Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File:                     leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier:          PYMFT9u/Lr0AJMOxG7nNencV93GdRmSgXskeaYoOmds=
Subject key identifier:   63:87:CF:17:6D:11:17:1F:93:CA:97:3E:FC:AC:7B:D4:6F:30:66:1B
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer:       /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial:       019D99626075366E5A6997A5678131DD2059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number:          0684
Signing time:             Fri 17 Apr 2026 03:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:54 +0000
Files and hashes:         1: S66d551JroD6MSIEZ_42ExhqO5k.roa (hash: t3UcVYuNtk2YzWoEW72cC2ZSBix9HCSCO3JVqXCUzCU=)
                          2: VxEWsPAkHIxtvkrHED-wCH1kUI0.roa (hash: 8vUxWPnKT69GjCXQn0MXD3bHdB31nVJ/4lTKFyOpw+g=)
                          3: aVFkjMqYn2rDvWK_4Er7veowmzc.roa (hash: a0eU89LPDvn15SbN8UifKQ8En1lFGp7ZEcjuxOeXD3w=)
                          4: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: OwVLfs1X4CVwNWmvYKCAIExtC/yCxPHCA+8CS3Raqz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:60:75:36:6e:5a:69:97:a5:67:81:31:dd:20:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
        Validity
            Not Before: Apr 17 03:00:54 2026 GMT
            Not After : Apr 18 03:00:54 2026 GMT
        Subject: CN=6387cf176d11171f93ca973efcac7bd46f30661b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:78:9d:81:51:cc:e8:4a:e2:01:72:f0:b2:7c:
                    0d:c9:0d:cc:10:f8:83:0e:3a:95:3e:0f:94:fe:02:
                    34:41:4b:75:1f:ba:d2:c4:fc:bc:83:27:f0:e5:89:
                    b8:1b:df:d1:2d:73:14:cb:e7:d7:a8:b5:29:4f:7e:
                    3f:1e:fc:9e:66:a4:1b:d8:9b:76:22:a4:48:d3:39:
                    21:52:2b:c7:c8:8e:fe:87:ef:c6:9c:a5:c6:22:bb:
                    8e:78:7f:48:3c:98:6f:f0:1b:21:de:0e:27:2c:5c:
                    12:4b:2f:96:6e:dc:8e:dd:41:98:67:93:81:05:be:
                    f1:6b:bc:b9:d4:88:d1:2a:53:de:16:de:99:91:f4:
                    05:fb:b6:74:09:8a:ea:f0:63:cb:84:02:54:05:7f:
                    29:21:26:bc:e8:9d:b6:4f:88:75:68:c3:40:4d:93:
                    3d:02:d1:3c:30:f0:32:39:6d:82:cd:09:7c:00:44:
                    7e:72:88:b1:f1:aa:08:e2:8c:99:4e:2d:47:29:15:
                    00:4f:96:0f:e5:5c:55:de:28:3e:6f:93:5c:2a:74:
                    ec:d1:6f:64:c8:70:22:61:df:84:9f:88:d9:16:98:
                    1f:8f:04:f8:a6:38:4f:35:e2:dd:46:5a:19:87:a7:
                    52:a2:ed:26:6e:0c:30:f9:85:24:87:d8:3f:c5:f5:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:87:CF:17:6D:11:17:1F:93:CA:97:3E:FC:AC:7B:D4:6F:30:66:1B
            X509v3 Authority Key Identifier:
                keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:35:ca:23:8f:6c:aa:67:18:7d:9d:0f:cd:f0:b2:ad:e6:
         bd:57:fd:dd:b6:2f:ed:94:82:d5:4b:90:aa:ac:87:c8:05:a5:
         c7:82:4f:81:9c:79:6d:64:c8:69:46:5b:b4:1b:30:a0:91:4a:
         7d:19:59:6f:6f:e3:58:cb:38:b6:be:ba:47:52:d8:61:29:12:
         66:97:0c:30:84:26:c4:4c:64:30:5a:7e:db:74:48:a5:3f:04:
         3c:e1:c7:61:8a:2c:a9:1e:ad:6f:91:db:7c:21:e3:5f:fc:4c:
         33:2b:d4:06:fb:f1:5c:7e:20:dc:d4:9f:53:23:69:74:35:a7:
         b2:72:3f:ba:4b:3c:94:00:1d:64:26:d2:a0:6c:1d:c3:d6:3e:
         fa:ff:f5:f9:62:95:8d:58:57:a5:96:20:b3:a3:76:51:6d:c9:
         5f:f9:d8:92:3c:d9:db:05:0c:29:2b:96:3a:bd:82:f3:97:9b:
         55:01:37:75:75:5f:f2:7c:55:a5:cd:dd:32:97:11:3f:54:38:
         ba:ea:c2:d4:ca:f9:82:6a:6a:ab:33:cd:59:ae:9c:f2:ef:f2:
         d8:9b:3e:45:39:69:d2:a3:87:84:83:85:1c:b6:59:41:c2:fa:
         34:01:f5:2e:54:33:b4:8d:f5:21:03:f2:6f:78:bd:4f:4b:67:
         79:a7:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:03 2026 by rpki-client