Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          IABRKnAFIyD5qJkVZB3e/7E2IuazXjkQGoz1uKLId5Q=
Subject key identifier:   6D:0E:29:1D:6A:B1:D3:5E:F3:08:C4:56:13:B2:DD:28:61:50:72:46
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       019D9A3EC7381C2216B82F56DCB437C15423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          18CE
Signing time:             Fri 17 Apr 2026 07:01:38 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:38 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:38 +0000
Files and hashes:         1: 37UgpJIpFDoLpn5jUdrrw88EOYs.roa (hash: 6IHanqLQQ9iVieDletocqCDXSFtx3QpzBhEUB5fo/Wo=)
                          2: 6CYJFLYzJsCzzHIAogKVImiilqU.roa (hash: hXxIZWK3P8ePeRytCGeiJCZHrXxQPMFWaAZ+75i/4qM=)
                          3: 9lnke6oRh0VLNBbdrOmVHhpK_30.roa (hash: mwX6XqY2Vzr3/AFUGFr4YDFxRbauEvN03/V40GGEUYw=)
                          4: E8Dq6b1_iT2pjSVqisC1G3r0_Sg.roa (hash: aZesuL1kEe2OW5HrJCbkkpREyKjdhx6K40wSnDcwXlI=)
                          5: _PydBs1sWRTvUV5cRaL2yTeOV00.roa (hash: 5vv2v2s5YeTFWOeOLBaLL5q8cPQUZNamlvCzhmGZofc=)
                          6: bzM0vXaT5a0wdLKXtzcW1KTh0E0.roa (hash: HSw7OuKnO856MNi69RfSc3oV1YFcKv7OWcbxs0IZTX4=)
                          7: hS6uewCB_QrVL4l6szpbmIikwP4.roa (hash: HveKQzzsmxnwC74x4jZYUDMe8gGcI27oxthPBotk3XE=)
                          8: iwnASaLaQw8Qdn5cYtkYv6MG2gQ.roa (hash: KCxw+NktIcx6tj5s7jZ1g6kWygCH78tSuPcXjTkGaIE=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: 8/shsJfd/WYPJeXGti2B5lAkaOVJuNAnc+MmR64r3XI=)
                          10: xRpCsg3R7zg9MePahD96myP8ECQ.asa (hash: nVKtrtEpMw+umOCcAlU+eqf1arC4HDl30EQbNURGmN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:c7:38:1c:22:16:b8:2f:56:dc:b4:37:c1:54:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Apr 17 07:01:38 2026 GMT
            Not After : Apr 18 07:01:38 2026 GMT
        Subject: CN=6d0e291d6ab1d35ef308c45613b2dd2861507246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:09:78:20:a4:a3:a6:00:d3:3f:af:63:16:99:
                    22:57:3e:7c:04:b8:1e:5a:55:da:b5:7b:a5:a7:0a:
                    f5:6f:1c:dc:ed:86:0d:62:f2:51:43:bb:50:65:f9:
                    d4:36:6c:48:fe:d0:e6:84:9a:40:a2:bf:b7:ce:38:
                    2b:42:b7:9f:80:53:94:1f:a0:fa:75:d1:65:c2:7f:
                    f1:f1:04:d6:8c:d0:65:16:6b:19:74:15:13:93:87:
                    28:76:15:7d:6f:17:d3:91:3e:06:3b:73:24:1e:f6:
                    2a:d1:f9:12:d9:1f:cd:96:e2:ac:a1:e9:7e:b3:38:
                    f3:ec:35:6a:01:3c:dc:53:4b:ea:f3:cf:cd:6d:14:
                    d2:71:13:0b:22:da:b3:64:9d:03:2f:bf:86:b5:0a:
                    53:d4:02:a8:be:82:c8:81:60:c0:a9:41:87:a5:f3:
                    d2:4b:f9:32:58:35:34:0e:1b:83:9e:c2:8a:21:b8:
