Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File:                     wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier:          j1bzTK/fM7FJHEK8HoU1KmZ3QuH9MT/zWVghiAL3SGI=
Subject key identifier:   36:6B:84:07:4E:42:DF:9C:A8:F6:03:BD:57:9B:7B:75:62:F1:1C:EB
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer:       /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial:       019D9A06F077E457D7C992A7FA710D22F24B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number:          07A2
Signing time:             Fri 17 Apr 2026 06:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:39 +0000
Files and hashes:         1: Mz8qnBphricpE-y1NgDJ85UMBGA.roa (hash: D7iDGlfFeVsE7k0g3r151vYQu3PiucDxigC9xAR74QQ=)
                          2: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: CZWQs+19UReHsopeb2ccKyPn1gJhzqEQH2qGh8wBc74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:f0:77:e4:57:d7:c9:92:a7:fa:71:0d:22:f2:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
        Validity
            Not Before: Apr 17 06:00:39 2026 GMT
            Not After : Apr 18 06:00:39 2026 GMT
        Subject: CN=366b84074e42df9ca8f603bd579b7b7562f11ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a4:49:25:1a:09:ac:96:dd:76:1f:03:8e:69:
                    c8:cc:36:09:af:0d:d2:c8:e8:19:f9:51:c1:b9:38:
                    b7:9c:f8:e3:2f:64:58:93:40:1d:82:4a:6c:43:0a:
                    96:02:0b:d9:23:75:36:c6:84:35:69:a5:5b:c1:b5:
                    f3:45:80:24:34:79:4c:4b:fb:81:ca:ed:2d:34:3a:
                    b6:06:cf:f5:b9:11:f0:76:14:8e:dc:0b:a1:ca:a6:
                    71:a0:dd:c2:85:0c:07:a3:07:91:58:fb:ff:18:58:
                    45:05:91:4c:f5:98:f5:ab:c7:b6:7e:24:2b:fe:eb:
                    fc:e6:c8:c0:89:5f:2a:1e:4e:7f:ef:bb:d3:80:96:
                    19:ec:70:fd:eb:99:c4:bc:41:7d:9c:ec:f8:98:18:
                    dc:7b:90:75:b5:35:80:e1:f6:ca:40:14:52:2d:16:
                    ec:c3:8d:59:d6:b8:9b:41:f7:35:85:37:c5:f0:3c:
                    08:ef:c4:46:ac:31:3d:ca:f9:6f:a8:bf:20:cb:9a:
                    db:32:c2:0f:ff:21:8d:08:4f:52:cd:92:77:f8:df:
                    51:ba:a3:5b:43:ce:5e:47:9b:c9:a8:d9:88:0f:7c:
                    0c:15:ed:0f:cb:b7:22:93:a5:78:1b:04:73:e4:68:
                    cd:ba:c6:4b:4b:78:46:da:ae:ba:05:26:a4:2e:3c:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6B:84:07:4E:42:DF:9C:A8:F6:03:BD:57:9B:7B:75:62:F1:1C:EB
            X509v3 Authority Key Identifier:
                keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f1:07:c1:6c:a7:5f:ec:bf:24:c8:5c:cd:66:04:a4:cd:62:
         4d:1a:ba:5e:d5:87:05:5d:0b:5e:5d:35:02:03:5d:37:6b:e1:
         6c:ef:04:01:52:95:de:a1:87:92:4c:87:0b:25:a0:a7:6f:5f:
         4b:a1:94:e3:8f:f2:71:c8:ff:1e:f6:d5:0a:1c:2e:d5:01:cf:
         ec:19:91:12:9d:ac:15:e6:f7:4d:cf:72:b1:f2:c6:f7:e5:cf:
         db:3b:94:a9:97:b6:b5:f9:cb:5f:25:91:38:00:4a:66:d1:7f:
         47:22:4d:fc:86:f3:d1:d4:ff:05:f6:a2:a8:f9:35:45:a2:c7:
         a5:68:69:8a:4b:19:cb:69:cc:b8:71:e1:fd:fc:df:39:ec:cd:
         c9:f7:40:bb:6c:78:6e:ad:3b:92:7a:a1:39:35:c5:ce:c7:54:
         c0:2d:77:86:5e:14:a3:15:4e:56:89:14:a6:3f:4e:37:08:81:
         73:f2:71:27:92:ea:e6:2d:49:47:24:5b:bf:0f:86:b6:5b:91:
         89:7c:a1:cd:95:14:f7:b2:d1:b6:7b:9c:fa:5d:82:10:7e:62:
         5d:4c:e4:a4:68:92:2f:18:f0:62:f0:30:45:c7:9e:2e:20:58:
         94:d8:11:19:ec:09:98:bd:ca:75:7d:7a:f9:ca:b4:ff:c5:7c:
         b8:94:18:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:47 2026 by rpki-client