Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
File:                     wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft (raw, json)
Hash identifier:          vwqm5rU9yebI6K6Uh+Kmx0KwFALvahawC0RP2wqoWaA=
Subject key identifier:   6A:9B:14:0D:76:83:F4:10:23:89:F8:0E:41:96:4E:92:9C:D1:70:03
Authority key identifier: C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
Certificate issuer:       /CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Certificate serial:       019D9B87BB0A3CBF7902A5D5F9B403C0D131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 13:00:56 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:56 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:56 +0000
Files and hashes:         1: NL8rSfyxWcsWpxWKm8tBfkTXcs0.roa (hash: sBMmbDQjULrzTwB5b2UbeUaKtOYcZz6VQKlh97H9xVA=)
                          2: wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl (hash: nZiPI/NTr1790rAiQ24lu4dwYp8M93CFoji9z2SgorQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:bb:0a:3c:bf:79:02:a5:d5:f9:b4:03:c0:d1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
        Validity
            Not Before: Apr 17 13:00:56 2026 GMT
            Not After : Apr 18 13:00:56 2026 GMT
        Subject: CN=6a9b140d7683f4102389f80e41964e929cd17003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8f:c7:f3:ab:a9:b6:43:25:89:94:54:4c:bb:
                    48:3b:81:8c:a6:46:ce:b7:81:45:75:6f:17:8b:c5:
                    6f:88:62:0d:1e:eb:5e:c0:46:ae:80:f7:ca:06:a4:
                    97:01:c0:49:58:dc:96:1e:dd:6c:3c:05:5c:35:45:
                    f3:ea:34:ce:b5:fc:65:6f:c8:24:9d:29:35:59:99:
                    7b:b2:b6:eb:6c:55:48:06:53:78:59:ba:ac:91:45:
                    e2:ee:bb:fe:5c:9c:27:3e:7b:12:fa:ae:c5:c4:1c:
                    dd:6b:79:b7:cb:fd:52:4a:ae:68:da:ac:6d:69:6b:
                    97:80:ed:e0:89:c2:e9:33:30:fd:06:39:86:09:be:
                    b7:ce:d8:15:bf:72:5a:7c:e8:e8:a9:64:e7:51:d5:
                    96:63:6f:82:9c:af:6b:81:76:02:59:04:5b:8d:bc:
                    8d:7f:13:0a:ec:bf:84:d4:00:04:a9:9a:da:ed:8a:
                    35:22:ff:e3:6a:9b:37:07:e0:62:02:b5:cb:e7:8a:
                    74:e6:f5:ed:5d:3d:51:a6:ef:15:ab:e9:4a:03:4a:
                    db:ca:c3:dd:8a:60:6f:27:a2:15:de:02:82:9b:bb:
                    db:49:35:bc:69:1e:16:18:a0:a0:1d:37:39:9e:93:
                    ee:4d:31:9e:eb:79:ab:75:e3:96:30:f0:f8:36:96:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9B:14:0D:76:83:F4:10:23:89:F8:0E:41:96:4E:92:9C:D1:70:03
            X509v3 Authority Key Identifier:
                keyid:C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:1c:e1:0a:fc:70:1e:3b:95:a8:ca:b4:f3:d2:fa:1b:62:
         5b:be:cf:c8:fc:c7:ce:30:d4:c5:0a:ce:6d:9a:e0:fb:2c:13:
         4d:46:eb:79:08:f4:95:e3:93:60:14:d3:2c:18:58:48:bf:46:
         60:1e:12:88:74:5c:59:90:0a:18:df:72:e9:4b:55:56:61:ec:
         43:94:2a:02:37:6c:15:a3:23:ca:d3:e3:08:34:68:03:ab:74:
         f0:9d:9e:1d:42:a1:f8:f6:4f:d0:2c:75:43:92:2d:4d:00:35:
         15:af:82:62:8b:ef:a0:d6:4a:fb:94:a2:2d:93:b3:a8:a2:0a:
         cf:2f:41:e3:27:64:f7:0a:b9:24:c6:a6:b3:f9:30:67:83:71:
         7a:50:cb:db:8a:d7:3d:98:be:cc:99:66:60:e6:76:84:d2:fd:
         fd:e3:33:7c:2c:bc:0c:3b:9f:a5:5c:ce:49:0f:89:99:8f:1c:
         0f:6e:0f:50:7a:c6:3e:9f:82:99:33:f7:cc:5b:15:f9:f5:3e:
         f4:66:ee:f0:bd:73:d8:12:bb:c2:2e:23:08:4e:f6:4d:db:d4:
         91:9d:41:b8:ae:c1:a3:c3:83:8a:9d:5f:ae:f5:bb:e4:0a:98:
         b6:89:4f:73:71:96:3a:c6:09:f4:e3:9e:c4:10:5d:03:d0:7b:
         ba:d6:2f:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh7sKPL95AqXV+bQDwNExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZTFkZGExZGY3M2YzZmY2YWU0ZjVlN2M3YjI0Y2FiMzVl
Njg0OWQwHhcNMjYwNDE3MTMwMDU2WhcNMjYwNDE4MTMwMDU2WjAzMTEwLwYDVQQD
Eyg2YTliMTQwZDc2ODNmNDEwMjM4OWY4MGU0MTk2NGU5MjljZDE3MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko/H86uptkMliZRUTLtIO4GMpkbO
t4FFdW8Xi8VviGINHutewEaugPfKBqSXAcBJWNyWHt1sPAVcNUXz6jTOtfxlb8gk
nSk1WZl7srbrbFVIBlN4WbqskUXi7rv+XJwnPnsS+q7FxBzda3m3y/1SSq5o2qxt
aWuXgO3gicLpMzD9BjmGCb63ztgVv3JafOjoqWTnUdWWY2+CnK9rgXYCWQRbjbyN
fxMK7L+E1AAEqZra7Yo1Iv/japs3B+BiArXL54p05vXtXT1Rpu8Vq+lKA0rbysPd
imBvJ6IV3gKCm7vbSTW8aR4WGKCgHTc5npPuTTGe63mrdeOWMPD4NpYLYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqbFA12g/QQI4n4DkGWTpKc0XADMB8GA1UdIwQY
MBaAFMLh3aHfc/P/auT158eyTKs15oSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VIZG9kOXo4XzlxNVBYbng3Sk1xelhtaEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My84NzFjMjgtNjZmMy00MDZkLWJiNTQt
OGU0MDQzNWY0YmEzLzEvd3VIZG9kOXo4XzlxNVBYbng3Sk1xelhtaEowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My84NzFjMjgtNjZmMy00MDZkLWJiNTQtOGU0MDQzNWY0YmEz
LzEvd3VIZG9kOXo4XzlxNVBYbng3Sk1xelhtaEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACH8c4Qr8
cB47lajKtPPS+htiW77PyPzHzjDUxQrObZrg+ywTTUbreQj0leOTYBTTLBhYSL9G
YB4SiHRcWZAKGN9y6UtVVmHsQ5QqAjdsFaMjytPjCDRoA6t08J2eHUKh+PZP0Cx1
Q5ItTQA1Fa+CYovvoNZK+5SiLZOzqKIKzy9B4ydk9wq5JMams/kwZ4NxelDL24rX
PZi+zJlmYOZ2hNL9/eMzfCy8DDufpVzOSQ+JmY8cD24PUHrGPp+CmTP3zFsV+fU+
9Gbu8L1z2BK7wi4jCE72TdvUkZ1BuK7Bo8ODip1frvW75AqYtolPc3GWOsYJ9OOe
xBBdA9B7utYv7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:21 2026 by rpki-client