Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File:                     DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier:          EssLAC1nvxMWFEqp71NTBFn7RnfVGcdVZNBRxCC/s4s=
Subject key identifier:   20:94:23:78:45:9A:A5:6D:EC:67:73:20:52:70:7B:F2:A0:40:63:DB
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer:       /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial:       019E2F96BCF8C2BB96E8E5BD38CC494AC0FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number:          11CF
Signing time:             Sat 16 May 2026 07:01:08 +0000
Manifest this update:     Sat 16 May 2026 07:01:08 +0000
Manifest next update:     Sun 17 May 2026 07:01:08 +0000
Files and hashes:         1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: EE4fRf2rzRVSqJ2dMyeZ2jG7VrlZU/MSaAU7/eDo9nU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:96:bc:f8:c2:bb:96:e8:e5:bd:38:cc:49:4a:c0:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
        Validity
            Not Before: May 16 07:01:08 2026 GMT
            Not After : May 17 07:01:08 2026 GMT
        Subject: CN=20942378459aa56dec67732052707bf2a04063db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ee:8c:36:2e:1c:43:ca:97:a0:bb:94:0c:aa:
                    77:fc:c0:8a:6a:f2:54:6d:b8:6e:73:15:9b:14:35:
                    9d:2b:8a:c4:51:30:fd:fc:2a:9c:83:88:7e:50:08:
                    05:18:b1:f1:d3:04:76:7b:9b:84:da:35:a7:ef:de:
                    37:8c:66:82:b0:86:c4:09:ea:7c:1e:32:1a:7f:3e:
                    67:3a:19:ac:12:33:5b:00:4c:5e:c5:b2:3b:63:0a:
                    5d:b4:f1:72:29:a3:2d:5e:58:8a:99:c7:13:61:83:
                    53:06:e3:32:8a:d5:4d:12:fb:42:d8:50:b6:eb:c8:
                    d0:31:a5:a2:f1:e1:66:73:dc:8e:8d:99:16:ee:e9:
                    9b:fc:98:fa:ab:df:2a:02:e2:66:30:65:fd:8c:c5:
                    73:fe:eb:3e:42:fd:e3:88:3f:e6:49:4c:7f:b9:7d:
                    7b:9a:33:de:76:bf:11:80:ed:48:8f:f7:15:e5:da:
                    2a:88:70:2c:27:97:8f:74:0c:76:76:be:9a:4f:66:
                    1d:dd:d3:14:b5:a9:7f:7a:73:d9:0a:b4:4e:59:60:
                    e7:67:4f:61:9c:2a:82:62:18:bf:6a:2f:20:82:a3:
                    1a:09:7b:fd:b1:4b:69:9f:ef:54:27:7f:8d:29:cd:
                    91:6f:fa:15:fc:ab:7d:ac:55:12:a3:67:1e:2e:b4:
                    e8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:94:23:78:45:9A:A5:6D:EC:67:73:20:52:70:7B:F2:A0:40:63:DB
            X509v3 Authority Key Identifier:
                keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:70:80:ab:59:db:4f:39:bd:1f:8c:ca:55:59:cc:43:1c:21:
         93:ce:3b:04:ca:e5:db:52:8e:3b:12:f8:c9:d4:1b:e9:29:7e:
         7e:94:52:d6:14:70:3a:2d:aa:68:75:be:05:15:79:ed:a3:21:
         1f:9c:c6:9b:5e:09:22:66:47:09:d1:3b:81:59:2c:87:4d:f5:
         2b:9f:32:1c:e8:59:95:70:59:91:0e:6b:9b:a2:db:f1:51:1c:
         eb:f3:2f:89:94:c9:6a:45:a1:95:21:92:32:59:b7:e8:63:e4:
         cd:85:59:eb:79:2a:be:bf:7b:40:8a:fa:61:bf:b3:ac:d8:9b:
         8c:8b:e9:f4:c4:f7:e4:af:73:35:5f:4a:fd:49:5c:42:51:c3:
         e4:8c:42:92:d5:64:ed:a8:77:6e:07:ac:de:9e:c3:ee:ed:e8:
         23:0e:f7:6f:6d:46:39:31:e7:68:13:4f:ea:52:1d:cf:00:83:
         45:62:42:f7:2c:08:37:1f:73:64:90:c1:ca:22:5c:00:23:ce:
         9b:ae:b2:9a:b2:69:dc:1d:6f:79:8d:9f:0e:51:04:3b:bd:45:
         6f:73:31:44:cd:2c:48:63:86:91:69:ce:aa:16:c1:45:d3:84:
         f1:3f:26:46:59:9a:44:5f:ab:98:d7:3c:08:5d:d3:12:d0:b7:
         59:cc:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:53:59 2026 by rpki-client