Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
File:                     WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json)
Hash identifier:          nt+TqLxkz/pK7R0IfPC3FHdAwPb2US54WEU1syMgllQ=
Subject key identifier:   30:42:2C:8C:4C:8C:E9:BB:66:3C:43:66:32:BE:D4:8C:F4:1F:92:B3
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Certificate issuer:       /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial:       019D9C2D23C795EACA315E927EFC732928D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 16:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:37 +0000
Files and hashes:         1: 1ZEZ_4_9QN7r4Lgh9hvQE-l6ktw.roa (hash: SmyioRAh7P6hmUC0dOolcHWUBZAopj2nWHBjYGfsnTU=)
                          2: JiU1EdEKZye0cxeHn7IP-JcaXgY.roa (hash: zxLJaiefCKz54L2xeBeMXIAOh05SFYWOpXptg0IbHvw=)
                          3: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: jzgOmGk3MJml8k7z1VJMJAI56u429zgZvsTXQDUEo84=)
                          4: jBNc2MW8DhC9H1qn8-QUDhR0rD0.roa (hash: ZPkJWGkBrHokbfgKinCVErvUSmXlIXedqOUHsLmoVy4=)
                          5: kh30KvylNHx5L2vYGK36_zRkWbs.roa (hash: ruT9Z0PTwEt0f+MnWu+6fvsLihP67BQHf56kXhj/oMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2d:23:c7:95:ea:ca:31:5e:92:7e:fc:73:29:28:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
        Validity
            Not Before: Apr 17 16:01:37 2026 GMT
            Not After : Apr 18 16:01:37 2026 GMT
        Subject: CN=30422c8c4c8ce9bb663c436632bed48cf41f92b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:0a:b0:15:15:bf:6e:ab:82:6d:e2:f2:12:
                    00:5e:b4:57:16:3a:07:3f:32:5f:f3:7e:73:61:89:
                    e8:47:75:90:32:18:32:83:04:fb:a8:8e:21:d3:bd:
                    92:57:e1:8b:34:ac:24:3d:cb:6b:23:5e:ca:16:d3:
                    59:8e:e8:b8:76:b8:d2:48:3b:17:e5:30:71:f5:35:
                    b8:4e:cd:38:34:2a:f2:8d:56:f6:b7:a6:5b:8e:cb:
                    d0:a1:84:12:3a:c7:ae:9e:8f:f3:08:3d:fe:f5:e2:
                    23:a3:75:14:a5:a4:14:1f:b5:37:66:ee:7c:d2:03:
                    ba:0c:8b:05:bf:ee:86:c7:7a:6b:3a:b4:c4:83:1c:
                    23:cf:19:9a:69:b1:b2:ee:fb:2b:38:2e:2b:46:df:
                    72:6a:03:a2:d7:48:26:e2:4c:8b:6f:93:ba:44:b5:
                    0e:70:c8:70:82:c6:2c:df:30:49:1c:6e:03:c4:10:
                    8c:7d:f4:f4:cc:2a:bb:74:12:0d:e0:fe:6a:18:38:
                    33:d1:b0:70:f5:55:df:33:33:fa:c6:47:fe:28:b5:
                    0a:6d:2a:33:9d:0e:78:14:6e:64:25:d9:80:10:98:
                    ef:61:86:61:97:3b:0d:eb:fd:b9:2a:70:68:8f:92:
                    92:81:8d:79:79:45:92:78:93:6c:12:a8:a2:9c:6b:
