Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File:                     2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier:          WxwK9hM2Pg0CAEhOeNI7V/6bDlPOAIB8iz7rF2aDENk=
Subject key identifier:   E8:2C:78:85:15:E7:01:34:8F:A9:71:4B:F7:1F:05:96:10:24:B0:C1
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer:       /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial:       019D9A3EDF1AC921829EAE1BBFFBE3256C8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 07:01:44 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:44 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:44 +0000
Files and hashes:         1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: g4A6sN9wI7vCAIMn3wH7iHDsgQudY5vWKSGQiyQkVFk=)
                          2: shhYy56z_L8Lryb0eSAWTWJjZg0.roa (hash: wq6nVcRoqKZdcrByoBy3Jll3ZeZn4RTjcVn3BWiF//I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:df:1a:c9:21:82:9e:ae:1b:bf:fb:e3:25:6c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
        Validity
            Not Before: Apr 17 07:01:44 2026 GMT
            Not After : Apr 18 07:01:44 2026 GMT
        Subject: CN=e82c788515e701348fa9714bf71f05961024b0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:1f:34:1d:92:95:9d:97:03:84:03:df:f0:
                    75:e3:65:f7:af:9c:df:10:aa:bd:0a:6a:41:e8:e6:
                    07:d0:9a:d2:18:6b:2c:58:3f:24:0f:6a:18:bf:b8:
                    23:23:f7:06:83:9a:71:41:0a:92:fc:1b:ff:10:5c:
                    53:9c:f1:a0:5b:a9:bc:79:46:23:3c:01:76:43:95:
                    14:f1:10:e0:78:58:65:78:a6:d0:e4:10:76:d7:e4:
                    e3:99:a6:e3:20:08:9c:f0:3b:f1:c2:17:71:11:3c:
                    67:3c:5b:fd:1f:43:5a:9a:b9:cf:ab:da:d6:b8:ba:
                    86:d0:a7:76:52:39:57:d6:ab:23:7d:87:de:6f:99:
                    f4:42:e1:61:f3:53:fb:4b:f2:04:bf:36:97:13:06:
                    b4:be:c1:71:e0:33:f7:20:ea:2e:e4:34:ac:c7:19:
                    7c:85:38:28:8d:40:67:17:ec:13:a7:1f:fb:a5:e5:
                    c7:f2:31:31:5d:d0:35:a6:8d:cc:43:14:75:39:e9:
                    0b:74:ef:79:38:78:63:ef:e4:de:ab:88:54:b7:06:
                    05:0e:10:a7:59:e7:13:e7:f3:87:81:71:35:c7:69:
                    ba:29:fb:b1:09:f1:7a:8d:6a:99:6f:93:ae:6f:e0:
                    f7:63:87:32:3e:e2:f3:9b:da:f7:ec:3c:b2:8d:4c:
                    56:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2C:78:85:15:E7:01:34:8F:A9:71:4B:F7:1F:05:96:10:24:B0:C1
            X509v3 Authority Key Identifier:
                keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:dc:33:75:2d:85:b9:5e:fa:88:e7:6e:2e:fe:79:33:6e:a0:
         28:66:b3:68:ea:07:e8:6b:fd:c6:0d:dc:86:68:85:1e:ea:cd:
         a2:6e:3c:b1:a0:22:df:f7:a4:27:aa:25:15:c5:f5:37:f6:9b:
         31:2e:df:84:2a:9e:4b:a2:f9:bc:85:48:6a:c1:57:92:e0:10:
         bc:e7:51:6f:a3:27:46:53:73:1d:e1:81:4a:c8:85:07:8e:04:
         a2:9a:5e:01:4b:8c:62:8a:42:70:90:76:bd:d2:cd:0b:b3:36:
         00:3e:6c:bb:e7:4c:69:bf:38:6a:bb:84:a0:ef:80:6e:d2:4d:
         c3:2f:22:ec:9b:b5:d6:e7:1d:df:bd:e1:35:16:b0:42:87:e4:
         b4:7e:50:68:61:47:12:7e:1a:b4:40:4d:e4:8d:39:a4:5f:9b:
         a6:50:d0:f1:f4:43:98:b7:8e:f4:1b:e5:cc:fd:14:97:ef:e1:
         00:61:a7:6f:bb:71:c6:b1:5b:1f:4b:ff:5d:f0:76:ce:a8:7f:
         85:8a:d8:09:ff:e6:99:6d:65:f7:a6:38:a0:09:48:93:aa:60:
         e7:ee:9c:7b:27:34:9f:b3:22:8f:71:9c:f5:27:54:af:c6:fe:
         d8:80:47:3b:34:22:0e:ee:7f:b6:54:49:86:f8:ce:f6:b5:e4:
         d1:59:5b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:01 2026 by rpki-client