Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
File:                     wVwVNEGqsCDrb2Df9xUu6qyupOc.mft (raw, json)
Hash identifier:          lfRHivRSwoq6yzDEgkNtGU52f+xXlUpLqAvsgJ7xaDs=
Subject key identifier:   64:8D:26:5E:8B:84:89:A4:E8:70:66:D9:31:51:5E:E4:DE:75:5F:9E
Authority key identifier: C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7
Certificate issuer:       /CN=c15c153441aab020eb6f60dff7152eeaacaea4e7
Certificate serial:       019D9A06EC070DE8F5E0BE2338267850EBF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 06:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:37 +0000
Files and hashes:         1: Nd6Aiea9MEU2nzcir7VqD9MLwAo.roa (hash: vVF0+qWcpNomgKKgwD8I1nDMzXvRcJv3hRMCFwqrqvc=)
                          2: wVwVNEGqsCDrb2Df9xUu6qyupOc.crl (hash: Jao84ykoZ0hUsZY+OPJHGMvQ1XACbl+5ZSVj0oyYORU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:ec:07:0d:e8:f5:e0:be:23:38:26:78:50:eb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15c153441aab020eb6f60dff7152eeaacaea4e7
        Validity
            Not Before: Apr 17 06:00:37 2026 GMT
            Not After : Apr 18 06:00:37 2026 GMT
        Subject: CN=648d265e8b8489a4e87066d931515ee4de755f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:be:d2:4d:2b:ab:b2:85:a7:38:b5:32:45:
                    f6:4f:e8:fa:7b:dd:fa:51:5f:09:80:1f:6d:81:7e:
                    7e:65:b3:ae:b0:86:02:3a:7f:d8:e5:5f:f8:e4:09:
                    e0:a9:5d:a3:62:86:78:0d:ca:37:24:80:13:ad:2b:
                    42:7b:89:23:d1:ad:c0:52:b6:9c:2f:91:97:15:5d:
                    3b:68:9e:ed:cb:f0:08:9e:4b:34:8e:de:7a:98:f3:
                    b8:c2:f8:90:80:8e:c8:1c:72:06:bd:67:8c:42:6d:
                    27:9d:b5:da:2e:a2:85:6d:5f:0b:98:5e:11:18:56:
                    5f:01:df:ef:75:68:a8:88:92:8d:44:05:f2:41:70:
                    0d:fb:75:8d:f0:8e:9f:8b:9e:a5:f2:a4:53:a2:89:
                    27:62:49:3a:30:e3:d9:dd:7e:2b:a1:1b:80:9f:49:
                    51:7c:82:85:5c:fa:c6:31:52:8b:04:00:0d:0e:a0:
                    ca:78:d2:57:70:bb:36:27:0a:71:51:55:21:b2:db:
                    f3:8c:53:cf:49:b7:01:38:fc:5e:22:67:1e:fd:69:
                    22:a2:ca:26:71:3a:4c:93:c4:07:9d:07:57:31:fe:
                    98:5b:98:00:5e:39:c3:4b:39:a0:bf:64:84:6a:a4:
                    5d:d6:a2:56:99:cc:77:22:a1:d7:99:a1:30:f3:82:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8D:26:5E:8B:84:89:A4:E8:70:66:D9:31:51:5E:E4:DE:75:5F:9E
            X509v3 Authority Key Identifier:
                keyid:C1:5C:15:34:41:AA:B0:20:EB:6F:60:DF:F7:15:2E:EA:AC:AE:A4:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVwVNEGqsCDrb2Df9xUu6qyupOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/784c9e-e6ea-49e9-adbe-479297364eb6/1/wVwVNEGqsCDrb2Df9xUu6qyupOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8a:ba:d2:1e:9b:a2:ff:a7:2c:1b:e9:f7:38:ba:5e:2d:17:
         3d:bf:9d:60:26:d6:a3:88:8f:12:0a:80:58:8b:5e:ad:57:f9:
         5f:1f:b1:0d:47:e5:5c:88:ad:42:75:4b:a2:be:19:00:26:b3:
         a0:c3:02:d8:91:53:f6:c7:d5:eb:bc:c4:68:6b:48:ce:6d:c3:
         9f:a7:9f:6d:d7:30:92:68:f2:b8:69:d1:57:18:8a:8e:23:e0:
         79:2e:b5:5b:06:5a:55:09:01:19:4c:16:05:54:66:78:f1:06:
         e2:af:50:74:a9:e8:b6:62:70:58:7a:de:51:c0:3b:e0:21:2f:
         18:49:f3:30:96:42:bb:7f:6e:bb:17:02:01:9b:43:6d:d4:68:
         d9:61:b6:97:dd:cc:75:ef:0d:2d:ec:91:86:0b:11:e7:69:94:
         61:82:a7:a4:36:d9:1e:8d:36:28:07:6c:ba:01:03:2b:30:f5:
         bd:8a:d0:78:48:94:a3:02:11:35:0b:84:20:55:45:78:c0:f9:
         2c:ba:ea:86:83:5f:e2:d0:1d:54:b1:af:02:27:8b:47:88:1d:
         84:b5:9e:4d:6b:2d:1a:36:2a:03:c9:6e:23:fe:3c:12:f0:0d:
         27:7b:a5:0d:42:ba:26:79:66:d0:b0:7f:20:c5:db:e9:8a:a1:
         24:28:dd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:04 2026 by rpki-client