Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
File:                     0WkNdbRvruYmp5o7Dn32tqcj8yk.mft (raw, json)
Hash identifier:          YXQnCthTAqRw+5dOoMdjKLOe5rRSYpJdyzlTxcT5AfA=
Subject key identifier:   A8:97:BD:04:BF:90:5A:A9:EF:F3:71:54:0E:4C:6F:97:D3:E7:11:D2
Authority key identifier: D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29
Certificate issuer:       /CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
Certificate serial:       019D9BF54A72D43B12BD66EF3C542303E9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
Manifest number:          51
Signing time:             Fri 17 Apr 2026 15:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:36 +0000
Files and hashes:         1: 0WkNdbRvruYmp5o7Dn32tqcj8yk.crl (hash: 70bswCKtfjcMqqQucbQC6sgytnUoEd9ht/Z17OodI44=)
                          2: 1-yp1lR1t9CHfuX3rrZ9tBUSW6YU.roa (hash: ysaq9zqofJGOE0NIkNp0CsTNypyLgdEzk9CWYMwusP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:4a:72:d4:3b:12:bd:66:ef:3c:54:23:03:e9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1690d75b46faee626a79a3b0e7df6b6a723f329
        Validity
            Not Before: Apr 17 15:00:36 2026 GMT
            Not After : Apr 18 15:00:36 2026 GMT
        Subject: CN=a897bd04bf905aa9eff371540e4c6f97d3e711d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:4a:fd:5f:62:25:c5:8f:3c:3f:e1:b0:30:
                    3e:62:3d:45:02:84:40:3f:65:d8:e5:82:2a:b9:3f:
                    a6:0c:60:62:70:97:3d:84:7c:ed:b7:1a:da:49:1b:
                    ee:f8:42:cd:ae:d3:14:54:5f:3c:e1:18:c3:c4:81:
                    24:35:dc:ef:9b:8a:b3:63:d3:18:77:a0:e0:2d:06:
                    7e:d2:16:9e:60:c5:e9:4e:82:f2:25:27:6f:6f:5d:
                    98:3e:74:f3:64:57:d7:de:18:e2:17:89:82:45:56:
                    d3:72:c1:17:c9:d2:e6:6b:2e:b5:55:dc:17:93:bb:
                    e7:33:10:0c:c6:f5:6a:fa:82:e1:82:2e:6d:ed:d3:
                    71:60:39:d3:a1:79:7e:cc:03:74:f7:f6:68:55:3c:
                    8b:7a:f9:0c:0a:f4:01:d8:62:dd:60:31:e2:36:78:
                    4d:fc:91:25:55:49:9c:05:46:2b:0f:71:29:f9:50:
                    ee:44:70:a7:19:9f:b2:43:16:ae:59:d7:2e:36:1e:
                    11:aa:e0:55:a8:e8:69:e3:1a:46:5e:b1:94:9f:53:
                    8d:19:d6:2b:86:44:30:bf:cd:1a:9e:00:0d:74:7c:
                    95:22:6e:52:4d:9a:7d:d8:98:bf:4f:93:50:c6:1f:
                    28:71:67:f1:90:59:cf:ca:1d:7c:2c:14:2c:92:4d:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:97:BD:04:BF:90:5A:A9:EF:F3:71:54:0E:4C:6F:97:D3:E7:11:D2
            X509v3 Authority Key Identifier:
                keyid:D1:69:0D:75:B4:6F:AE:E6:26:A7:9A:3B:0E:7D:F6:B6:A7:23:F3:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WkNdbRvruYmp5o7Dn32tqcj8yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0df9f9-0904-437f-98eb-0d99de7970bf/1/0WkNdbRvruYmp5o7Dn32tqcj8yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:87:13:1d:46:95:93:e0:3f:fa:31:cc:46:42:87:4f:e2:2d:
         d8:de:70:80:99:b7:62:a6:65:8d:d6:cc:ae:ea:09:b9:7e:5e:
         82:8b:d1:f8:07:b7:19:76:bd:f6:27:78:02:17:18:7b:17:8f:
         65:65:cc:59:40:64:b2:22:12:0f:d7:7b:9d:c6:62:84:9b:a6:
         b0:4e:5d:73:04:ed:79:f6:91:46:e7:b4:25:f0:9e:0f:ef:20:
         9a:42:01:03:88:13:9b:6c:60:28:5a:07:b7:07:11:97:6b:08:
         7f:53:d5:95:e7:da:3f:3a:8b:32:e1:0b:b1:3d:aa:47:5b:6a:
         84:bd:8f:66:d3:ec:08:1e:76:12:68:5f:07:40:e5:bf:ab:28:
         51:48:81:26:c2:63:2f:fc:03:dc:a3:b0:43:d2:f0:bb:30:65:
         9d:c4:48:5f:14:49:22:54:a3:c8:ed:94:88:ee:83:67:6e:ec:
         b3:25:6a:97:f7:b8:17:5b:7a:b1:33:83:a2:6f:99:3c:cf:8c:
         13:5e:a0:84:57:d9:3b:3a:17:a6:28:b2:fd:4b:b6:12:23:f3:
         e5:87:77:54:96:ee:5d:ae:71:8c:22:98:b5:51:d0:f0:2a:37:
         d2:f0:24:14:7f:e9:e3:b2:42:3a:f1:81:00:e5:d3:ce:63:d9:
         90:82:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:57 2026 by rpki-client