Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File:                     wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier:          m50KiWbqBVrau6PQ0WaxMTEQXVPj690zqHS2GZiTT10=
Subject key identifier:   C7:77:15:66:80:A4:F6:1B:90:6B:7E:F3:57:28:C7:7C:A0:24:C2:AD
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer:       /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial:       019DA3AF1FCDB7381FF48F878E0636685E35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number:          18C7
Signing time:             Sun 19 Apr 2026 03:00:56 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:56 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:56 +0000
Files and hashes:         1: JL1o6upPnIKdVbHUy_Ef2-ANX44.roa (hash: 3XMBFcXTXxWpf6Am9wDF23AjMe5aTPM0s8HS5SFHSAA=)
                          2: m5rD58AweHEvsDH4tbR7IKV265E.roa (hash: ZtXIPbeCB1rz8AcZjfipOZe9HIQPbbVzu/XgM264hK0=)
                          3: sUumv71LiXKH26laKH0Fmy5EKus.roa (hash: UrgMT/FdpxZ5nx6LcsU481E/RGBVqhUpUgDsPDRga/U=)
                          4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: 1ZRW9ZzSHiTKE0SHDYZR91A/l03HGjSWhHr5aJREw4Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:af:1f:cd:b7:38:1f:f4:8f:87:8e:06:36:68:5e:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
        Validity
            Not Before: Apr 19 03:00:56 2026 GMT
            Not After : Apr 20 03:00:56 2026 GMT
        Subject: CN=c777156680a4f61b906b7ef35728c77ca024c2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:e6:33:cd:00:80:de:dc:a8:71:fb:6f:17:
                    04:39:8f:e6:e1:77:1e:5d:d7:32:a7:a0:f3:8e:47:
                    1b:f1:b9:6b:25:97:bd:14:da:02:2e:73:79:24:f8:
                    07:27:fa:bb:a2:2c:e2:fd:45:a0:d2:20:14:32:37:
                    fa:fd:94:e7:0f:36:6b:0e:7d:51:f5:aa:22:81:6c:
                    1f:70:c5:3a:6a:7e:87:73:84:71:68:31:d2:bd:66:
                    05:e8:9a:64:19:47:38:6f:51:5d:ad:8d:b9:50:8c:
                    d9:47:83:1a:84:d6:44:25:c2:5a:b7:b4:5d:e5:28:
                    e8:52:b4:fe:aa:28:21:81:6b:04:3c:86:a2:d3:ce:
                    f0:d0:65:22:eb:ac:19:20:67:06:22:f5:08:db:c0:
                    c6:c2:9b:6e:40:b7:eb:fd:99:c8:85:11:e9:c2:80:
                    b2:13:a3:6a:bf:cb:2a:58:e1:f8:09:41:fc:7a:54:
                    d6:e9:12:63:a1:9c:54:6b:ff:2f:ff:c3:fa:f1:e1:
                    0c:0f:26:67:85:81:6e:11:07:35:5e:5b:0d:b6:2c:
                    5c:d8:33:82:6f:26:b7:56:f0:0b:cf:83:aa:bf:f4:
                    03:95:d3:15:c1:d2:fe:16:e6:a0:0b:37:d2:7d:bc:
                    a1:48:65:8d:d9:61:62:8f:d7:24:3a:48:7c:08:81:
                    d5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:77:15:66:80:A4:F6:1B:90:6B:7E:F3:57:28:C7:7C:A0:24:C2:AD
            X509v3 Authority Key Identifier:
                keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:51:38:e0:d3:4b:da:5f:09:8f:14:f0:e1:79:a8:49:88:6f:
         d2:15:4e:6c:a2:ab:01:1c:11:f7:b0:d5:3b:fa:af:3d:2e:1a:
         79:92:7a:1b:c2:c6:8e:81:4f:4d:51:e1:4e:16:98:b6:2c:27:
         59:7e:35:3b:91:c4:fa:2f:99:51:eb:c9:ae:30:29:a1:54:77:
         fa:e9:4c:e8:58:ff:70:5b:d6:06:06:67:df:7f:94:91:c8:80:
         8f:29:69:5a:3b:dd:38:f9:0d:cd:7e:51:09:a1:d5:7a:91:45:
         f5:03:2c:f7:cc:54:bd:58:df:b3:3c:c1:e7:0f:c7:10:3b:76:
         5d:87:a5:f8:77:11:70:83:26:9e:df:5b:98:77:23:e7:43:6a:
         9f:d6:df:7e:81:0e:c6:ec:f5:18:ab:64:5f:85:16:c7:8d:8f:
         d5:ff:7f:80:74:9b:14:a3:0b:28:20:b2:a3:fe:c1:a2:7a:26:
         78:28:c5:8c:2d:bf:1e:4c:47:0b:f0:2e:71:98:b3:09:d4:5f:
         d4:00:6e:1f:de:cc:31:18:12:e0:5d:3c:01:6d:5d:99:b9:00:
         81:d5:f1:ca:b7:40:ce:f6:7d:2e:bf:10:dd:e0:df:21:28:dd:
         c9:a9:c0:8d:4f:13:49:7b:33:f0:e8:ec:0d:00:d2:dd:9a:ca:
         ee:68:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:19 2026 by rpki-client