Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File:                     Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier:          Ko9IVIMK7KlBT6UphYcYYiegVL45tJiOyXkvGNHsRRU=
Subject key identifier:   0A:16:23:29:0B:32:B7:BF:CC:9C:F9:B4:97:02:06:0E:26:97:D1:F6
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer:       /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial:       019D98BD82DF058DF90B66AF510F9E8FE1DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 00:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:49 +0000
Files and hashes:         1: SjJDxlEOZqFpr4sE3EWgK4CYSjA.asa (hash: JVWvRpi7Ek1sEO/RRAifq7UkZoIwmRoiSo82BrozbkY=)
                          2: UzwdLveCar1NWysEG_gC0gmYs3s.roa (hash: etmZBELJl6TLC8YBGOya/Pd8fe5m9VWeBzGftoSy7jE=)
                          3: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: DTQTdaXRT7Zg8FQc5hL+K8Um+0BnCAHip1rK2uJgexc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:82:df:05:8d:f9:0b:66:af:51:0f:9e:8f:e1:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
        Validity
            Not Before: Apr 17 00:00:49 2026 GMT
            Not After : Apr 18 00:00:49 2026 GMT
        Subject: CN=0a1623290b32b7bfcc9cf9b49702060e2697d1f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:cb:1a:16:c9:49:2e:d0:9c:48:8e:86:5a:
                    fb:11:72:8d:13:85:a1:8f:69:9c:df:78:3a:c1:89:
                    02:f4:92:58:c3:7e:f0:bb:f3:d9:47:55:12:3f:e9:
                    b8:e9:9e:2e:d4:f6:44:3e:b4:76:2f:29:24:0d:26:
                    a0:42:a5:0d:fc:9f:58:10:af:60:dc:8d:98:0a:20:
                    bb:4e:a8:ec:14:ec:bb:d7:05:a8:a5:d0:f1:91:74:
                    dd:b6:f6:a3:58:6e:b7:c0:ba:18:6f:ce:65:87:7e:
                    fb:89:88:32:40:18:7a:50:37:01:ca:3d:eb:af:03:
                    dd:dd:45:8b:fe:84:a7:26:5d:56:f2:54:65:37:03:
                    fc:b0:2e:0c:76:a2:ae:2d:11:78:31:6e:5e:a8:d8:
                    a8:84:ab:43:06:f6:de:59:64:33:da:b7:aa:f0:e1:
                    db:b0:bb:69:cc:fd:78:a4:4d:19:cd:5c:9d:3d:31:
                    71:19:5d:ed:9c:0e:16:7d:e4:e0:6c:d1:cf:15:33:
                    81:59:28:ee:1a:72:6b:bd:dc:6b:2e:d2:c1:fa:9f:
                    07:4c:f5:ee:43:97:5e:c9:62:8d:85:a2:7d:59:03:
                    d5:35:4b:4a:6c:86:84:0d:63:7f:61:73:df:96:e9:
                    dd:12:58:53:86:ac:da:76:cf:5f:1d:de:4b:1a:d0:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:16:23:29:0B:32:B7:BF:CC:9C:F9:B4:97:02:06:0E:26:97:D1:F6
            X509v3 Authority Key Identifier:
                keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7b:18:db:e0:40:67:e7:51:91:af:d3:70:44:29:67:03:31:
         55:db:01:5b:00:08:e7:23:c6:76:81:f0:1b:6c:6c:c9:90:a7:
         9c:8e:d7:4e:b9:2e:0c:15:4a:49:01:0c:c7:60:b9:60:47:f9:
         f3:cd:ea:b7:f6:74:ab:f8:74:f4:e5:d4:3a:cc:4e:d6:a7:e5:
         2d:ca:b6:23:37:17:82:d8:4b:a6:24:ea:0e:a4:ee:79:f8:6e:
         03:22:70:9c:ba:01:6a:a2:7b:10:b6:69:4f:b9:52:7b:25:7b:
         5e:51:63:58:90:fe:12:b5:d1:ee:8d:23:8c:ce:9e:ca:31:be:
         02:92:ed:fd:ad:8b:70:a8:1b:0f:cb:6e:cc:cc:a7:6f:65:ca:
         68:98:aa:b6:76:e6:25:cb:32:19:2d:29:07:9b:ed:9d:31:4e:
         6f:fa:32:c9:4e:a1:46:db:7d:8c:d1:a5:dc:16:e0:dc:9b:79:
         74:39:1c:58:c4:a2:bf:e5:95:7f:74:19:b8:82:1c:52:c1:84:
         46:79:66:a9:e3:99:52:14:24:6d:79:84:fd:02:0e:86:de:e4:
         5b:8c:c8:04:69:b0:5c:f6:e3:33:05:23:33:a1:0f:48:ae:a6:
         c9:35:c2:b3:d4:b7:5b:0c:e6:2a:67:33:03:c4:33:30:95:5a:
         dd:d6:23:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:52:28 2026 by rpki-client