Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File:                     Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier:          OlSqhH2dGDaWXjGoryd/+1Aq97Ag85FRqQPomm02K+I=
Subject key identifier:   D9:B0:04:CB:2E:2D:64:63:3D:15:54:26:0F:06:CC:A9:5E:45:46:6A
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer:       /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial:       019D98BD32074E0E455FC1FC705F73F87803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number:          1542
Signing time:             Fri 17 Apr 2026 00:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:28 +0000
Files and hashes:         1: 6-cD7PwZNNg8B5NEI6cnS9qsYws.roa (hash: EYqd8s/hHYel0xQm6Q8ZXtIUTI9f5VFJlpaewnbnCgw=)
                          2: OOHuoxQHwcTPw0lmXeoWsx3MPDs.roa (hash: 0adogDb33iNZDpARqzB5nWTOkYnidB5h7S3awTSepJY=)
                          3: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: FXP9/ItuXEf30V/KX0PgpBrlUc+qpanT37kt5rlLvdY=)
                          4: zHZaUGL1PgevIY9huCaPmQ1rgRA.roa (hash: ncKaZ+bqsMAHSDw8fyhXbISTNBW6FE6m6Rhkmp7c75o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:32:07:4e:0e:45:5f:c1:fc:70:5f:73:f8:78:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
        Validity
            Not Before: Apr 17 00:00:28 2026 GMT
            Not After : Apr 18 00:00:28 2026 GMT
        Subject: CN=d9b004cb2e2d64633d1554260f06cca95e45466a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:88:d9:9b:10:4a:64:aa:2a:da:26:bd:33:
                    80:ee:72:99:3a:85:c5:28:7e:2d:32:63:e2:18:9d:
                    06:b0:ed:8d:28:44:e6:76:86:17:40:c8:2c:c4:26:
                    90:fc:0f:61:2c:55:e5:e7:9b:70:ac:8f:ac:3c:80:
                    03:b7:0d:55:e5:31:40:28:ab:6f:52:08:8d:ff:cf:
                    6a:04:28:69:98:75:46:4c:40:ca:15:ce:52:44:00:
                    be:34:eb:da:e0:d0:00:f4:3d:a1:49:07:42:55:17:
                    77:46:d1:76:15:7f:28:ec:b4:b5:2a:bd:ed:ba:69:
                    f5:79:27:e9:63:33:f4:54:68:c4:c9:4d:38:4b:12:
                    c3:c0:1b:96:47:fe:69:d3:63:bc:50:e7:a9:91:4a:
                    8c:51:45:e2:bb:8a:e8:c3:c1:c1:c0:dc:03:d7:5c:
                    5f:c2:62:b2:4b:9f:7b:41:65:38:50:dd:0a:9e:02:
                    9c:7e:3b:9a:06:c9:95:ea:45:3b:05:40:bc:68:ca:
                    0d:bc:94:6c:54:d9:e5:f0:02:db:d6:e7:cd:84:63:
                    71:1a:a6:72:d8:bd:43:16:a5:50:cb:16:82:be:f9:
                    c2:d0:72:83:70:bb:0f:92:bf:38:46:cd:b7:5d:57:
                    ab:27:50:f6:c2:ce:ca:99:b9:39:b8:b4:fc:2b:e2:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:B0:04:CB:2E:2D:64:63:3D:15:54:26:0F:06:CC:A9:5E:45:46:6A
            X509v3 Authority Key Identifier:
                keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:42:a1:6c:97:92:39:1b:a9:b1:71:e6:82:b8:34:33:d7:a5:
         73:cc:20:43:0a:2d:31:c3:85:6a:c0:71:c2:74:e1:b2:b2:93:
         61:d6:dc:f6:68:21:f7:81:09:8d:e7:53:19:47:23:c7:e4:12:
         b8:a1:d4:fa:ab:b4:69:c8:be:d4:9f:5f:27:c9:b4:95:6b:05:
         c0:02:f3:18:1d:10:74:bb:9c:cf:22:b7:2d:ff:f7:82:0b:c8:
         0a:85:90:e3:2b:c3:a7:9c:e1:bf:4e:9e:df:0d:20:6c:93:93:
         a3:27:d6:0e:90:57:13:32:67:62:b4:cb:08:69:db:11:d5:56:
         45:f2:6d:24:76:11:88:52:c4:50:85:6c:ad:b2:22:6e:5d:ed:
         e3:01:e0:ee:73:ed:5c:76:06:f1:d7:75:84:18:6f:03:7c:e8:
         c2:d4:04:96:9d:20:d1:50:ca:c8:c9:1b:66:d5:9e:d9:de:b2:
         68:12:fc:51:f7:31:af:5a:5d:78:ff:f5:84:1f:39:f7:cd:45:
         2c:d4:a6:88:d8:07:33:ce:37:20:c3:f4:3a:e2:40:6b:21:48:
         c1:dd:1c:25:28:10:b9:f8:57:d6:4e:96:cd:a8:b0:01:cf:d1:
         d7:4a:99:50:dc:4c:84:01:81:00:57:64:af:44:d7:96:ae:42:
         43:61:df:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:58 2026 by rpki-client