Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
File:                     WpMlkBT1t2SEcHLDc07LUoByIY0.mft (raw, json)
Hash identifier:          6iFJZRYBN5Vt0oDG0SXOmyM4rK20D8/w2vp/HPFu6p8=
Subject key identifier:   10:E0:80:7A:7B:FC:A1:24:AB:3D:D2:CB:C4:54:76:9A:AF:BE:8D:12
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Certificate issuer:       /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial:       019D9850552D839327C5214150C7B1B53890
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 22:01:34 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:34 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:34 +0000
Files and hashes:         1: DTK1uEpNcIHomep8ZzJ8ZM5VEdY.roa (hash: 7QijLtYYqiOxewNr9aKQamEF1MxicHILyZTE3BfkUX0=)
                          2: WpMlkBT1t2SEcHLDc07LUoByIY0.crl (hash: e2McTuaRaoFVIbhmluVYns1rBolED+t113/w8Gy9fm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:55:2d:83:93:27:c5:21:41:50:c7:b1:b5:38:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
        Validity
            Not Before: Apr 16 22:01:34 2026 GMT
            Not After : Apr 17 22:01:34 2026 GMT
        Subject: CN=10e0807a7bfca124ab3dd2cbc454769aafbe8d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:00:2c:53:e8:a2:50:76:24:a5:a9:4f:92:
                    e8:62:0b:c2:0d:a6:7d:8e:ea:31:76:26:f3:55:fb:
                    ee:38:fe:de:f7:28:df:b5:3e:ee:73:bf:7f:2e:8d:
                    04:04:6d:a6:93:7f:93:6e:8e:da:ac:a5:bb:53:19:
                    db:cf:1d:a3:0d:ca:2f:0f:cb:35:3a:ed:75:19:57:
                    1e:0a:61:a5:00:6b:08:12:86:bb:f5:89:67:83:29:
                    ed:7b:e0:9e:66:23:bf:19:fa:13:5e:00:df:de:df:
                    3f:4c:51:ce:f0:d1:58:a7:e2:df:63:36:2f:fa:a1:
                    af:e7:9e:f4:ca:ac:c4:e8:fc:fc:19:3f:e1:58:3f:
                    81:58:41:89:a0:f8:03:c6:89:93:49:9f:42:81:7e:
                    94:15:33:67:52:5b:dc:f8:40:cf:d7:5a:b3:2f:4b:
                    b3:a7:98:4d:58:15:44:ee:c9:b8:93:96:fe:fb:f0:
                    fc:f3:ba:47:4f:8c:26:bd:30:3f:d3:c5:34:3c:4a:
                    14:be:17:c2:21:ff:17:c8:08:1d:2e:6c:d0:6a:29:
                    23:9d:1e:76:4e:01:12:4a:38:15:a5:53:3b:dc:11:
                    49:e1:15:94:7c:a2:f9:2b:e4:bf:35:3e:58:8e:ab:
                    0c:43:a3:a8:27:ab:79:07:b6:4a:5c:1d:05:7e:73:
                    e5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E0:80:7A:7B:FC:A1:24:AB:3D:D2:CB:C4:54:76:9A:AF:BE:8D:12
            X509v3 Authority Key Identifier:
                keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f2:b8:fd:40:cd:f3:a2:e7:f6:77:df:19:80:63:c5:bd:37:
         0e:cb:d2:e9:5f:09:13:0c:69:ac:ae:a7:04:42:20:70:fb:85:
         5d:fa:c5:69:ac:f8:54:74:86:06:c4:a2:84:9c:cf:b2:5b:fc:
         34:4c:02:a9:14:e7:37:db:dd:fa:13:86:24:9d:78:6f:d1:a2:
         97:61:b7:06:33:c6:bc:3c:82:2a:d5:76:5f:42:19:a0:e1:17:
         b7:ed:89:06:c1:e8:af:e4:04:a0:9a:5a:b2:5a:22:3b:67:8c:
         ca:11:55:bd:f5:c7:8f:0d:a5:7a:2c:94:e0:d3:77:60:52:9c:
         23:ef:72:de:6a:cd:3d:dc:0b:80:7e:65:99:00:65:e2:7b:42:
         20:b2:b0:48:a1:2c:7f:f3:ec:9c:10:7a:f7:dc:22:0a:2f:54:
         93:57:d0:d3:ae:d2:85:c9:b0:f0:3f:5e:0b:99:80:59:1d:e5:
         3a:23:6d:30:bd:92:31:1d:75:cd:bc:3a:14:5f:04:55:70:e9:
         59:2d:35:ab:45:81:f8:03:44:70:0b:30:9e:ed:70:d0:01:6b:
         76:b7:f0:c5:38:e7:c2:0b:85:17:3e:63:a5:29:e8:09:1a:08:
         44:f7:06:d8:61:fb:af:a6:a3:e4:ec:79:ba:fc:ee:6f:51:75:
         f6:86:87:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:23 2026 by rpki-client