Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
File:                     gWZdbPJtk3SE27RjN0PgZX7M3F4.mft (raw, json)
Hash identifier:          RpnVnysnckuDN6NzBWIh+BYg8nGajj21TRflLQjOsY4=
Subject key identifier:   37:94:F6:76:F7:9D:6F:AA:64:D6:E1:5F:92:77:87:69:28:5A:E3:FF
Authority key identifier: 81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E
Certificate issuer:       /CN=81665d6cf26d937484dbb4633743e0657eccdc5e
Certificate serial:       019D97AB4486ED95210B2DAD418359330F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
Manifest number:          188E
Signing time:             Thu 16 Apr 2026 19:01:16 +0000
Manifest this update:     Thu 16 Apr 2026 19:01:16 +0000
Manifest next update:     Fri 17 Apr 2026 19:01:16 +0000
Files and hashes:         1: 5st_HHpLD54WE6_4L8XNFgUjL_w.roa (hash: JHjXO9P1p0iqaGPwSoXPmKvMaRiV2yvxi6yn0kC2stg=)
                          2: gWZdbPJtk3SE27RjN0PgZX7M3F4.crl (hash: wuDMuwJJy19iGe1j5V85Jtd1FqvDyBuUbTi9ErAWu+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:ab:44:86:ed:95:21:0b:2d:ad:41:83:59:33:0f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81665d6cf26d937484dbb4633743e0657eccdc5e
        Validity
            Not Before: Apr 16 19:01:16 2026 GMT
            Not After : Apr 17 19:01:16 2026 GMT
        Subject: CN=3794f676f79d6faa64d6e15f92778769285ae3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:b6:a9:6a:f5:53:b8:98:92:5d:f4:bc:98:
                    75:fb:f2:e7:e1:bb:a4:6a:de:0b:c8:ad:a8:35:72:
                    1f:43:67:9f:d5:09:6f:24:63:7e:c1:ea:a0:ff:c4:
                    e1:ca:1b:0f:b0:d2:e4:c2:f2:35:67:af:ed:6d:0a:
                    2e:57:7b:eb:1e:10:85:2d:23:fe:82:7e:dd:98:52:
                    86:fc:37:ed:7a:92:3b:56:fe:1d:56:f7:7e:c9:e7:
                    13:87:40:f5:4d:56:16:01:0a:90:ba:05:fb:f1:4f:
                    37:6d:7a:e9:e9:04:55:f6:5c:e8:b1:ce:de:f1:91:
                    e6:2a:0f:04:44:dd:8a:2d:72:d4:8d:df:b4:88:4c:
                    16:39:d5:e2:c0:be:07:35:25:b7:91:1b:61:24:b2:
                    f3:34:74:14:b2:80:30:b5:fa:38:3b:13:44:d5:92:
                    41:47:24:e4:a2:86:3f:aa:05:f1:ae:ef:ce:1f:5a:
                    5a:c5:0c:e4:5b:36:92:4c:da:41:d8:3f:b0:6e:53:
                    59:8a:0d:aa:6c:a3:5f:f4:56:e9:d9:61:ae:e2:0c:
                    d9:2d:15:83:d2:77:60:c6:bc:1e:c8:7b:08:71:6e:
                    5b:d9:f3:23:97:75:e1:02:26:0c:10:aa:47:39:da:
                    51:ab:72:c2:72:19:1b:e6:16:8f:c9:04:cd:61:ee:
                    75:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:94:F6:76:F7:9D:6F:AA:64:D6:E1:5F:92:77:87:69:28:5A:E3:FF
            X509v3 Authority Key Identifier:
                keyid:81:66:5D:6C:F2:6D:93:74:84:DB:B4:63:37:43:E0:65:7E:CC:DC:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWZdbPJtk3SE27RjN0PgZX7M3F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/00f66b-fe83-4ccd-82ee-c56f05da3d25/1/gWZdbPJtk3SE27RjN0PgZX7M3F4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:22:bf:7e:b9:68:22:77:71:21:a3:72:d4:e0:b7:a2:df:9e:
         52:2f:82:38:55:09:d1:53:86:45:5f:f6:ec:66:d6:b1:b0:b0:
         39:14:5c:c4:2f:f1:bb:3c:0e:dc:66:11:b5:b3:50:33:2b:70:
         39:fd:db:72:0d:6d:60:ed:35:b2:e0:49:7c:3e:de:1a:14:83:
         94:6e:d6:d5:1a:3c:bb:d6:93:d0:fd:12:25:02:3b:df:2c:14:
         f1:0e:a0:b3:51:b3:ff:40:7a:4a:90:73:4f:46:75:7e:24:ce:
         a0:87:41:c8:72:10:e4:1c:f3:f1:8b:52:bf:4a:23:b8:be:29:
         0d:64:1e:0d:e7:38:c7:4c:63:ae:c1:7d:df:29:d2:c3:c5:f8:
         5a:cd:2e:7e:f1:a7:58:ef:85:8a:db:e5:1b:a2:f2:8f:18:0d:
         3d:22:a2:76:a1:2a:80:52:55:5d:8c:50:06:76:a8:41:b6:8e:
         a7:95:7c:37:af:f2:ad:44:23:41:1b:6b:f1:e4:19:9c:02:fe:
         56:f3:0b:8f:92:5e:15:15:d4:08:21:22:c8:73:03:ef:23:3f:
         ad:6d:8b:6d:03:57:10:c3:8b:af:4f:3b:05:7b:b1:58:d0:7e:
         ce:a8:b8:93:bb:16:c9:45:98:45:85:52:86:e3:33:60:fb:fb:
         65:4b:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:57 2026 by rpki-client