Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File:                     wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier:          H6o0Li9J/XAnvarTx6SUnhXjlzLYJo2Mac9sQrz3H1c=
Subject key identifier:   0B:4B:83:CB:E0:A4:94:24:F8:3D:7C:EB:EE:E2:87:FA:AA:ED:DC:3D
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer:       /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial:       019D9B87EE6BBB6D90B1BBAF3EB8D49CAAC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 13:01:09 +0000
Manifest this update:     Fri 17 Apr 2026 13:01:09 +0000
Manifest next update:     Sat 18 Apr 2026 13:01:09 +0000
Files and hashes:         1: aNasyvhnecUaGBiJJmKLy86blxw.roa (hash: SzBG9cwAKB7DYZM2SXTm4Asbf+eO0ZOQ6ca0yvr84RI=)
                          2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: IkwgOaxjCaoGd0Abenz0t37X2+MX6kzBji4MqigIQmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:ee:6b:bb:6d:90:b1:bb:af:3e:b8:d4:9c:aa:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
        Validity
            Not Before: Apr 17 13:01:09 2026 GMT
            Not After : Apr 18 13:01:09 2026 GMT
        Subject: CN=0b4b83cbe0a49424f83d7cebeee287faaaeddc3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:74:db:f6:e7:75:5b:19:eb:ec:b2:43:4c:
                    d1:b5:6a:2f:0a:3c:4e:71:8a:06:3a:88:f9:a2:0b:
                    ea:d7:eb:bd:38:a2:10:64:60:43:bb:fc:a1:25:7f:
                    95:0c:fa:4b:02:5a:90:c6:1f:63:36:9f:4c:60:59:
                    9e:6f:69:a4:77:1e:13:ab:9d:4a:7c:f1:f3:40:9c:
                    4e:80:a4:58:83:86:2a:4d:1d:2f:f6:57:32:63:72:
                    34:71:25:ac:a1:6e:89:f6:38:e6:ec:8f:9f:57:c6:
                    6e:4a:da:d6:ba:81:d8:a0:43:f6:72:99:e4:e9:5e:
                    31:31:9d:11:10:f0:74:2a:7d:78:de:7a:3c:f4:71:
                    95:21:7f:eb:8a:c0:9c:29:fd:f7:cb:09:9f:1f:41:
                    98:1a:04:20:89:18:6a:05:8f:d5:d9:bc:47:d8:ff:
                    64:2e:2a:68:e3:87:19:34:3f:07:bc:ed:56:e1:b2:
                    e6:82:0b:da:2c:81:1d:ee:d0:dc:ae:b4:a0:a4:ab:
                    4d:90:29:01:c4:2b:e9:e9:8f:d4:05:2f:df:eb:53:
                    e4:6e:83:80:a2:a0:12:b5:d6:0a:ab:cc:94:e5:d3:
                    1c:20:74:c3:f9:30:26:a7:65:cc:92:7e:53:b1:59:
                    62:8c:c9:72:d8:e3:81:4b:9b:59:98:bd:d9:d9:c4:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4B:83:CB:E0:A4:94:24:F8:3D:7C:EB:EE:E2:87:FA:AA:ED:DC:3D
            X509v3 Authority Key Identifier:
                keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:a0:f1:23:d8:a3:07:b6:c0:ee:ae:c6:e4:4e:30:f2:2d:d9:
         36:1d:b4:9d:af:a2:69:1c:2c:1d:22:86:e6:af:62:ff:c9:22:
         37:8c:b7:01:c7:fc:ea:d2:56:02:dd:b2:90:68:23:83:95:25:
         6c:69:fe:7f:28:4f:81:66:43:c7:69:63:53:5c:40:9e:9a:06:
         32:ed:ab:c5:d0:3a:03:d4:84:61:ae:94:34:f9:de:63:10:3e:
         cd:bf:a2:5b:1e:b0:d2:4f:ed:92:98:f6:0b:b5:73:c6:ca:1a:
         41:d0:71:54:3c:d1:23:70:bc:fa:ed:d3:69:aa:36:b5:3f:77:
         29:e4:6b:2c:6a:68:14:53:94:5b:00:f6:0b:db:0b:61:31:c8:
         c0:1e:33:f7:ac:63:7b:03:eb:5d:f8:c0:62:eb:e0:89:ae:66:
         e9:95:8a:42:13:24:64:8e:18:fe:27:86:e4:60:b8:d3:e4:c7:
         5f:17:4b:b9:e9:bc:71:a0:b0:91:b2:1c:90:a4:2a:ad:ca:3c:
         f5:e3:ca:36:c3:ab:a9:64:db:9d:27:83:42:86:6e:f7:d9:fa:
         fe:1b:d6:45:74:15:c6:ef:e6:e1:78:e9:73:3b:10:62:c0:dc:
         85:64:f9:47:8f:03:ad:ca:93:89:82:ac:71:8e:56:4b:2c:e7:
         cd:35:65:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:53 2026 by rpki-client