:03:c5:19:a8:2c:
         15:bb:f0:55:6f:04:e3:4e:fa:73:49:f5:0f:e9:1e:d3:cc:ac:
         dc:e8:b1:7c:83:d3:73:95:ab:c6:26:0d:d6:f1:92:c9:e4:8e:
         f7:96:42:61:d6:84:e1:a1:f5:6f:79:2b:b6:2e:6e:67:75:4a:
         c6:aa:3a:39:5c:7f:da:01:94:a7:79:68:22:6e:e9:ff:40:1a:
         44:62:e1:a6:d2:9e:8d:c3:45:17:19:75:80:f2:6d:3d:59:cd:
         34:17:e6:f1:65:70:4e:e8:30:70:d1:57:b1:93:cb:78:3a:c9:
         f2:a2:6e:bb:30:7a:bb:3d:f7:d1:37:d2:b9:e8:ad:f2:c8:c9:
         51:c3:a2:66:56:8e:de:10:d8:eb:0d:bb:c0:dd:8b:85:36:cb:
         73:8d:49:d5:87:eb:55:22:07:96:29:ef:09:b5:1e:e5:e9:88:
         c8:a1:12:cf:ce:4b:f8:94:32:cc:95:d1:16:93:28:57:0c:3d:
         58:4b:f4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:55 2026 by rpki-client