                    95:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:42:2C:8C:4C:8C:E9:BB:66:3C:43:66:32:BE:D4:8C:F4:1F:92:B3
            X509v3 Authority Key Identifier:
                keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:c7:40:01:67:4f:62:55:6b:d5:76:e1:b3:5d:a0:cd:19:
         ae:f8:47:10:bb:7a:0c:21:70:df:ee:ed:19:3c:6f:d3:6c:96:
         b4:81:84:ca:e6:08:28:ae:90:a9:3c:67:b3:07:61:71:30:e7:
         89:d8:da:81:6c:f9:6b:ba:0d:e1:32:cd:95:7b:d6:d1:01:06:
         ac:90:81:36:5f:68:e9:5e:96:ac:0f:e6:94:fc:7e:7e:60:1a:
         a1:50:d8:63:09:79:6c:99:15:f8:93:e8:95:99:b4:a8:56:10:
         55:5e:bd:2a:8b:60:ef:c0:ac:df:bb:c2:a5:34:75:90:5b:54:
         a2:03:17:29:ab:03:c7:9e:18:7b:aa:4b:d3:75:57:63:85:41:
         51:87:2b:2a:9b:50:e5:0c:ac:6c:2d:12:0d:22:e8:3c:c0:c5:
         ef:e5:8e:60:04:8e:22:8d:d6:58:df:45:e4:48:97:10:6c:49:
         05:52:d5:b5:b9:4a:8e:37:75:49:22:fc:57:7b:5a:5d:ff:1b:
         8b:a9:0a:e9:94:f1:f1:df:64:60:83:ff:54:23:d0:ff:76:88:
         54:d6:01:5e:39:e1:a7:04:4c:02:dc:75:0b:25:06:6a:56:ea:
         01:f4:fc:ca:dd:e7:b0:6a:ca:85:b6:20:b9:b2:f8:52:fe:6f:
         c4:8c:40:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLSPHlerKMV6SfvxzKSjTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZThjNzhmMTYxMzk3YWUxZGJkMGFjMzIyNTg0ZjYyZmI3
NDAwOTcwHhcNMjYwNDE3MTYwMTM3WhcNMjYwNDE4MTYwMTM3WjAzMTEwLwYDVQQD
EygzMDQyMmM4YzRjOGNlOWJiNjYzYzQzNjYzMmJlZDQ4Y2Y0MWY5MmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueMKsBUVv26rgm3i8hIAXrRXFjoH
PzJf835zYYnoR3WQMhgygwT7qI4h072SV+GLNKwkPctrI17KFtNZjui4drjSSDsX
5TBx9TW4Ts04NCryjVb2t6ZbjsvQoYQSOseuno/zCD3+9eIjo3UUpaQUH7U3Zu58
0gO6DIsFv+6Gx3prOrTEgxwjzxmaabGy7vsrOC4rRt9yagOi10gm4kyLb5O6RLUO
cMhwgsYs3zBJHG4DxBCMffT0zCq7dBIN4P5qGDgz0bBw9VXfMzP6xkf+KLUKbSoz
nQ54FG5kJdmAEJjvYYZhlzsN6/25KnBoj5KSgY15eUWSeJNsEqiinGuVMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBCLIxMjOm7ZjxDZjK+1Iz0H5KzMB8GA1UdIwQY
MBaAFFrox48WE5euHb0KwyJYT2L7dACXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMt
NDdiY2QzOWMzZDg2LzEvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZDI3YmItZjg1Yy00YmZkLWIxYzMtNDdiY2QzOWMzZDg2
LzEvV3VqSGp4WVRsNjRkdlFyRElsaFBZdnQwQUpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ3HQAFn
T2JVa9V24bNdoM0ZrvhHELt6DCFw3+7tGTxv02yWtIGEyuYIKK6QqTxnswdhcTDn
idjagWz5a7oN4TLNlXvW0QEGrJCBNl9o6V6WrA/mlPx+fmAaoVDYYwl5bJkV+JPo
lZm0qFYQVV69Kotg78Cs37vCpTR1kFtUogMXKasDx54Ye6pL03VXY4VBUYcrKptQ
5QysbC0SDSLoPMDF7+WOYASOIo3WWN9F5EiXEGxJBVLVtblKjjd1SSL8V3taXf8b
i6kK6ZTx8d9kYIP/VCPQ/3aIVNYBXjnhpwRMAtx1CyUGalbqAfT8yt3nsGrKhbYg
ubL4Uv5vxIxAnw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:39:34 2026 by rpki-client