Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
File:                     Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft (raw, json)
Hash identifier:          zI/coKpaJXj/d8AL8fIHG+b/9/bcTeNEeT8r+IBUWFc=
Subject key identifier:   86:56:4F:4C:FD:9A:C8:20:BD:FE:00:04:56:90:16:18:F9:F8:E6:B5
Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Certificate issuer:       /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Certificate serial:       019D99D0B874B3D445F878089DEA4EA75836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
Manifest number:          132F
Signing time:             Fri 17 Apr 2026 05:01:25 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:25 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:25 +0000
Files and hashes:         1: J63Xt7-yCtCeAOrP4fi5cBFgyo0.roa (hash: dDfL0X88LeIYm5lvfojYlVc/wL+pOG6NCq0L45cW30w=)
                          2: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl (hash: UnJUcX8hri+AhKO3PDVE0RCiEDyWspEXmTjOs69T5dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:b8:74:b3:d4:45:f8:78:08:9d:ea:4e:a7:58:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
        Validity
            Not Before: Apr 17 05:01:25 2026 GMT
            Not After : Apr 18 05:01:25 2026 GMT
        Subject: CN=86564f4cfd9ac820bdfe000456901618f9f8e6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:b2:4d:18:2d:0a:5d:96:00:01:3d:fe:33:9b:
                    5e:8c:04:f4:82:50:e5:13:10:30:a3:2d:1d:a4:2a:
                    62:3a:2b:55:59:42:d5:ab:47:ea:14:30:4f:14:77:
                    1f:19:b0:97:01:b5:c5:be:fd:8c:b1:2d:8c:85:11:
                    0a:28:34:1f:df:37:9e:da:c1:e8:66:7d:a3:03:de:
                    b3:68:91:9a:1d:68:f7:da:c6:28:93:c7:44:47:7c:
                    30:4d:23:5d:ce:57:09:83:1c:7f:dd:bc:e8:47:2e:
                    d2:db:f9:7d:4e:34:7d:ef:dc:1f:3e:c0:ca:90:45:
                    3b:93:1d:34:03:6d:77:d0:20:5b:0e:12:58:b5:08:
                    16:96:b4:35:ee:15:81:b8:8e:7d:ec:44:3c:18:1d:
                    49:5b:a3:f4:30:23:d9:d3:90:ad:62:f6:8a:21:bf:
                    6f:4f:b2:88:be:0b:5f:c1:06:31:39:c8:b9:9f:43:
                    0f:04:05:8c:90:16:77:f2:0b:97:f5:33:a4:2a:0a:
                    72:d2:79:9d:e4:38:06:53:b5:1e:1e:5d:68:a7:32:
                    e5:fa:d3:99:1d:da:87:21:99:3c:7e:01:49:84:cc:
                    52:1f:82:a6:95:ac:45:ce:b6:19:b1:72:8e:43:46:
                    71:4e:8e:6d:6d:bc:52:6e:53:fb:e1:67:36:78:95:
                    c9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:4F:4C:FD:9A:C8:20:BD:FE:00:04:56:90:16:18:F9:F8:E6:B5
            X509v3 Authority Key Identifier:
                keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:1b:9c:c8:64:62:09:5b:4c:52:31:cd:8a:1a:0f:0e:a5:6c:
         e0:cf:19:b2:b5:62:91:e0:6c:fd:6c:a9:21:c7:a1:91:4f:97:
         44:f9:64:00:8f:9f:b1:25:82:09:61:f2:f9:d5:ae:7d:56:2f:
         8d:f3:0f:f3:5a:84:c3:73:ae:8a:22:73:94:65:78:e3:2e:f8:
         53:f7:0b:b9:b0:c4:f8:fe:93:0c:f0:62:e2:62:49:61:98:e3:
         46:6d:6a:ac:67:f9:15:c6:57:47:7d:35:51:87:05:0c:27:c9:
         d1:1f:88:72:37:a1:5b:47:9a:98:7a:84:0c:19:5c:92:ac:ae:
         8c:35:ad:a7:4d:07:1d:7e:c5:71:db:4a:dc:8d:a5:fa:53:37:
         84:6a:13:15:18:fc:ab:02:71:6d:95:8a:c8:13:d2:bb:b0:93:
         5f:a8:6f:f9:6b:e3:b0:d8:67:0a:59:4a:6a:0a:34:be:29:d4:
         33:f8:ad:2d:ea:89:df:50:45:8c:15:4c:ba:02:49:43:0d:dd:
         c4:3c:fa:68:c1:b5:b7:ff:9c:d3:53:83:05:8d:bf:6c:c4:1a:
         ec:2a:c2:07:89:99:ce:43:4d:62:91:00:94:16:7a:db:73:56:
         01:9e:4e:5f:c2:4a:a6:6f:84:f7:5c:1a:f5:2e:ba:ca:67:40:
         9c:57:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:11 2026 by rpki-client