Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
File:                     WXRV68sDv_Ki2XWtQIH5QZusrzU.mft (raw, json)
Hash identifier:          tbU3VL773vZTk0G+7FofCNUQ1fsdH06wakijAPET0pk=
Subject key identifier:   95:73:5B:CB:74:07:9A:59:40:8F:EA:3D:F1:EB:6B:0C:2C:11:C9:C4
Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35
Certificate issuer:       /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
Certificate serial:       019D99CFBF193F6E67F0CE3B1E0EB43F85CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
Manifest number:          03AD
Signing time:             Fri 17 Apr 2026 05:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:22 +0000
Files and hashes:         1: J_yn6Pm9vKNMDRcVwbyp133TknU.roa (hash: mliXlxJfksLfLE++jqaaumKeI12AEMNdDLjQ9GlOQ2M=)
                          2: WXRV68sDv_Ki2XWtQIH5QZusrzU.crl (hash: SATK9od7zaEdoT1K3WZ5b2PaIx8L/FFsLMhnjTVFIKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:bf:19:3f:6e:67:f0:ce:3b:1e:0e:b4:3f:85:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35
        Validity
            Not Before: Apr 17 05:00:22 2026 GMT
            Not After : Apr 18 05:00:22 2026 GMT
        Subject: CN=95735bcb74079a59408fea3df1eb6b0c2c11c9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:1c:33:29:e3:da:a6:9e:1d:a9:ee:d5:e0:
                    48:96:46:c3:26:e5:b3:c5:0a:9a:62:f6:43:ba:ce:
                    54:83:dd:80:7f:45:82:d0:6d:54:c2:39:0e:11:eb:
                    14:27:7b:e5:7e:81:94:97:0c:e9:24:1d:d4:ce:95:
                    68:ab:34:b4:f2:02:d3:45:70:a7:98:a6:fa:a2:92:
                    7b:79:bc:8b:ad:74:29:72:cc:5d:63:38:c3:df:dc:
                    53:22:f6:c4:d9:fd:8e:7e:53:a2:7a:c6:0a:a0:ba:
                    00:ee:70:b2:0d:08:31:85:cf:25:1e:c4:78:db:c3:
                    72:10:40:f3:54:e1:12:5a:f0:f8:94:8a:16:7d:d2:
                    f1:8b:28:5c:18:51:0c:57:a5:da:f6:ba:21:c1:62:
                    09:7e:aa:b9:d3:d0:74:e8:5b:d2:69:52:9c:6a:97:
                    8f:fb:40:29:1b:85:6f:80:46:f8:2f:b2:14:56:12:
                    c5:37:39:9f:e3:78:8c:4c:ac:47:d2:57:d6:a7:1a:
                    de:a6:f0:9b:53:52:6c:25:79:77:c5:d7:da:20:6a:
                    14:f2:cd:0b:48:7c:04:99:27:c0:ba:da:c2:78:06:
                    f7:2c:4b:d3:76:6b:be:ba:f4:81:26:4c:21:e8:6a:
                    54:40:b3:c5:47:68:75:f7:ea:c0:5d:15:25:4e:24:
                    ba:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:73:5B:CB:74:07:9A:59:40:8F:EA:3D:F1:EB:6B:0C:2C:11:C9:C4
            X509v3 Authority Key Identifier:
                keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f2:d1:24:3b:2f:f4:58:26:2e:ff:30:ce:23:9b:a1:06:de:
         66:9b:41:64:1e:b4:b2:c2:3e:a5:75:88:a1:14:89:24:da:59:
         4c:16:b0:7d:b0:c4:04:bc:0e:7e:5d:53:39:c4:6c:13:25:f4:
         a8:ec:52:c7:aa:cf:7d:49:65:bc:37:b2:2a:bb:b2:94:59:f5:
         c4:00:ef:e5:9e:87:9f:2d:18:ea:fc:c5:11:15:a9:b4:a6:2b:
         de:db:6a:94:e3:52:d8:70:71:53:58:ee:51:ac:8d:0b:60:fd:
         96:b4:24:42:a1:3a:ce:aa:1a:21:12:20:de:4f:ae:1c:33:52:
         b9:86:af:d5:97:58:5d:08:06:62:7a:a9:f5:f6:f9:4a:52:11:
         00:82:ca:77:3c:84:82:01:60:ff:ea:83:b7:b6:8f:39:4b:76:
         1f:0b:f0:55:c2:ed:e8:d0:7d:cc:4c:4f:e6:bf:63:69:9b:99:
         01:2d:09:4e:a0:5c:e4:a6:ba:64:bd:6b:1a:d9:c5:e1:61:d4:
         4a:3f:82:10:9f:5b:3d:e1:8c:0c:91:c2:8d:8d:58:84:4e:a6:
         07:c1:19:24:60:7b:e7:82:02:2a:50:61:93:35:b4:f3:18:97:
         1a:6d:1a:21:e9:a2:28:a4:bb:d8:67:f5:b4:61:e0:63:9f:0d:
         bc:3c:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:47:46 2026 by rpki-client