Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
File:                     dWXhJLHEG5OxTX7eBda4B3eYmv0.mft (raw, json)
Hash identifier:          Jzqw/Rc7DyPI9pBCGc89v8ebMxzubMq1+ZAukPK2O6Q=
Subject key identifier:   44:14:96:D1:32:24:92:E9:60:6C:59:DE:67:00:9A:E9:06:79:ED:83
Authority key identifier: 75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD
Certificate issuer:       /CN=7565e124b1c41b93b14d7ede05d6b80777989afd
Certificate serial:       019D981904B160D38812520C7865951E095D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
Manifest number:          1665
Signing time:             Thu 16 Apr 2026 21:01:09 +0000
Manifest this update:     Thu 16 Apr 2026 21:01:09 +0000
Manifest next update:     Fri 17 Apr 2026 21:01:09 +0000
Files and hashes:         1: dWXhJLHEG5OxTX7eBda4B3eYmv0.crl (hash: GKls3HLRn5cw1touXetnKj/GLhXLmLXn+thyyR7YAU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:19:04:b1:60:d3:88:12:52:0c:78:65:95:1e:09:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7565e124b1c41b93b14d7ede05d6b80777989afd
        Validity
            Not Before: Apr 16 21:01:09 2026 GMT
            Not After : Apr 17 21:01:09 2026 GMT
        Subject: CN=441496d1322492e9606c59de67009ae90679ed83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:63:0c:a3:74:ec:53:b2:e0:46:e8:17:a8:0c:
                    79:51:e3:61:e4:64:b9:0f:21:4a:f3:8f:9a:ca:ca:
                    9a:91:9a:a0:57:26:35:c9:5e:73:89:8d:f6:d2:c9:
                    11:b2:f5:5e:38:67:67:5e:5a:76:d8:de:ca:8f:43:
                    f4:65:83:fc:f3:10:29:86:56:3b:69:4e:5a:be:dd:
                    d2:74:78:a1:bd:88:fb:20:fc:fa:9e:93:ed:68:26:
                    6c:de:11:b8:2f:9f:24:6d:34:9e:f3:e1:35:aa:67:
                    a5:e8:50:f7:f9:70:5e:c3:48:a5:3d:f3:9a:0c:38:
                    18:96:94:70:15:64:8a:db:d8:65:1f:e5:d7:86:ce:
                    dd:03:38:01:06:af:e3:69:38:1c:30:ad:37:73:72:
                    a4:6f:3b:8d:92:1c:d5:4a:6b:7e:77:82:e9:aa:e9:
                    43:b0:c3:37:78:43:70:f7:f8:d9:6f:9c:dc:d2:eb:
                    68:c3:10:e7:48:d8:7a:7d:76:36:01:64:da:02:28:
                    04:ce:9a:07:b9:e1:b6:91:d0:f4:f9:5b:7d:81:be:
                    2c:02:cd:6c:cf:7c:3f:13:cb:91:6b:37:08:a6:f4:
                    9e:0e:53:2e:52:02:49:02:2c:26:20:23:f0:09:c2:
                    a7:8d:0c:97:80:e8:89:29:3b:db:5d:e9:d5:1c:91:
                    1a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:14:96:D1:32:24:92:E9:60:6C:59:DE:67:00:9A:E9:06:79:ED:83
            X509v3 Authority Key Identifier:
                keyid:75:65:E1:24:B1:C4:1B:93:B1:4D:7E:DE:05:D6:B8:07:77:98:9A:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWXhJLHEG5OxTX7eBda4B3eYmv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/96952b-79b8-4e04-bc4a-29e445de2459/1/dWXhJLHEG5OxTX7eBda4B3eYmv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:31:de:61:42:42:ba:05:7c:ff:ee:7b:75:6e:17:22:15:54:
         7a:58:40:01:6c:a6:f8:5f:df:b7:2e:54:55:64:1a:68:ae:9d:
         67:c9:7c:e6:69:9f:16:8a:28:6b:99:1e:02:e3:70:32:4c:aa:
         3a:eb:c9:4c:53:fb:80:f7:40:87:f9:10:2c:e7:96:3b:57:cc:
         75:09:ea:18:3e:a5:93:7c:30:83:82:ad:fc:73:97:f9:6f:45:
         1b:56:68:91:82:ec:75:22:4e:9e:42:f6:a7:f2:a3:36:50:90:
         fa:9c:ae:d2:fc:f0:39:bd:c1:f8:cb:3a:52:18:a0:56:58:d0:
         80:08:34:6c:d1:d6:05:0a:ef:f2:7c:d4:86:d9:3d:a3:f8:dd:
         18:ec:ee:c8:4c:5a:d5:68:02:f2:a0:ce:ad:f7:72:d8:5a:e0:
         e3:f1:ed:66:ac:a4:1f:2a:e5:0d:60:49:ad:56:4b:36:fa:24:
         c0:94:34:b9:0d:7c:92:d8:c0:1e:57:b9:31:6e:f3:16:ea:09:
         9b:72:a8:af:11:7a:18:e2:a6:08:a8:66:0b:2e:88:6e:cc:50:
         c1:80:4b:56:40:1e:3a:d9:04:ca:b0:3b:5e:32:95:d2:17:c3:
         49:ac:4a:72:4c:a4:e1:90:d8:d4:4a:72:bd:a0:bc:a1:37:a2:
         54:75:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:56:58 2026 by rpki-client