Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
File:                     wA7St1AmRN0DbiOS-wMyz7FNuNI.mft (raw, json)
Hash identifier:          AIFh3ngthcxXsK/mzQUjn0bNQ5GvZFV8W9hLqRXSAp0=
Subject key identifier:   9B:5C:9E:D1:B9:13:19:98:B0:CE:11:93:6E:32:D2:40:9F:5C:8C:52
Authority key identifier: C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2
Certificate issuer:       /CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
Certificate serial:       019D99990596D8961889D01C6DA4DED6A68E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 04:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:35 +0000
Files and hashes:         1: wA7St1AmRN0DbiOS-wMyz7FNuNI.crl (hash: pRJCgcT6aUauA2+cJVzi3QI82VmYZ8IOJgoHQeeFEcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:05:96:d8:96:18:89:d0:1c:6d:a4:de:d6:a6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
        Validity
            Not Before: Apr 17 04:00:35 2026 GMT
            Not After : Apr 18 04:00:35 2026 GMT
        Subject: CN=9b5c9ed1b9131998b0ce11936e32d2409f5c8c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:7c:a5:9b:26:6b:0e:7d:cd:c5:ad:6c:07:
                    fb:cf:32:94:29:92:86:34:dc:9a:79:20:7f:2e:3e:
                    92:aa:11:12:c1:bf:66:45:21:53:4d:7d:97:18:1c:
                    5a:0a:8f:15:76:cd:d6:e3:7e:e0:d0:f7:b9:2d:fa:
                    16:e0:66:2c:9a:f7:19:78:b1:83:55:d0:42:65:1f:
                    b7:26:31:01:e1:43:6f:08:7f:5f:72:a9:8d:67:d3:
                    2c:a7:b2:d7:49:44:f9:c2:1c:a9:8f:59:7f:95:25:
                    30:13:36:1e:ed:4f:cb:2d:49:94:39:0d:1a:68:b9:
                    96:50:38:71:68:56:b1:63:e2:ce:29:78:01:ad:84:
                    be:f9:f4:83:d5:7d:54:97:2e:29:29:ca:bf:4c:8a:
                    23:b0:07:73:13:50:10:81:22:5a:07:df:b1:7c:bb:
                    d9:9c:48:42:13:8b:a7:2d:0c:b1:3b:3e:a9:4b:02:
                    5c:dd:b6:ab:b8:03:cc:8b:d3:46:8d:89:3e:e4:0c:
                    23:b8:26:75:8a:bc:d2:b3:cf:b4:c5:8c:76:84:65:
                    d6:81:7c:bc:44:db:93:4d:58:46:07:df:2b:14:89:
                    e2:42:f4:52:dd:32:5a:1d:70:c7:7e:79:c0:a9:04:
                    2e:60:fe:48:02:96:16:aa:5a:0e:9d:29:c7:d1:ac:
                    79:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5C:9E:D1:B9:13:19:98:B0:CE:11:93:6E:32:D2:40:9F:5C:8C:52
            X509v3 Authority Key Identifier:
                keyid:C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:3f:77:e7:50:02:e5:24:b7:7f:5b:90:c5:e4:06:12:fb:
         96:0f:73:c2:1b:c0:21:7d:74:f0:0d:60:93:bf:af:16:b9:c4:
         5b:4b:81:1f:32:6d:15:98:b9:87:45:33:3e:63:55:c2:da:e1:
         9f:bf:1b:61:08:1c:39:a7:b3:ed:6b:9f:15:27:fc:21:05:81:
         c8:aa:fd:c4:35:4b:8e:e3:2d:95:ad:92:74:e6:ca:02:b8:e1:
         96:26:19:92:1e:3d:cd:46:79:f7:70:2d:48:dd:7c:f4:24:68:
         d8:f6:eb:2a:bf:32:23:e5:20:16:e5:7d:7e:6d:3d:15:2b:9b:
         f4:2e:59:96:98:45:e3:01:08:1e:8f:e3:af:5b:a6:f5:e2:30:
         c9:f9:11:f0:00:9e:8f:f5:8c:72:53:7d:f4:91:97:6e:74:8a:
         07:97:25:aa:86:a0:a8:82:5e:19:5d:8a:71:43:b2:b5:eb:23:
         ce:92:0b:f7:1d:60:aa:09:7e:a4:56:b6:9a:d4:63:66:55:fa:
         08:ad:76:a5:75:df:64:69:c2:2c:6a:68:79:d6:39:5f:0f:31:
         91:a9:8c:13:c4:52:3d:02:9a:f3:95:49:b1:2f:2f:0f:81:d0:
         58:a5:5f:00:27:cc:bb:82:ed:b5:d8:e7:64:a8:3b:3e:08:07:
         f4:e6:16:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmQWW2JYYidAcbaTe1qaOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGVkMmI3NTAyNjQ0ZGQwMzZlMjM5MmZiMDMzMmNmYjE0
ZGI4ZDIwHhcNMjYwNDE3MDQwMDM1WhcNMjYwNDE4MDQwMDM1WjAzMTEwLwYDVQQD
Eyg5YjVjOWVkMWI5MTMxOTk4YjBjZTExOTM2ZTMyZDI0MDlmNWM4YzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkh8pZsmaw59zcWtbAf7zzKUKZKG
NNyaeSB/Lj6SqhESwb9mRSFTTX2XGBxaCo8Vds3W437g0Pe5LfoW4GYsmvcZeLGD
VdBCZR+3JjEB4UNvCH9fcqmNZ9Msp7LXSUT5whypj1l/lSUwEzYe7U/LLUmUOQ0a
aLmWUDhxaFaxY+LOKXgBrYS++fSD1X1Uly4pKcq/TIojsAdzE1AQgSJaB9+xfLvZ
nEhCE4unLQyxOz6pSwJc3baruAPMi9NGjYk+5AwjuCZ1irzSs8+0xYx2hGXWgXy8
RNuTTVhGB98rFIniQvRS3TJaHXDHfnnAqQQuYP5IApYWqloOnSnH0ax56wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtcntG5ExmYsM4Rk24y0kCfXIxSMB8GA1UdIwQY
MBaAFMAO0rdQJkTdA24jkvsDMs+xTbjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8wMGI4NGItYjVkMS00YzFkLThlNzAt
MDllOGZhZmFmMGNjLzEvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8wMGI4NGItYjVkMS00YzFkLThlNzAtMDllOGZhZmFmMGNj
LzEvd0E3U3QxQW1STjBEYmlPUy13TXl6N0ZOdU5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZ0/d+dQ
AuUkt39bkMXkBhL7lg9zwhvAIX108A1gk7+vFrnEW0uBHzJtFZi5h0UzPmNVwtrh
n78bYQgcOaez7WufFSf8IQWByKr9xDVLjuMtla2SdObKArjhliYZkh49zUZ593At
SN189CRo2PbrKr8yI+UgFuV9fm09FSub9C5ZlphF4wEIHo/jr1um9eIwyfkR8ACe
j/WMclN99JGXbnSKB5clqoagqIJeGV2KcUOytesjzpIL9x1gqgl+pFa2mtRjZlX6
CK12pXXfZGnCLGpoedY5Xw8xkamME8RSPQKa85VJsS8vD4HQWKVfACfMu4Lttdjn
ZKg7PggH9OYWvA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:49:05 2026 by rpki-client