Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
File:                     wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json)
Hash identifier:          K0m6F+A7HUJu09JDXIjbsXEisCnjyd02rb68kj9bSWY=
Subject key identifier:   2C:B3:52:DF:2D:01:CD:A9:E8:04:50:13:C2:12:84:92:17:B9:02:D5
Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F
Certificate issuer:       /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
Certificate serial:       019D98F50A8BC4C7B50887F1BF766A370849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
Manifest number:          0D73
Signing time:             Fri 17 Apr 2026 01:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:28 +0000
Files and hashes:         1: TuWv3N1-unV3Eu3hIWcQWgFmKPQ.roa (hash: J1hOIcfa6XqS5M+c4PzgE80mhXmq9LomS1O6BvUnhgQ=)
                          2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: bdKit5CWLQEP8SEBRmXfrgttW16qlcDyFXSvV8PnXnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:0a:8b:c4:c7:b5:08:87:f1:bf:76:6a:37:08:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f
        Validity
            Not Before: Apr 17 01:01:28 2026 GMT
            Not After : Apr 18 01:01:28 2026 GMT
        Subject: CN=2cb352df2d01cda9e8045013c212849217b902d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:4d:d0:66:de:c8:3c:6e:b1:45:9a:94:48:
                    e0:89:cb:ed:97:a4:9b:46:94:c4:8c:1d:05:17:33:
                    26:c6:0b:66:47:4c:d1:ba:c6:33:7b:c7:e5:96:85:
                    67:9a:f6:88:51:cc:bf:ee:98:e9:92:2a:86:10:96:
                    ba:11:64:4b:77:2c:51:2e:3b:26:c0:7c:95:b9:f7:
                    7d:8a:22:50:00:68:66:d2:4c:c8:b5:36:55:d4:ec:
                    1e:44:80:48:05:5a:21:40:56:4b:a0:da:f8:99:b3:
                    12:b5:1a:ff:0d:5b:c9:a0:a3:ad:e7:de:46:a6:04:
                    91:ce:97:2d:44:f1:9d:36:ac:e7:cc:09:42:6d:6a:
                    0a:5c:ce:8b:66:77:b0:d0:e3:1b:cc:86:71:a8:1f:
                    aa:99:dd:89:df:07:07:9d:1a:55:41:e3:51:c8:55:
                    09:45:57:c9:c2:df:b4:2f:5e:c3:9e:4c:75:65:ec:
                    63:68:2f:54:e1:44:62:0e:53:b6:08:da:93:73:da:
                    d9:d9:c3:87:b9:ec:d4:47:2d:7f:63:9d:67:d3:5f:
                    27:aa:e3:51:8b:48:6c:17:1b:b9:21:e4:92:aa:4a:
                    06:e2:49:b7:5f:d2:bb:99:93:17:9d:21:91:f1:46:
                    c2:d1:c8:36:e2:cd:4d:8a:cc:ad:f0:14:25:0a:6d:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B3:52:DF:2D:01:CD:A9:E8:04:50:13:C2:12:84:92:17:B9:02:D5
            X509v3 Authority Key Identifier:
                keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:c5:f0:45:56:bf:00:c5:36:91:d4:90:dd:f1:bf:0d:c2:13:
         85:76:f8:72:77:22:67:9a:77:78:65:1a:37:e0:7d:12:29:b2:
         0c:99:1c:18:11:04:f6:91:d1:23:e7:08:c6:1a:4c:a8:c4:fa:
         e5:50:41:c9:0a:29:5e:ef:a2:a5:0b:a6:2f:27:f5:b3:00:d8:
         e1:7a:bb:13:3b:d9:cb:77:eb:31:6f:3e:16:4c:b3:72:b0:e3:
         6f:b9:f2:47:40:56:1b:02:85:64:9e:c7:8b:18:bb:ae:b1:e1:
         a9:74:dd:8a:ac:13:6a:3a:10:55:ec:73:37:fc:68:5f:a6:ea:
         fe:3a:20:87:4e:f8:99:b3:0f:67:55:04:d0:43:e7:a0:d4:77:
         c8:15:59:16:04:8c:31:98:01:a1:7c:4a:18:37:f8:e6:d3:3a:
         61:d2:ad:3c:17:96:d3:48:25:67:fa:e8:b1:2d:e6:9f:94:e1:
         d5:63:2e:a5:69:94:ac:9d:60:74:c0:30:72:a3:9e:f5:d1:25:
         03:c6:31:39:9c:98:3c:4f:4f:27:2e:91:26:90:00:d2:cf:dc:
         de:48:6f:2d:0d:35:07:b8:07:25:4d:06:a4:f8:b7:25:2d:c1:
         49:a7:eb:62:51:54:25:2d:4f:df:da:e1:67:10:4a:48:ad:ec:
         e7:cf:6f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:03 2026 by rpki-client