Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File:                     we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier:          fhjgLGp5S97ehEDDgX9+mOEXw1Dh3Gsc/KzvrGUhkdE=
Subject key identifier:   58:32:92:94:A0:84:F7:68:69:42:14:1C:99:FF:55:10:88:C6:89:FF
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer:       /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial:       019D9773E0E80ABFA2DBAA16E2540A44BD66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number:          18C0
Signing time:             Thu 16 Apr 2026 18:00:46 +0000
Manifest this update:     Thu 16 Apr 2026 18:00:46 +0000
Manifest next update:     Fri 17 Apr 2026 18:00:46 +0000
Files and hashes:         1: WhlF3-97zeKA9zwTPV4rysNOYtc.roa (hash: PZrfxCb0Q8TjoglsmZhLZgPlBsJLljiY6Rncu+AWpPI=)
                          2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: pWCNUUHqomaY4MJDY64haAZyQmL60+3kF4zH2nEUE0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 18:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:73:e0:e8:0a:bf:a2:db:aa:16:e2:54:0a:44:bd:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
        Validity
            Not Before: Apr 16 18:00:46 2026 GMT
            Not After : Apr 17 18:00:46 2026 GMT
        Subject: CN=58329294a084f7686942141c99ff551088c689ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:0d:8a:50:bd:5f:55:eb:dc:6b:7c:12:a6:
                    55:b2:8a:b2:8d:71:9c:a7:76:57:c6:ff:9b:34:92:
                    0c:d4:67:c0:91:60:c2:df:d6:4d:03:59:00:72:38:
                    38:8a:3d:31:58:ed:19:d6:d4:02:90:ba:44:14:fc:
                    59:6d:6a:52:04:b7:f8:af:fa:57:00:37:0f:73:c8:
                    e1:f6:09:34:a3:3d:5b:ac:e2:8d:25:24:e1:f7:19:
                    da:a8:db:e4:35:89:27:8b:3a:af:50:a1:bb:2f:03:
                    30:cc:8e:02:8b:68:9f:11:15:be:b0:f6:cd:66:b0:
                    d7:09:3a:2e:cc:c9:c8:c3:78:8a:cf:92:ec:bb:43:
                    31:4f:1e:54:93:1c:28:17:b0:6f:7c:63:7d:a5:7d:
                    85:a9:c7:7b:4b:ee:ff:92:d0:0b:b1:71:78:c3:9f:
                    82:4a:6e:0c:75:dd:68:98:3f:ec:54:69:dd:a3:b0:
                    aa:f8:3d:c2:1a:66:e9:61:46:1b:4e:b2:e2:ee:01:
                    fa:a3:21:2c:d2:3b:5d:4a:23:02:4d:c5:37:42:5d:
                    db:2d:d2:4d:f5:ad:1a:a9:b7:10:1f:03:2d:fd:8f:
                    96:26:f2:88:15:26:71:20:a5:6f:86:50:76:63:3e:
                    95:73:91:f2:7e:2b:c6:ca:ae:68:f6:39:17:c2:a0:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:92:94:A0:84:F7:68:69:42:14:1C:99:FF:55:10:88:C6:89:FF
            X509v3 Authority Key Identifier:
                keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:91:88:b2:2c:84:1f:6b:84:79:c0:f0:f3:b9:78:a6:84:35:
         03:c9:ea:56:56:8f:75:55:de:94:69:9a:25:6d:99:87:32:36:
         6f:36:52:7f:c6:84:fe:d6:17:71:c7:34:cd:72:00:79:4f:80:
         e2:50:a7:7a:1f:ff:1d:5f:09:56:df:cf:78:a3:37:ac:61:02:
         9f:5a:b7:1e:18:43:49:c2:37:43:72:a8:25:e6:12:99:7f:77:
         0c:87:88:fb:62:56:1d:3a:99:66:e2:c7:f6:76:e1:b9:cd:45:
         c3:57:df:47:96:16:d8:eb:99:84:7b:4d:26:0a:16:46:8a:ae:
         a2:49:0c:d7:0c:a5:68:ba:0c:5d:3f:73:c0:7a:aa:ba:e2:a0:
         43:24:35:ca:42:ce:51:01:64:c4:67:b9:e7:bd:ff:c4:80:eb:
         d5:c7:ab:e6:21:d5:a3:b5:cc:e7:c1:cb:fb:e6:94:76:7d:da:
         69:b8:cc:8d:ed:88:86:78:c2:8f:41:8f:fa:db:f9:0a:3a:47:
         27:a3:f9:f7:fc:2c:ee:5f:81:a9:50:66:48:1f:fe:fd:48:46:
         22:ce:5e:75:da:cb:e7:45:aa:30:e0:50:ee:3e:a5:c5:52:ed:
         4d:c6:72:0e:4f:69:92:26:26:35:bc:20:d5:b4:86:71:2e:ed:
         76:62:7c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:40 2026 by rpki-client