Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          n6goAteQv/RmrheFOacB2UKT7wGoIPW5F0K61LCSB9Y=
Subject key identifier:   25:60:1B:13:C0:33:33:95:45:96:58:56:EC:F1:4F:FA:E1:E8:30:E5
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       019DA30A6050F99E596E274D84B1722BB879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          0426
Signing time:             Sun 19 Apr 2026 00:00:59 +0000
Manifest this update:     Sun 19 Apr 2026 00:00:59 +0000
Manifest next update:     Mon 20 Apr 2026 00:00:59 +0000
Files and hashes:         1: 3ROQujXGNLqdu4u_7p3X6MZFjqo.roa (hash: gsfXZvICCIs7dkt15+pJ7BF5UxTZq1/LQLpC6Nx+te8=)
                          2: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: 1qJmAHisqPNuovf4M2WMk6q74A9EPzM05v8vNwKqZ0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 00:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:0a:60:50:f9:9e:59:6e:27:4d:84:b1:72:2b:b8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Apr 19 00:00:59 2026 GMT
            Not After : Apr 20 00:00:59 2026 GMT
        Subject: CN=25601b13c033339545965856ecf14ffae1e830e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9a:e8:14:f1:ad:05:2c:88:0f:18:ad:22:51:
                    2d:ae:21:31:4b:df:86:47:48:ff:31:26:99:29:d3:
                    60:7f:e8:75:39:e2:3d:16:de:78:68:d4:ae:aa:ce:
                    a2:fe:cd:fd:ac:84:d6:91:d1:ae:8c:17:38:3f:ae:
                    fb:f1:18:0e:14:11:cd:c0:a5:a8:7f:e6:a2:96:3c:
                    1b:8b:0f:04:c1:67:26:79:c1:ca:04:49:77:09:db:
                    9b:db:8a:cd:0e:e7:1a:d6:d6:e0:7a:16:13:e5:ea:
                    ef:ef:51:78:e5:77:04:71:54:7e:78:6d:19:de:b5:
                    fe:e1:96:75:82:7f:27:62:ac:b4:ed:2d:f1:92:53:
                    d8:6d:06:06:f6:5d:e8:ce:2e:a2:53:aa:bf:09:53:
                    6f:77:77:c9:61:b5:61:95:b2:ec:b7:3f:6d:ff:6e:
                    9e:bd:f7:fb:ea:fb:58:87:b1:47:ed:ac:4b:d8:72:
                    80:ab:13:53:c7:2b:45:21:5b:7f:05:f9:12:b2:6b:
                    46:25:25:d9:8f:03:c5:70:80:d6:24:ff:25:46:d3:
                    87:4d:e0:48:93:96:4a:61:ae:42:d2:3f:da:63:b6:
                    c1:6a:32:bb:e4:23:86:8c:f1:8b:1e:e1:33:6b:bc:
                    f3:5a:68:07:1d:75:6f:05:6f:e4:46:ee:7b:db:50:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:60:1B:13:C0:33:33:95:45:96:58:56:EC:F1:4F:FA:E1:E8:30:E5
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a2:4f:cc:08:07:8c:65:cf:ed:c4:6b:fc:0b:39:8c:30:06:
         ef:d2:c2:ae:33:e0:d0:0a:27:22:ad:a8:24:3d:ad:86:4d:bf:
         c2:72:eb:67:2c:b5:13:74:1e:3c:e6:48:ca:46:8b:4a:a1:86:
         aa:7d:21:8d:f3:a5:42:5c:e7:12:5f:0f:7a:b1:1f:c5:75:ed:
         5c:da:87:f0:06:ac:05:7a:ba:39:21:ae:dd:3c:84:7c:6c:91:
         c4:81:c7:ce:44:97:a9:8d:63:62:cd:bb:05:2f:d2:95:40:21:
         1e:6f:d7:6b:a0:a4:6f:89:df:1d:21:25:0f:6d:46:d6:60:f6:
         e4:48:9e:59:a6:a3:d2:24:d2:37:c7:94:a9:5c:05:33:7b:64:
         da:89:c3:56:06:20:2a:08:de:1d:c8:25:7c:c0:a3:d4:94:14:
         65:bb:3a:8f:75:1d:8b:af:35:7f:70:93:00:e2:23:f1:86:a2:
         38:0c:31:db:43:e3:ab:d2:d0:7d:02:c9:88:ef:b6:dd:05:24:
         a7:e9:12:86:2f:4c:12:75:20:8d:1e:67:4d:aa:8c:09:65:f3:
         42:03:fb:c5:7c:84:46:52:a0:d7:56:bf:4d:bf:63:7b:cd:62:
         13:e9:28:dc:bc:9a:88:bf:aa:6c:d0:66:fa:77:46:56:9b:b2:
         d6:d3:5c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:15:56 2026 by rpki-client