Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File:                     0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier:          tjqHEmFkG/gGysT951QuI3UxPdWvmpFO2b6SDpJoYEM=
Subject key identifier:   32:E9:8F:1F:0D:C9:43:B8:F5:D0:9F:52:97:E3:E9:86:D4:88:C6:3D
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer:       /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial:       019E303B804112DC7F6A0E2464EAF8D8D442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number:          1646
Signing time:             Sat 16 May 2026 10:01:06 +0000
Manifest this update:     Sat 16 May 2026 10:01:06 +0000
Manifest next update:     Sun 17 May 2026 10:01:06 +0000
Files and hashes:         1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: L2swTdNqJtlE7x6bxP3sQGnFfSOGM8TpCIJvt+xuZ6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:80:41:12:dc:7f:6a:0e:24:64:ea:f8:d8:d4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
        Validity
            Not Before: May 16 10:01:06 2026 GMT
            Not After : May 17 10:01:06 2026 GMT
        Subject: CN=32e98f1f0dc943b8f5d09f5297e3e986d488c63d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ae:f4:e7:30:77:27:b5:ab:ab:1e:69:51:ad:
                    fe:0a:93:63:72:39:6c:38:00:3c:77:99:f8:95:98:
                    7d:e7:f2:83:26:3d:d3:66:aa:f0:06:15:80:86:22:
                    f1:29:18:e2:b4:3a:06:15:f0:97:c7:c5:56:1d:42:
                    f6:ff:c8:19:f6:e6:5e:4a:65:59:18:e5:0f:fe:4d:
                    ca:5a:0f:b9:36:17:0d:45:07:54:0b:79:ed:26:68:
                    4a:5b:ef:0e:96:62:01:4d:88:18:3e:b8:19:66:70:
                    43:10:4a:24:b6:fc:ce:6e:81:5d:52:89:55:56:a4:
                    35:ae:8f:95:ae:78:e2:ae:b5:ad:21:13:9b:cf:af:
                    59:aa:cf:1c:2a:54:50:36:18:68:3f:a7:c4:6e:65:
                    7f:ef:ca:6d:15:89:f1:ab:80:f7:a9:69:1e:a6:71:
                    be:70:83:dd:49:76:9c:07:56:ff:85:74:53:49:82:
                    43:1f:31:6e:9f:ff:e9:2a:44:7f:58:37:68:69:f6:
                    7a:65:0a:76:b7:6b:27:3c:a3:cc:98:bc:c4:59:95:
                    9e:90:31:23:ef:5f:f0:b4:7c:c3:a0:49:74:10:f2:
                    28:14:a1:29:56:e0:67:87:ed:5b:82:aa:c0:8b:d6:
                    c3:8b:5a:53:9f:7c:f2:23:63:01:2d:c6:cc:6c:8e:
                    c7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E9:8F:1F:0D:C9:43:B8:F5:D0:9F:52:97:E3:E9:86:D4:88:C6:3D
            X509v3 Authority Key Identifier:
                keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c8:53:f4:38:2f:ae:c6:13:e2:d6:34:0a:04:7c:ac:4e:07:
         f5:4f:01:2a:f1:48:d7:c2:ff:1d:57:a6:8b:29:30:fc:9a:91:
         1c:fd:23:4b:c6:4e:a1:08:02:79:34:12:07:59:45:ec:c5:0f:
         f0:e0:38:a2:74:94:93:16:2b:6e:5d:72:62:9c:9c:dc:db:43:
         b6:6a:07:b2:65:bb:46:7c:57:53:e7:0c:3c:d4:6d:09:4b:cf:
         97:99:42:6d:1e:db:28:61:a7:75:90:e8:07:e9:3d:14:e3:14:
         c8:63:d4:21:11:2a:4d:8f:c9:5f:49:2d:7e:61:ba:d5:4f:a8:
         ff:e8:a1:a2:9e:b6:f7:a4:5b:83:9c:7a:16:13:10:68:95:96:
         bb:fc:02:2f:9f:c6:89:9c:20:5d:7f:ab:d9:98:76:a5:77:57:
         0c:3a:a5:b1:78:6d:45:ee:e1:84:70:d8:82:c4:f3:c4:e9:ad:
         53:32:ce:ee:b7:66:5f:4a:ea:29:51:dd:f2:fc:e6:7a:4b:66:
         df:1b:d1:16:e6:a3:7d:fb:73:e4:e3:b3:10:25:94:8c:c6:86:
         79:b7:3f:31:35:cb:27:9b:05:ef:55:fa:da:e0:d3:c0:ec:4d:
         79:72:44:d4:91:c7:94:fa:19:c7:de:2d:9e:9d:ed:ed:4a:cf:
         d2:a9:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:43 2026 by rpki-client