Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File:                     WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier:          QT9VF91nVT/7w3TKmTnQBME/cfDu3p6jxk0XBcd/X6c=
Subject key identifier:   05:DA:78:57:41:03:C3:42:6F:4F:BC:B4:59:20:1B:BE:04:33:C0:9B
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer:       /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial:       019D98F53111F97BA87D85A335294DFDBAEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number:          03FC
Signing time:             Fri 17 Apr 2026 01:01:38 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:38 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:38 +0000
Files and hashes:         1: 4mtxApph_9MS77mo7dnRYHNzv98.roa (hash: PhPkJXgdPNKURqwnzEUMiajtjEnbJmXFdFqDd1kopb0=)
                          2: 9EYbQcuokiQ3PLXtCGAIwFewXeo.roa (hash: jLNXeOrl0Rii7w4wiHiLKivUNt1cz5L0GNNK/0vRrvI=)
                          3: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: coUaC0A7yCut3432+5kkk3y4S9kd1dNbymz/XmaCK1w=)
                          4: aZTkPbXNRsPD1lOUCeaDegTWgE8.roa (hash: JFUxMjofzQwR3Oc2ar9w9EVMpvVMJoznshzwwTzRBIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:31:11:f9:7b:a8:7d:85:a3:35:29:4d:fd:ba:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587f5478d1e94f240705722c3789076daf553757
        Validity
            Not Before: Apr 17 01:01:38 2026 GMT
            Not After : Apr 18 01:01:38 2026 GMT
        Subject: CN=05da78574103c3426f4fbcb459201bbe0433c09b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:23:ff:ad:ff:c7:c2:b2:ec:87:8a:9f:99:
                    45:ec:d6:f6:03:5e:4c:08:ba:3d:63:c6:17:3b:bd:
                    8d:70:dd:ae:ad:b0:70:63:3c:ca:db:55:d4:8c:54:
                    ce:a6:41:ae:dc:65:47:fe:35:d1:a9:8c:6e:66:d7:
                    cd:6d:07:26:fa:db:a4:0c:26:91:91:2b:29:c2:f4:
                    49:18:d6:13:b3:4c:f5:83:74:b1:9e:4e:cc:e4:d3:
                    1f:a0:c9:f0:09:2f:0f:c4:2c:b0:46:65:da:9c:8f:
                    20:80:02:f6:ba:1f:aa:07:ab:f4:8d:c7:57:dd:7a:
                    0b:8a:39:a8:27:06:be:cc:05:19:8d:6f:7e:83:ba:
                    24:ea:76:02:fb:d2:9c:d4:8d:8a:65:7b:b3:26:35:
                    06:cc:ff:1b:0c:5d:bb:20:64:c3:47:dc:fc:30:3e:
                    33:b2:54:e9:34:88:1c:54:68:ec:74:cf:0d:62:80:
                    06:4e:1c:76:e0:8e:56:53:65:1c:b3:fa:4f:41:ff:
                    c3:fa:22:c2:17:72:c0:3b:72:f0:40:a8:70:c3:32:
                    40:75:0e:42:20:3c:40:14:9e:2a:33:9f:5a:2e:3c:
                    99:2c:5b:75:ae:39:80:ef:df:2e:9a:f3:cb:43:28:
                    50:fd:f3:fe:72:20:66:15:22:c9:db:b9:ad:5a:03:
                    1b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:78:57:41:03:C3:42:6F:4F:BC:B4:59:20:1B:BE:04:33:C0:9B
            X509v3 Authority Key Identifier:
                keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e4:53:15:a1:5a:9b:3b:c0:99:7d:84:e0:58:aa:60:fb:bb:
         38:6e:48:c5:0e:16:a0:d7:8b:85:4c:f4:6c:c4:e6:b9:5d:1a:
         96:cc:64:82:c3:d1:4c:09:9a:fe:a3:ef:a4:b6:68:e2:88:21:
         07:48:53:45:1f:a2:92:21:1f:b6:1b:be:70:12:92:5f:d0:46:
         1c:a9:4e:30:82:41:ff:6a:69:fc:01:0f:80:67:4b:37:45:f5:
         15:5c:89:b8:32:92:2a:b9:9b:7b:11:72:c9:b6:97:dc:12:b4:
         0e:c5:04:00:35:ec:99:15:54:e8:15:ce:11:ce:19:70:c4:16:
         1e:56:dd:ba:ad:2f:7f:b3:cc:49:3e:05:45:e6:90:dc:12:5e:
         d6:e7:b3:fb:b1:a8:74:93:b5:d1:c5:2c:2a:a4:da:1c:b6:f2:
         3e:a4:f7:9a:2b:69:93:10:96:14:36:f2:86:6c:42:4d:6d:24:
         01:86:a5:c1:48:f0:5d:29:8f:eb:94:30:82:5f:b4:be:08:7f:
         1a:5d:6f:c3:7f:19:68:cb:23:13:37:9a:5b:10:3b:9a:69:66:
         34:44:9c:47:f5:8c:72:0e:6c:38:b2:d6:96:36:fb:52:49:aa:
         f0:82:bb:1d:1c:6c:53:03:e4:99:39:23:3b:22:6a:49:24:e8:
         bf:96:5c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:12 2026 by rpki-client