Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
File:                     0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json)
Hash identifier:          02bsY+gaU0VCMacTvZGjkjOzityY73AkEDf+aqHXn2c=
Subject key identifier:   E9:D5:B9:3F:DE:EB:51:B7:BD:5E:07:28:EB:C0:53:09:2C:AF:50:1D
Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46
Certificate issuer:       /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
Certificate serial:       019E1EDA3BEF2E783F17F2D191A10F33D81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
Manifest number:          163D
Signing time:             Wed 13 May 2026 01:01:19 +0000
Manifest this update:     Wed 13 May 2026 01:01:19 +0000
Manifest next update:     Thu 14 May 2026 01:01:19 +0000
Files and hashes:         1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: wSl0S+t4qVMm4RopOcee5ckVRXViM6XnzLarN7f4Fp0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:3b:ef:2e:78:3f:17:f2:d1:91:a1:0f:33:d8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46
        Validity
            Not Before: May 13 01:01:19 2026 GMT
            Not After : May 14 01:01:19 2026 GMT
        Subject: CN=e9d5b93fdeeb51b7bd5e0728ebc053092caf501d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:b8:01:b6:98:f3:65:03:ef:b3:c0:7d:76:
                    8e:49:3f:96:ef:18:a2:27:74:51:54:02:10:03:69:
                    82:5e:ba:47:bd:b1:7e:8e:b5:53:be:36:79:15:58:
                    59:82:ce:97:c5:16:87:16:2c:ec:44:08:55:84:a2:
                    95:3c:18:95:a1:e7:b2:26:15:cf:84:c3:d6:2f:34:
                    3e:a3:de:c9:cf:55:a4:13:50:08:25:80:2e:2a:fd:
                    75:c5:c1:10:77:b3:a3:c8:29:99:78:93:1a:97:92:
                    e4:44:19:d1:98:f4:ec:5c:95:5c:57:45:6a:8a:20:
                    e2:dc:c1:b0:81:24:52:e0:62:06:8f:4f:01:41:78:
                    ef:a3:e7:e3:e4:5e:44:a2:86:c8:5a:38:0c:33:ba:
                    78:6d:90:05:05:7d:8f:49:c7:da:fb:71:27:a6:40:
                    f5:d2:db:92:2c:61:65:ca:99:ad:57:21:b7:27:62:
                    d8:71:2a:cb:0a:bf:a8:e4:de:f0:01:a3:69:44:03:
                    26:3b:02:c1:19:67:ee:bc:1c:9a:f8:48:26:20:d2:
                    87:4c:59:26:8b:d1:ac:96:09:b3:93:da:47:ce:b7:
                    e5:38:bd:91:14:e7:8c:1e:53:4c:dd:f0:9e:a6:7f:
                    55:de:94:43:05:1c:02:b7:13:f8:a1:53:4e:d2:99:
                    e5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D5:B9:3F:DE:EB:51:B7:BD:5E:07:28:EB:C0:53:09:2C:AF:50:1D
            X509v3 Authority Key Identifier:
                keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:df:62:3b:1c:c6:5d:67:a6:87:6b:46:40:0e:d6:b6:ae:cb:
         1b:98:98:c3:2d:6d:04:c7:ba:ea:b4:01:ba:1a:b7:73:c5:c3:
         8e:45:4a:fd:c1:9f:7e:81:96:0f:ac:5f:94:22:7a:f0:9c:ee:
         c1:3d:52:56:e2:eb:2b:f5:c3:ec:a3:f6:40:9d:f1:7a:7b:1f:
         8d:1c:c2:6e:b2:6b:58:ac:c5:00:38:92:81:5b:5b:0b:ed:39:
         6c:8c:ad:8a:01:a8:d9:56:a3:e3:f3:8c:cd:ee:e0:27:97:d9:
         8f:c3:53:2d:6d:2e:3d:ce:10:37:33:93:77:3a:a4:b5:04:e2:
         dc:a5:b0:78:e2:98:47:64:2f:7d:73:37:ad:02:8c:65:08:6e:
         51:c2:60:88:07:a0:15:6d:f5:6c:16:44:2f:54:fd:1b:1b:ab:
         ce:40:c6:6b:56:44:c5:11:29:54:bd:28:db:b3:1a:75:cb:94:
         7b:99:c5:94:84:22:89:24:ae:7e:b1:d0:ba:18:9f:17:da:39:
         1c:5d:1c:a9:18:cb:bf:38:03:3f:da:cd:26:ef:b9:c6:1a:c1:
         65:95:d0:9a:21:a7:e4:bc:c1:b0:e6:1d:7c:0a:67:1f:f2:d5:
         19:a0:80:bd:f6:fc:4c:98:58:a1:cf:a7:8e:1d:a6:60:6b:c5:
         90:79:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:36 2026 by rpki-client