Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File:                     wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier:          f7HVdSLozO85owk6Pz9sp9Y1/i9W78XlAIPdx03A6Xo=
Subject key identifier:   1F:12:D7:6C:A5:EC:8B:76:C2:C3:18:8C:A3:0A:75:34:C6:1E:5B:C5
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer:       /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial:       019D97AA6D5055714DFF594063A9A5B8A8E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number:          0B39
Signing time:             Thu 16 Apr 2026 19:00:21 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:21 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:21 +0000
Files and hashes:         1: eQRk02-rqRsoVMzAY3_UPFAuAlo.roa (hash: 7f1oukrkE94Uqo0kLbpw4xRpMp5ggZCo2gEHz8zdJ4w=)
                          2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: eIxbthfe2vbe6e+u1FhLi6rALgzVX1c1GQZ38CHUfu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:6d:50:55:71:4d:ff:59:40:63:a9:a5:b8:a8:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
        Validity
            Not Before: Apr 16 19:00:21 2026 GMT
            Not After : Apr 17 19:00:21 2026 GMT
        Subject: CN=1f12d76ca5ec8b76c2c3188ca30a7534c61e5bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f0:f2:4b:c4:04:c4:53:13:dc:c8:a5:37:3c:
                    9a:6e:f5:7b:05:9f:71:48:ac:3c:95:d7:17:63:1c:
                    4f:89:32:65:1e:e9:bf:ec:2a:57:12:89:28:39:ca:
                    35:ce:d4:f1:9d:f0:c5:68:2f:a8:0d:01:4b:11:bc:
                    a4:23:0b:cc:72:8e:ae:f0:3c:5f:c8:1d:06:dc:42:
                    91:57:7d:f8:83:0d:cf:41:98:40:cf:e6:37:d5:8d:
                    26:a1:78:3b:26:e7:49:bb:9c:f0:af:36:c2:f3:92:
                    10:a2:99:32:90:c6:15:f0:f6:64:57:08:ee:34:7b:
                    f8:5d:41:69:52:68:5d:e1:68:c6:da:4f:fa:cd:61:
                    6b:ed:5b:62:7d:e1:7f:cc:f0:95:5e:f1:f9:43:54:
                    5c:23:b9:f3:4c:57:ee:36:76:d6:6f:78:7b:18:36:
                    a0:52:05:01:69:8c:0a:12:cc:bb:64:3d:ec:23:f9:
                    74:e4:dc:98:7f:76:a4:eb:5a:52:a3:db:9e:67:54:
                    00:d0:64:f8:01:c3:b7:f4:f1:d8:29:34:ce:c0:ed:
                    1c:8b:c7:a0:76:b9:b7:82:fd:42:61:77:78:26:8d:
                    24:27:9c:c7:10:30:fa:14:2c:64:36:5d:16:41:9e:
                    b6:75:21:37:04:b0:ba:06:3b:29:00:89:79:b6:9a:
                    a3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:12:D7:6C:A5:EC:8B:76:C2:C3:18:8C:A3:0A:75:34:C6:1E:5B:C5
            X509v3 Authority Key Identifier:
                keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:cb:7c:06:56:49:c3:be:eb:cb:12:19:61:45:52:78:d0:a6:
         ad:1b:9f:cd:94:9e:94:09:63:77:45:ff:5e:ee:65:a8:51:5c:
         3c:5b:42:97:07:e3:fc:97:f7:39:c1:ef:09:21:e7:65:b8:52:
         88:86:4d:45:b9:a0:09:4f:82:66:ab:4f:a9:7b:e5:94:5d:45:
         2f:0b:6b:eb:c2:20:78:74:77:fe:07:83:88:34:24:fa:f8:5b:
         a2:d7:d7:f9:c6:89:ee:36:1f:2b:5b:93:64:c9:ac:d8:b6:b1:
         37:5f:92:07:12:fa:f5:eb:17:4c:23:9c:5e:17:bf:ef:6a:af:
         23:11:23:4a:d7:e7:1a:15:56:ef:ac:91:9e:fe:16:33:d2:91:
         17:58:f5:ef:34:a4:30:34:97:ea:8d:24:b8:bf:c6:66:cc:5d:
         ac:3f:1b:2a:a5:f1:fb:4e:ff:c3:5e:83:ea:f9:b3:17:4d:12:
         47:30:94:85:56:9e:88:70:10:7c:5d:11:4f:ad:37:aa:e5:08:
         10:bb:92:39:b6:bc:6e:5e:af:d4:0c:43:d7:78:7f:bc:ef:bf:
         79:20:0f:b6:e1:0b:b7:2f:84:29:03:68:5a:67:9c:4a:d2:7c:
         9f:19:9b:3a:dc:ef:5e:8a:18:52:41:04:d3:a1:90:5f:5c:82:
         fa:c0:3a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:51:55 2026 by rpki-client