Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
File:                     Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json)
Hash identifier:          ebVMTbepebBdGl+FNGg7a6mfZxSVn4QH7iHOH51tm/g=
Subject key identifier:   7B:56:71:00:3F:55:B3:C6:38:53:93:27:82:E2:46:AF:16:9E:A7:7D
Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C
Certificate issuer:       /CN=5aae19678aa37525512229a94e7890147183273c
Certificate serial:       019D9A3EB5D7F8754D74A556E3A71F065D5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
Manifest number:          1897
Signing time:             Fri 17 Apr 2026 07:01:34 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:34 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:34 +0000
Files and hashes:         1: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: tH7vMHIexp+NR2hBv1NW44R6CDYhxUPaTJjahZh1xvg=)
                          2: fIkb69ZuPAj_lkNlkF5stv3pzy8.roa (hash: HcfpVtDwRtdGIEcmlCtRPcGYYq9FoTPjwQjdNlk5s8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:b5:d7:f8:75:4d:74:a5:56:e3:a7:1f:06:5d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aae19678aa37525512229a94e7890147183273c
        Validity
            Not Before: Apr 17 07:01:34 2026 GMT
            Not After : Apr 18 07:01:34 2026 GMT
        Subject: CN=7b5671003f55b3c63853932782e246af169ea77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:95:c8:06:6a:b3:df:4b:c0:94:d5:ea:7e:e5:
                    e0:82:8e:1d:8b:18:64:60:a6:34:c0:38:30:65:8e:
                    ce:47:a0:72:29:77:a9:a6:23:e3:bd:c6:e5:9d:6d:
                    12:8f:e4:c2:5b:13:51:79:28:02:c7:32:c2:82:29:
                    f1:53:95:6c:57:6f:fa:bb:a8:eb:b3:8c:7c:a9:77:
                    e6:f4:ca:d7:98:38:56:79:b3:af:6e:cd:ac:62:58:
                    2a:dd:e9:d8:7f:36:18:e1:14:65:ef:c4:fe:94:b6:
                    42:72:dc:61:6e:a3:29:81:f4:a3:51:85:43:9a:fb:
                    46:78:ff:6b:42:55:51:c4:af:9c:7b:28:c8:96:38:
                    6a:cc:1b:be:6e:32:0e:5b:13:6e:f2:1f:b9:94:04:
                    aa:42:d6:b2:82:77:5a:11:50:67:4a:0d:0d:57:b1:
                    64:31:39:07:5a:b3:f1:d2:6b:ec:a1:a3:fe:21:79:
                    58:44:ae:d9:da:dc:30:f6:e9:70:6d:33:6c:cb:ef:
                    a0:8e:02:b7:fc:84:5d:f0:13:b1:04:8e:ee:fc:29:
                    47:69:33:a1:27:08:e2:15:aa:31:ac:3d:bc:8b:d4:
                    df:64:5e:c9:d9:9e:31:b6:3d:cc:24:19:22:2c:fc:
                    4f:e0:9c:d1:8e:02:c1:34:71:f3:67:66:09:ba:7d:
                    ab:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:56:71:00:3F:55:B3:C6:38:53:93:27:82:E2:46:AF:16:9E:A7:7D
            X509v3 Authority Key Identifier:
                keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:8e:66:37:55:a2:22:0f:81:c3:c2:c5:0a:f7:66:c7:00:
         60:56:f0:f2:bc:07:30:da:ea:d5:3d:aa:61:ee:30:1f:4f:0b:
         ba:3d:80:1b:47:b5:c3:70:9e:d3:18:8e:7a:11:e2:cc:f2:0c:
         74:ea:ee:8e:30:2d:12:22:f7:6e:bf:4c:49:bf:03:05:e4:b4:
         eb:ce:d5:2e:e7:aa:df:e1:95:f3:6f:9a:a6:3d:89:9e:d1:9b:
         12:85:18:ae:f4:12:8a:6d:eb:ef:55:05:e3:fe:38:fd:e9:d4:
         ec:31:54:b8:03:ba:2b:a7:ed:75:a8:44:f0:c8:b0:8e:9e:39:
         fd:65:94:e3:09:bc:15:a7:1d:13:74:73:df:da:da:5a:28:f7:
         8c:5b:26:d3:7b:99:20:ff:13:32:0c:95:59:be:bf:64:c8:1d:
         f1:37:79:68:86:94:49:09:b8:a6:8e:f3:12:8c:8a:4c:93:f2:
         e1:57:64:30:de:20:8a:43:2c:9f:64:75:be:e5:c3:28:ff:fc:
         01:d8:eb:3e:0f:21:35:f0:e2:7d:19:90:f0:10:b3:6f:59:fe:
         43:1b:c2:a5:54:38:62:02:16:56:65:0e:69:2b:74:38:f6:91:
         d6:51:6a:2a:18:1f:88:77:db:1f:9b:bc:20:76:29:e2:bb:31:
         73:b2:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:20 2026 by rpki-client