Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
File:                     WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft (raw, json)
Hash identifier:          6f06YitGwZeCo2YaN+iD3Nh5NKL+Cdr37OLvcflaXf8=
Subject key identifier:   83:AC:12:FA:8D:CC:4D:7C:60:75:7F:E3:1E:64:52:8C:17:DB:EA:2C
Authority key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
Certificate issuer:       /CN=5ad9c45020072b3369c2b810fef4527244c5b741
Certificate serial:       019D9B87CDB6016CB3B64F44B8F52505A721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 13:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 13:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 13:01:01 +0000
Files and hashes:         1: 1jX8vpWuzH003x-Qpi8XxrbKqjw.roa (hash: fIBfbZN1KJlMbAU4QQDCO0WxA1fKbyJMB6d4i6/8a0c=)
                          2: WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl (hash: UUjUxX2t3TxYupStAtpQaovDbjXbsVuqAoz4P9+kgQk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:cd:b6:01:6c:b3:b6:4f:44:b8:f5:25:05:a7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9c45020072b3369c2b810fef4527244c5b741
        Validity
            Not Before: Apr 17 13:01:01 2026 GMT
            Not After : Apr 18 13:01:01 2026 GMT
        Subject: CN=83ac12fa8dcc4d7c60757fe31e64528c17dbea2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:d6:01:c9:21:39:35:8d:2a:1a:13:3f:08:
                    ed:c6:1b:44:f2:23:a2:ba:c9:28:8e:c3:ed:3d:ae:
                    0c:66:c0:3c:8b:c7:8c:57:d4:bd:97:7c:9e:cb:22:
                    e3:21:ca:e8:b8:51:67:4e:fd:a5:00:35:ad:0f:b7:
                    03:a7:79:10:55:33:1d:29:19:02:7e:15:60:4d:d2:
                    96:8c:3c:d0:46:50:d4:fb:3c:9e:19:c1:d2:44:dd:
                    18:f6:50:b3:bf:77:f2:9d:63:bf:de:b4:05:fa:c6:
                    d3:ee:92:85:7c:95:0d:34:a5:1b:14:b9:ca:51:95:
                    b8:08:7f:51:99:26:fa:9c:23:59:f2:1e:16:5a:ad:
                    26:3b:fd:e6:6a:3f:78:3e:85:7d:16:f7:c4:7e:f0:
                    0d:ed:96:01:2a:c1:7a:c5:9d:ac:a7:f9:2c:4e:f1:
                    ae:02:9a:b7:2b:a7:da:e4:30:d3:a3:11:03:28:9c:
                    60:c1:6d:f0:5f:c4:f1:f0:5b:ba:dc:70:28:e5:08:
                    12:ef:da:90:28:21:0a:7f:8b:7c:42:3c:56:3f:39:
                    6f:57:04:0a:6c:ed:8b:b9:94:66:fa:22:de:c3:f3:
                    72:1a:62:da:74:72:b5:73:ae:36:86:8f:a7:b3:5e:
                    8f:e3:e4:83:03:4f:77:35:43:1b:70:fd:e2:00:81:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:AC:12:FA:8D:CC:4D:7C:60:75:7F:E3:1E:64:52:8C:17:DB:EA:2C
            X509v3 Authority Key Identifier:
                keyid:5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:01:36:fc:07:c9:f0:a5:8f:94:d4:1c:8f:0c:cd:d1:ab:89:
         34:33:99:92:4c:61:c8:b0:68:63:62:03:aa:6c:b9:98:18:c9:
         d2:ba:05:d5:ea:11:b4:df:66:df:cf:12:34:83:c8:17:a8:be:
         4b:49:29:9d:1f:72:c3:20:e4:02:09:1a:31:a4:0a:6e:45:35:
         33:69:1c:56:ca:4b:20:76:38:1b:a2:5c:fe:44:cc:50:a3:f7:
         58:62:99:ea:33:d0:f3:39:b8:58:89:76:c1:d0:4f:33:25:43:
         73:6b:19:2e:8a:c0:c4:0c:fe:02:ce:cc:3e:9d:13:8e:b0:e3:
         08:dd:0f:1a:39:08:3e:6c:13:37:9c:dc:70:fb:cd:39:d9:4d:
         bc:df:76:89:48:a4:b5:77:6d:86:5c:0b:ae:a0:3f:ac:93:2a:
         20:9f:3c:96:71:df:b1:8f:4c:ab:37:88:dd:10:19:f4:b8:3f:
         2b:38:7e:0e:bf:c2:6e:ef:cd:2a:fb:df:78:7b:68:03:d8:21:
         99:37:f7:56:21:dc:30:fe:b7:05:0b:13:fe:6f:f0:14:2e:fd:
         dc:4b:a4:9d:d8:b3:c5:f2:b7:82:6f:c9:aa:f4:6f:8e:6e:f3:
         44:5f:71:1e:86:ee:bd:9f:95:a8:bc:d9:a8:7d:c1:a6:03:bb:
         28:8e:a9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:19 2026 by rpki-client