Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
File:                     wnLUdhJANZrLqKM306w6k5eSWnI.mft (raw, json)
Hash identifier:          EWirmYWQaYQQgJG5Cdp4jPqrgj1AMQT7QhZVqljoNDw=
Subject key identifier:   0D:5A:2F:77:85:4B:44:E5:2D:3E:16:9C:89:B1:7B:AE:0A:75:7A:2D
Authority key identifier: C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72
Certificate issuer:       /CN=c272d4761240359acba8a337d3ac3a9397925a72
Certificate serial:       019D9BBE572D5903781EC88596D0E7B4B6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 14:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:35 +0000
Files and hashes:         1: AaoD9e1Rc9A7OLbVCIZcDp6j6JM.roa (hash: ytSdeQxHuy+yxjmnJ8gqjABXw5mRmre0ka6vBBpW/Mk=)
                          2: wnLUdhJANZrLqKM306w6k5eSWnI.crl (hash: lvILI0tSvw+i+XGkIkTFjrH2oOEg6bQnY6Ott+hbJks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:57:2d:59:03:78:1e:c8:85:96:d0:e7:b4:b6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c272d4761240359acba8a337d3ac3a9397925a72
        Validity
            Not Before: Apr 17 14:00:35 2026 GMT
            Not After : Apr 18 14:00:35 2026 GMT
        Subject: CN=0d5a2f77854b44e52d3e169c89b17bae0a757a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:e6:0b:ea:bb:9f:b3:bd:10:31:a1:8e:e2:
                    cd:f8:bf:4b:1e:09:0a:38:e1:f9:ba:e7:5e:ef:3b:
                    76:33:f8:04:17:86:50:7a:0a:0c:a5:01:68:59:08:
                    3f:a7:dc:6c:d2:f4:ba:60:8e:99:8b:bb:90:cd:e7:
                    f0:a5:16:53:5f:73:39:6c:c2:db:38:f6:00:7b:d8:
                    6a:39:f0:6b:e5:30:97:d5:0e:7a:ea:b1:45:3f:48:
                    60:66:fd:ca:f7:d4:4c:83:3b:5f:9f:f4:11:fa:46:
                    c9:ad:c8:77:4e:29:b0:fe:ba:25:03:07:19:b2:d9:
                    c0:25:03:ec:d3:c8:b2:05:53:19:88:fe:ae:5a:fd:
                    96:a1:1b:64:d1:f8:fd:86:4a:83:d3:48:f5:2f:8e:
                    82:55:2f:2e:40:5a:28:ea:fe:5c:5e:8e:15:cd:9f:
                    b8:be:75:89:a8:81:e2:bd:c3:da:b9:b2:60:8a:61:
                    07:23:06:fc:e4:37:5f:d1:59:00:56:8d:1f:6b:f9:
                    8d:b7:08:be:00:19:35:2e:73:56:de:cb:23:99:75:
                    6f:ee:30:9a:7d:c7:00:ad:b1:83:04:aa:70:91:ec:
                    c4:cb:3f:fc:17:26:a4:7c:ff:9d:3f:96:a5:f3:cc:
                    b6:5b:97:ab:22:c9:1b:de:3b:36:ad:30:91:61:41:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5A:2F:77:85:4B:44:E5:2D:3E:16:9C:89:B1:7B:AE:0A:75:7A:2D
            X509v3 Authority Key Identifier:
                keyid:C2:72:D4:76:12:40:35:9A:CB:A8:A3:37:D3:AC:3A:93:97:92:5A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnLUdhJANZrLqKM306w6k5eSWnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/ede4c7-6150-4ed0-9d30-10de67121197/1/wnLUdhJANZrLqKM306w6k5eSWnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:f3:91:de:b3:4b:d1:fd:d5:1e:24:b0:09:33:8a:87:06:
         d2:51:12:36:65:42:19:91:47:d9:04:a2:c0:0e:a0:86:0f:c1:
         3e:c0:3b:68:94:73:bb:06:23:a0:55:96:b7:79:7f:84:c4:7e:
         89:1e:d8:e5:4d:ec:c9:81:f9:a3:2e:95:dc:18:03:77:f1:d5:
         bf:dd:40:10:0a:0e:37:d5:2a:4e:ec:5e:5d:f5:6c:5b:6e:05:
         39:cd:51:38:21:38:70:66:1b:dd:09:e7:74:a2:0d:18:53:39:
         2d:a8:23:40:7d:01:30:8b:d3:b6:9e:e5:c3:8d:95:c0:91:b5:
         0f:8a:c6:3c:90:84:4a:de:86:48:97:ae:47:96:16:9d:8a:c4:
         be:ac:ff:cb:1a:70:3a:ed:dc:ea:38:bc:dc:40:3d:7f:9d:c6:
         7c:71:a8:8a:3c:d7:e2:35:8f:8e:cc:b4:6e:c8:7a:48:2c:9a:
         87:48:0c:f7:25:e7:1d:f5:12:8b:ff:8f:7c:bf:43:a1:9d:c4:
         d9:4f:63:09:74:ce:21:eb:6e:d7:58:5a:f3:e0:93:73:d1:30:
         7f:5f:42:6d:b0:bf:b2:0c:f9:60:db:a2:29:a3:a4:78:23:9d:
         ce:b4:61:e0:03:3b:bc:67:ff:fc:5e:ce:35:4c:2b:5e:49:68:
         5b:fa:b7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:48:59 2026 by rpki-client