Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File:                     0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier:          OreI/h2bEZJlz6+osIXT1efBX/aarOjWQ/t7K/Tzo6A=
Subject key identifier:   52:4C:D3:2A:52:84:2F:6A:47:25:37:86:BF:40:6D:F3:1E:50:27:F9
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer:       /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial:       019F8FEC7B257E18DF8C475560EBA01023C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number:          0F48
Signing time:             Thu 23 Jul 2026 17:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:07 +0000
Files and hashes:         1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: 8cSIU3j3qwJdQGF7odXZlJs2Jq7b02PrONBo48ZKcuk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:7b:25:7e:18:df:8c:47:55:60:eb:a0:10:23:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
        Validity
            Not Before: Jul 23 17:01:07 2026 GMT
            Not After : Jul 24 17:01:07 2026 GMT
        Subject: CN=524cd32a52842f6a47253786bf406df31e5027f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4b:80:22:db:ec:f5:07:e2:10:c4:0e:4a:1d:
                    97:36:be:d2:a6:aa:73:25:0b:75:e3:5b:44:72:e7:
                    b5:72:fa:96:53:7f:b5:99:9e:0f:2d:ee:35:73:b7:
                    c8:1c:74:59:6d:a8:6b:90:81:4a:33:ac:5f:44:9c:
                    a3:ca:74:15:66:5b:20:50:40:0a:6e:46:16:c4:6b:
                    75:a9:78:cc:33:f8:95:94:1d:54:0a:db:89:ed:32:
                    b3:e7:39:d6:43:e3:52:04:0e:2e:1d:3a:fe:1d:c8:
                    b2:ee:0e:42:30:fb:62:af:9c:af:7b:57:ab:76:cb:
                    49:c5:b2:58:69:2d:a3:c3:99:3d:84:70:5d:06:56:
                    39:a9:d1:fc:8d:89:34:f0:8a:6e:6d:06:30:f9:79:
                    52:dc:c9:ef:61:3d:22:51:5e:ff:c3:4a:5f:e6:8c:
                    53:3b:4a:df:3d:5a:5f:cf:29:23:78:64:52:77:4b:
                    13:9a:12:2c:4a:60:43:3e:d6:d3:51:0f:a5:1e:af:
                    6b:46:c3:52:a4:77:35:cf:71:c6:6d:d3:1b:5f:ee:
                    eb:86:4c:05:c2:f5:2d:7f:b6:40:ae:0c:8d:f3:db:
                    43:bf:16:46:bb:2a:6e:a7:a8:9d:27:a0:8a:42:b3:
                    b9:c4:3b:ad:0b:d2:e2:a9:23:ba:2c:37:fb:d3:ae:
                    c2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4C:D3:2A:52:84:2F:6A:47:25:37:86:BF:40:6D:F3:1E:50:27:F9
            X509v3 Authority Key Identifier:
                keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cd:83:6a:1d:cc:b1:ce:96:d4:c3:37:ce:da:f0:af:52:a2:
         67:d1:06:a5:cd:8c:51:16:7c:06:06:fc:dc:13:6f:69:7f:54:
         83:e5:7e:6a:29:58:5e:33:54:e1:21:aa:69:58:ee:f8:70:96:
         d4:df:22:5f:65:8a:05:ba:7f:b7:8e:6c:0f:b3:a1:c9:69:dc:
         fe:55:dc:84:d1:38:36:7c:14:6c:0c:6c:34:bc:1a:89:38:ac:
         eb:32:17:58:06:35:60:30:ee:ee:8f:f2:f7:39:36:5b:73:bb:
         19:ed:8a:c3:bf:e8:e0:77:54:7f:e2:cb:f9:e1:36:d2:f7:94:
         43:ad:41:03:58:28:be:25:e2:6d:7e:70:24:f9:c3:f6:65:94:
         fc:a6:49:40:ea:65:bc:f1:8d:3e:aa:8e:fb:17:13:89:5c:e4:
         81:7f:c2:59:6a:19:a8:36:44:89:21:4b:df:eb:5c:c8:4c:25:
         ac:0e:ad:54:a2:6c:cd:f1:7d:41:f6:4a:a2:5d:d6:fe:af:fe:
         bf:2e:2f:68:83:1d:04:66:b4:a5:a5:95:00:28:b0:5d:cc:e6:
         49:76:d2:ec:64:00:79:02:d7:f2:fa:b9:c2:fa:59:bb:af:e3:
         34:3b:b8:ed:3d:d8:49:0c:3d:80:1b:63:22:17:21:bc:b9:c0:
         97:a3:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:56 2026 by rpki-client