Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
File:                     wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft (raw, json)
Hash identifier:          Z9GQHlqAntUH4+uytl45PPbua+sKyNY205IByT5JNmo=
Subject key identifier:   96:56:FB:54:D3:F7:32:24:D3:D8:12:86:B8:28:43:A8:0B:29:61:41
Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7
Certificate issuer:       /CN=c20e52dab06da4175b45c777961f4ea39b9307b7
Certificate serial:       019D9A06AA1238D955F9EB498BA9701458E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 06:00:21 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:21 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:21 +0000
Files and hashes:         1: rjWMczYWVUlDT0G9Gz8JcdLLaZg.roa (hash: 8skxqfY0u+xIRKIa0L6xMXFKLEu62D+QiOeNkaaqh7g=)
                          2: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl (hash: uzFssnlSKG93MbzMk347x5NH/px6HXPJ5AFbpNO4tZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:aa:12:38:d9:55:f9:eb:49:8b:a9:70:14:58:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7
        Validity
            Not Before: Apr 17 06:00:21 2026 GMT
            Not After : Apr 18 06:00:21 2026 GMT
        Subject: CN=9656fb54d3f73224d3d81286b82843a80b296141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d6:21:d9:f3:8b:9b:b7:4c:db:e2:47:47:b1:
                    09:1f:20:cb:e7:31:82:05:e1:c1:ef:d4:21:08:a6:
                    7b:5b:0c:40:5e:13:62:81:e9:7d:20:dd:58:27:fa:
                    a1:77:dc:ad:02:df:ba:63:92:14:01:da:e5:64:db:
                    45:c0:81:78:25:f1:89:34:9e:a1:a8:92:5c:6e:59:
                    93:5e:84:45:c5:b7:64:31:1f:9b:54:73:be:23:61:
                    2b:3b:01:68:73:12:b3:b7:02:1d:6e:80:9c:58:76:
                    49:82:0c:21:62:a9:13:ac:4f:70:77:a5:2d:5c:46:
                    fc:d7:c4:5d:1b:69:b3:70:5e:ab:16:86:d6:15:97:
                    4d:51:de:94:3a:21:54:84:2b:c4:a0:6e:52:94:22:
                    74:6d:05:55:e0:d9:bd:d6:75:67:82:d1:61:7d:fc:
                    11:7b:33:84:99:b5:67:ae:c0:63:58:df:02:5c:36:
                    a9:ec:59:58:5e:6e:fa:cd:dd:da:18:c0:e7:d4:86:
                    be:97:d9:e7:6d:d1:fc:86:ae:3e:e2:0d:b1:b5:fb:
                    02:01:06:0f:48:be:1e:4b:7f:0f:4b:a3:06:ad:8d:
                    be:63:ee:b9:1c:71:d9:18:24:aa:f5:df:e0:c2:8c:
                    e1:c9:8a:52:53:15:b3:30:4e:e9:19:30:82:ab:e3:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:56:FB:54:D3:F7:32:24:D3:D8:12:86:B8:28:43:A8:0B:29:61:41
            X509v3 Authority Key Identifier:
                keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:17:c8:85:4c:9c:92:09:4c:d0:6e:9a:a8:a0:8f:76:f5:06:
         cc:b2:70:66:78:c1:0b:b3:c6:f8:06:28:47:ed:3e:80:78:c1:
         60:a8:ca:93:61:81:aa:a2:0b:9a:35:45:d8:31:c5:a8:76:82:
         ea:a6:45:f3:9a:e0:9e:3b:9b:c1:d8:0b:c3:f2:a5:b9:13:70:
         8d:d3:64:b6:85:5d:04:f1:18:e7:18:82:73:4a:d4:34:b4:c9:
         1a:f3:34:1c:8f:0c:40:fb:77:d3:d7:95:d3:4e:cb:45:44:35:
         34:a5:8a:e4:d1:61:a6:50:97:6c:7b:93:b0:31:fd:8e:2d:d8:
         6f:60:56:e0:62:de:90:fb:1a:bb:0f:0a:ee:76:44:57:29:0a:
         e7:4e:2f:6d:d4:71:cc:ba:39:96:04:77:7d:8e:9b:3b:83:aa:
         cd:2b:ad:5a:c0:49:70:11:4c:ed:be:1d:63:5d:f4:54:30:c7:
         3d:0c:36:a6:7f:a6:bd:8b:ca:5e:4a:2a:ae:3f:c9:19:5a:c8:
         87:45:46:85:b5:7b:f2:99:07:de:30:ae:55:47:b4:e5:63:18:
         1a:5e:14:7a:cf:3e:9a:19:86:51:39:2a:3c:b4:e9:00:41:7a:
         1e:39:29:03:ba:c0:2f:87:49:10:f0:76:49:e7:6e:94:77:a7:
         f4:08:b6:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBqoSONlV+etJi6lwFFjiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGU1MmRhYjA2ZGE0MTc1YjQ1Yzc3Nzk2MWY0ZWEzOWI5
MzA3YjcwHhcNMjYwNDE3MDYwMDIxWhcNMjYwNDE4MDYwMDIxWjAzMTEwLwYDVQQD
Eyg5NjU2ZmI1NGQzZjczMjI0ZDNkODEyODZiODI4NDNhODBiMjk2MTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldYh2fOLm7dM2+JHR7EJHyDL5zGC
BeHB79QhCKZ7WwxAXhNigel9IN1YJ/qhd9ytAt+6Y5IUAdrlZNtFwIF4JfGJNJ6h
qJJcblmTXoRFxbdkMR+bVHO+I2ErOwFocxKztwIdboCcWHZJggwhYqkTrE9wd6Ut
XEb818RdG2mzcF6rFobWFZdNUd6UOiFUhCvEoG5SlCJ0bQVV4Nm91nVngtFhffwR
ezOEmbVnrsBjWN8CXDap7FlYXm76zd3aGMDn1Ia+l9nnbdH8hq4+4g2xtfsCAQYP
SL4eS38PS6MGrY2+Y+65HHHZGCSq9d/gwozhyYpSUxWzME7pGTCCq+Ou8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZW+1TT9zIk09gShrgoQ6gLKWFBMB8GA1UdIwQY
MBaAFMIOUtqwbaQXW0XHd5YfTqObkwe3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUt
ZTRjNzE4MDczMGNiLzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUtZTRjNzE4MDczMGNi
LzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxhfIhUyc
kglM0G6aqKCPdvUGzLJwZnjBC7PG+AYoR+0+gHjBYKjKk2GBqqILmjVF2DHFqHaC
6qZF85rgnjubwdgLw/KluRNwjdNktoVdBPEY5xiCc0rUNLTJGvM0HI8MQPt309eV
007LRUQ1NKWK5NFhplCXbHuTsDH9ji3Yb2BW4GLekPsauw8K7nZEVykK504vbdRx
zLo5lgR3fY6bO4OqzSutWsBJcBFM7b4dY130VDDHPQw2pn+mvYvKXkoqrj/JGVrI
h0VGhbV78pkH3jCuVUe05WMYGl4Ues8+mhmGUTkqPLTpAEF6HjkpA7rAL4dJEPB2
SedulHen9Ai27g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:44 2026 by rpki-client