Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
File:                     wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json)
Hash identifier:          wcr7dcqfcS3JHTK/e0fxI+0VKqIHSljkPA67tfQqjYQ=
Subject key identifier:   DA:3B:BC:2C:68:0B:03:FA:62:A8:6F:4A:7B:38:AE:01:07:3A:E6:06
Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B
Certificate issuer:       /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
Certificate serial:       019D9998DB0CD276FA8FC3F5232411B24E20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
Manifest number:          18BE
Signing time:             Fri 17 Apr 2026 04:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:24 +0000
Files and hashes:         1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: GjHy58YuRniNLVrQnmKPG4p26UsOa6yzA1HeHXnW/zI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:db:0c:d2:76:fa:8f:c3:f5:23:24:11:b2:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
        Validity
            Not Before: Apr 17 04:00:24 2026 GMT
            Not After : Apr 18 04:00:24 2026 GMT
        Subject: CN=da3bbc2c680b03fa62a86f4a7b38ae01073ae606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:f2:15:c7:8d:0d:d1:ca:63:37:a9:62:a7:
                    e3:a0:4b:be:75:61:37:c3:f4:98:9f:7b:4b:b4:47:
                    3d:3e:eb:e0:6b:6c:e3:2f:56:f5:50:3a:bf:72:8c:
                    97:17:1c:52:32:6a:aa:67:45:2a:19:47:10:9e:7a:
                    36:4c:bb:7c:98:c0:08:8a:5f:ce:d2:9a:07:c6:14:
                    de:4d:cf:72:3d:4c:ac:58:0a:82:48:24:2a:42:ab:
                    52:94:0e:fb:22:9f:38:75:ce:a9:a2:a4:2f:94:4c:
                    9d:eb:0d:cd:f4:5b:5c:01:cd:f6:b9:93:f5:63:ac:
                    a5:53:8f:ec:7a:8d:48:75:e1:6f:86:b9:9e:87:c8:
                    24:ae:c0:94:24:66:e9:15:f8:fa:cf:80:35:f7:fb:
                    d3:d3:9b:f6:93:ce:46:1d:59:4e:76:6a:89:04:b0:
                    3a:9d:a7:8e:57:dd:4b:86:67:b5:a6:76:64:97:7f:
                    52:36:f4:9b:23:07:f2:29:06:2e:16:99:f2:61:df:
                    4e:84:4d:79:d3:5e:bc:86:4c:97:58:a9:8c:1e:c6:
                    80:eb:02:28:ce:0c:70:8b:bc:6d:7c:30:39:7d:d5:
                    42:f6:b0:42:c9:54:d9:ce:7f:77:bc:30:6d:04:1e:
                    a7:fe:f4:09:e0:92:75:99:2b:94:78:00:c5:e5:d0:
                    b0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3B:BC:2C:68:0B:03:FA:62:A8:6F:4A:7B:38:AE:01:07:3A:E6:06
            X509v3 Authority Key Identifier:
                keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:95:0e:75:62:6a:0f:37:89:32:aa:69:5b:9c:e0:a8:2f:35:
         dc:d9:16:e8:40:90:66:d4:1a:ac:5b:dd:0f:8b:a8:7e:e6:27:
         27:89:9c:66:9a:97:4d:4c:6c:08:ba:d5:b2:f8:81:99:b7:fd:
         23:5c:f2:20:bf:a4:a5:25:35:3e:bf:db:67:2b:a4:6c:76:87:
         0f:6e:5b:cb:dd:d5:1c:a5:c3:f9:dc:44:86:dc:65:12:00:f6:
         c4:82:7e:22:a4:24:81:22:09:fe:8d:41:53:88:13:1f:e5:9b:
         06:52:4e:47:ba:a5:d4:f0:05:ca:9f:17:fc:ad:a8:2f:25:c1:
         f0:c6:60:63:32:7f:b0:98:99:53:14:4a:78:53:22:2e:ee:89:
         d7:66:a4:c1:a2:36:64:c7:48:f9:dd:57:f0:3e:11:df:6c:ac:
         5e:3c:7e:d6:aa:74:51:e0:52:f3:97:97:e9:b6:54:37:66:75:
         c6:b6:a1:89:0c:35:12:ba:16:ea:5c:bd:ea:7f:89:5c:52:d3:
         59:23:37:ad:b6:3b:29:a6:3e:f8:b6:66:c5:da:d1:59:dd:65:
         c6:ab:64:90:19:af:67:e6:30:1e:8e:ef:26:8c:8e:82:2f:44:
         3b:86:3c:79:b6:bc:6d:31:0e:59:9e:18:75:fe:c2:e7:cb:fe:
         c6:ca:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:18:07 2026 by rpki-client