                    f8:4a:21:76:db:02:e0:36:5a:d4:27:c5:c3:90:84:
                    6e:9c:5a:78:19:27:28:dc:71:56:c0:05:14:01:69:
                    f0:0f:4b:e5:ec:6b:21:a4:1f:8c:ff:dd:75:41:f4:
                    b0:04:39:34:17:f8:39:b2:f7:01:1f:c1:2f:26:5c:
                    bd:71:37:36:a9:e7:36:f5:43:f8:3d:91:ff:ab:5d:
                    43:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0E:29:1D:6A:B1:D3:5E:F3:08:C4:56:13:B2:DD:28:61:50:72:46
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:0c:15:86:5e:ef:4c:cb:b6:ba:12:eb:4c:4f:87:f6:29:4d:
         d8:8b:e4:8f:66:56:23:93:18:87:a2:93:ca:28:55:86:59:a5:
         23:86:6c:4e:cb:77:0e:4a:ff:d2:1a:32:96:69:1a:05:cc:6d:
         f7:d4:c1:3e:29:a6:7c:07:25:e4:23:b6:5a:89:12:ea:a3:db:
         6d:7d:b3:35:20:8a:06:5d:bb:b4:cc:fe:7f:fc:e7:0e:93:e0:
         6d:23:d3:c0:a2:c1:09:ae:2d:95:2c:67:6c:31:74:24:cf:7b:
         cf:dc:11:d4:63:a8:19:23:23:81:ad:28:f4:ef:61:9e:8f:43:
         91:47:1d:da:fb:ca:53:eb:0e:fb:51:03:22:81:3a:42:64:17:
         0d:df:0a:d6:cd:4b:42:5a:cb:8f:78:66:52:a1:88:23:9f:04:
         5a:5e:d4:87:a8:c6:4c:63:be:bb:72:90:87:23:5e:40:71:aa:
         9d:78:cb:75:ff:33:db:56:d2:cc:78:22:39:83:e9:88:69:2b:
         9e:f1:09:dd:64:bf:74:a0:6d:17:f4:51:58:40:c7:54:48:5d:
         47:f8:5a:6d:a2:98:92:d6:22:48:0a:b7:27:49:ef:71:ae:21:
         4f:b7:01:27:d6:91:c1:66:f1:a0:e9:82:5c:b8:ed:11:ee:ce:
         ec:64:e5:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPsc4HCIWuC9W3LQ3wVQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0
N2IzYjAwHhcNMjYwNDE3MDcwMTM4WhcNMjYwNDE4MDcwMTM4WjAzMTEwLwYDVQQD
Eyg2ZDBlMjkxZDZhYjFkMzVlZjMwOGM0NTYxM2IyZGQyODYxNTA3MjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQl4IKSjpgDTP69jFpkiVz58BLge
WlXatXulpwr1bxzc7YYNYvJRQ7tQZfnUNmxI/tDmhJpAor+3zjgrQrefgFOUH6D6
ddFlwn/x8QTWjNBlFmsZdBUTk4codhV9bxfTkT4GO3MkHvYq0fkS2R/NluKsoel+
szjz7DVqATzcU0vq88/NbRTScRMLItqzZJ0DL7+GtQpT1AKovoLIgWDAqUGHpfPS
S/kyWDU0DhuDnsKKIbj4SiF22wLgNlrUJ8XDkIRunFp4GSco3HFWwAUUAWnwD0vl
7GshpB+M/911QfSwBDk0F/g5svcBH8EvJly9cTc2qec29UP4PZH/q11D5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0OKR1qsdNe8wjEVhOy3ShhUHJGMB8GA1UdIwQY
MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt
MGQwZGEwZDEwNDMyLzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy
LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgwVhl7v
TMu2uhLrTE+H9ilN2Ivkj2ZWI5MYh6KTyihVhlmlI4ZsTst3Dkr/0hoylmkaBcxt
99TBPimmfAcl5CO2WokS6qPbbX2zNSCKBl27tMz+f/znDpPgbSPTwKLBCa4tlSxn
bDF0JM97z9wR1GOoGSMjga0o9O9hno9DkUcd2vvKU+sO+1EDIoE6QmQXDd8K1s1L
QlrLj3hmUqGII58EWl7Uh6jGTGO+u3KQhyNeQHGqnXjLdf8z21bSzHgiOYPpiGkr
nvEJ3WS/dKBtF/RRWEDHVEhdR/habaKYktYiSAq3J0nvca4hT7cBJ9aRwWbxoOmC
XLjtEe7O7GTlWg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:46 2026 by rpki-client