Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
File:                     w6VSge-EuxEeM-zHwAiJSP1KjbI.mft (raw, json)
Hash identifier:          jjSYB6q98Fb5Z6nK7cRguWk6eNGgvKTbj9pTzHdK8fM=
Subject key identifier:   D8:68:66:46:B6:9F:99:A6:57:46:B6:7E:F5:0F:3F:39:13:B1:C2:37
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Certificate issuer:       /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial:       019D9A751FFAFBD8D360071BF5A52D77F8C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 08:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 08:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 08:01:00 +0000
Files and hashes:         1: GmCafxAEUvOXy6Xvita-Fy-S--0.roa (hash: Ifx+oHJPGcIANhZeyT+6sYmJnu849Sxqjk3P1GJE7vg=)
                          2: w6VSge-EuxEeM-zHwAiJSP1KjbI.crl (hash: ER8/JBcW4mBlMECep2dpyFtim7Wn2djhszHVPuUmP1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:1f:fa:fb:d8:d3:60:07:1b:f5:a5:2d:77:f8:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
        Validity
            Not Before: Apr 17 08:01:00 2026 GMT
            Not After : Apr 18 08:01:00 2026 GMT
        Subject: CN=d8686646b69f99a65746b67ef50f3f3913b1c237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:c4:9d:c1:dc:53:e0:7b:6d:51:66:09:1c:
                    44:1f:de:da:15:15:f0:dc:c2:48:2f:f5:68:fb:e2:
                    8a:b9:3b:d6:36:32:e6:f6:4c:c5:9c:7a:75:8c:d7:
                    10:b6:de:77:d8:98:7f:8d:75:d0:de:7c:69:6d:12:
                    d9:3b:8c:fa:31:02:2d:46:f3:d7:ea:54:e4:5e:15:
                    86:23:c9:f0:d2:92:25:79:43:f9:36:39:9a:19:e2:
                    1c:e8:d4:42:d2:00:e7:3f:23:7a:d5:52:7f:dd:fd:
                    01:d3:cd:e4:7e:a1:2a:98:24:ad:a1:00:ab:1d:78:
                    fe:73:d2:82:16:37:e8:8b:d6:ce:af:36:8d:a5:28:
                    7d:6a:78:12:80:56:a5:8a:47:e1:a5:99:50:85:90:
                    d6:5a:ee:b0:36:b9:38:e0:7e:b8:45:51:ee:d7:35:
                    e0:dd:5b:d0:4c:d7:5a:ae:cf:0a:ad:b5:3d:6e:1b:
                    d0:e7:27:37:b9:70:44:89:2e:cd:d9:cc:5f:6c:9b:
                    98:15:ce:d6:fe:fb:50:19:46:2a:d6:e3:92:9e:bb:
                    ed:95:e8:ae:21:50:32:bf:bf:88:e6:7d:53:3f:dc:
                    a7:47:e3:f7:fa:d3:a0:72:11:94:cf:07:41:41:2f:
                    db:e2:58:38:c8:77:56:19:a6:86:21:f0:73:25:e8:
                    ca:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:68:66:46:B6:9F:99:A6:57:46:B6:7E:F5:0F:3F:39:13:B1:C2:37
            X509v3 Authority Key Identifier:
                keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:66:71:b2:27:81:c0:83:14:85:7c:0b:45:78:81:cd:b7:ad:
         18:25:8e:43:10:86:cf:7d:32:64:51:cf:ce:51:0a:46:41:53:
         8c:00:26:f5:f9:ee:10:36:04:db:8b:e6:9e:34:99:39:51:91:
         69:b6:de:71:57:d0:74:d5:78:d2:d6:a4:41:24:0f:88:f2:16:
         25:33:81:28:e2:2c:13:9f:b7:83:ad:2e:63:f4:2a:1a:53:d0:
         64:d9:58:8a:ee:d1:cf:5d:c7:c7:a6:5f:32:43:21:86:6e:51:
         b9:bf:c7:c8:e5:1f:9b:af:e3:bf:ea:67:fe:a1:93:4b:5e:4d:
         1b:52:eb:c4:90:d1:f2:bd:22:2b:e2:f3:98:61:79:fb:d3:d6:
         8a:fd:09:35:39:3e:34:4e:f5:50:25:b2:e8:2e:60:d4:04:79:
         0c:95:a7:99:a3:ca:ca:83:a7:1f:3d:f0:48:b1:d4:63:7d:0d:
         66:94:a1:e5:45:16:5d:3b:b3:99:54:b3:13:8f:6a:2a:39:2f:
         62:26:9d:f3:27:4c:70:b7:6f:9d:c7:e3:e6:92:f1:3e:b7:8d:
         ef:9e:cd:99:30:6a:69:16:dc:f5:a0:5d:de:9b:55:d5:94:57:
         ac:29:ce:c7:5a:4e:15:42:55:e0:72:ec:c0:4d:84:8b:d2:8f:
         46:1a:06:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:10:06 2026 by rpki-client