Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
File:                     r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft (raw, json)
Hash identifier:          czkMaDoyuYkUaVfdq5ZjM7oHNzwD6TfdWLnwXvW2QJ0=
Subject key identifier:   CB:D9:4B:E9:35:41:94:CC:3C:D1:71:69:ED:1E:F2:D8:B8:4A:80:36
Authority key identifier: AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D
Certificate issuer:       /CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
Certificate serial:       019DA1C0B0D321862C693BCF88A071E78CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
Manifest number:          09D4
Signing time:             Sat 18 Apr 2026 18:00:53 +0000
Manifest this update:     Sat 18 Apr 2026 18:00:53 +0000
Manifest next update:     Sun 19 Apr 2026 18:00:53 +0000
Files and hashes:         1: r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl (hash: 9EhwD08kjZMlKLL9dt9fNrsQkjLri+mte3pRJk9yPRM=)
                          2: vOap3lF_tFCZW-DOrcwPq0UBrm0.roa (hash: sDecGEkGDmv0nje/6thzunoswSWfLrwvt0Nww3M0Lpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:c0:b0:d3:21:86:2c:69:3b:cf:88:a0:71:e7:8c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5316fc4a83b3d03e2975f8bec270cb0f4efb1d
        Validity
            Not Before: Apr 18 18:00:53 2026 GMT
            Not After : Apr 19 18:00:53 2026 GMT
        Subject: CN=cbd94be9354194cc3cd17169ed1ef2d8b84a8036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:a8:2b:ad:08:f0:f7:21:b8:e5:b9:91:73:
                    93:09:1a:89:99:df:57:45:e5:0e:aa:58:a5:19:73:
                    9d:4b:c6:aa:09:48:5c:b8:6e:d1:11:a9:11:e1:66:
                    fb:81:06:e9:c7:da:34:22:f4:06:9d:d5:e5:49:c3:
                    23:ea:65:97:7e:e6:7a:d5:71:cd:ea:87:a9:69:37:
                    4a:de:75:2a:25:96:ec:e4:01:76:1a:a4:84:71:0a:
                    b1:75:40:1e:2f:95:53:57:29:7e:c9:e3:d1:5e:19:
                    da:e9:41:c1:ea:39:16:b9:9c:dd:45:18:f1:bd:93:
                    98:97:02:b9:f7:d1:56:15:ea:18:75:ec:00:d5:54:
                    68:1c:42:14:fb:b3:ff:13:28:2f:b1:01:ef:16:51:
                    4f:e0:07:f9:c4:3d:35:08:dd:c4:ac:cd:14:84:7e:
                    d3:0e:8f:5b:6f:d8:75:6f:74:f3:a8:03:cc:f7:fd:
                    33:36:54:d7:94:12:48:ae:d5:1e:1a:14:3b:98:e1:
                    0f:89:30:01:f2:6d:00:d8:2b:af:08:7a:8d:a4:03:
                    14:0d:c9:6b:58:7d:51:d6:5f:e3:b1:3a:7e:f3:43:
                    e1:9f:b8:6d:d1:00:e4:84:34:f6:59:8f:7c:bd:40:
                    a9:00:9e:c8:cd:39:a6:25:70:fc:cd:50:01:78:a5:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D9:4B:E9:35:41:94:CC:3C:D1:71:69:ED:1E:F2:D8:B8:4A:80:36
            X509v3 Authority Key Identifier:
                keyid:AF:53:16:FC:4A:83:B3:D0:3E:29:75:F8:BE:C2:70:CB:0F:4E:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1MW_EqDs9A-KXX4vsJwyw9O-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c90d5d-ca61-4464-899a-d1205e0c0cce/1/r1MW_EqDs9A-KXX4vsJwyw9O-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:18:74:a1:df:3f:af:b9:5b:33:bf:c3:a9:18:a2:d3:1d:c3:
         4e:d2:f5:f8:d5:e5:a9:db:a9:38:a0:a4:61:80:38:31:84:c9:
         51:78:fe:ec:bc:9b:b2:c5:a7:d4:0a:bb:ee:a5:4c:75:fe:2a:
         e4:1e:6b:9f:0b:6f:f5:e0:9b:d0:14:ff:c4:54:a7:04:a2:af:
         ba:45:8d:37:2e:d9:67:78:bf:43:c9:5a:27:14:7e:af:6e:ff:
         44:6c:d1:4d:a9:e2:37:54:82:4d:2f:95:e9:51:0c:2c:d0:0c:
         f3:1f:ab:99:8c:52:96:be:5b:d9:39:e1:19:a7:e3:e1:22:da:
         31:72:e9:fe:76:a1:d4:eb:84:e9:02:e4:19:7a:13:1b:1a:8d:
         d5:5f:d5:ce:2b:bb:c6:c0:64:93:e5:b9:30:c5:80:98:21:b0:
         17:eb:90:76:33:48:dc:a1:a4:c9:6f:58:6d:8e:bd:3f:53:11:
         87:5d:9e:64:df:67:48:38:83:a0:6c:61:20:68:8b:a1:43:52:
         eb:7c:19:c6:01:f5:be:6c:ff:f8:6d:6d:92:84:74:85:a0:fd:
         28:43:b7:a6:c6:26:f5:be:3f:c1:91:9e:44:ee:ca:c7:c9:0f:
         ea:04:c8:f3:19:76:64:4d:ed:88:c2:25:f2:29:38:7d:cc:80:
         e7:9a:cf:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:53:17 2026 by rpki-client