Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
File:                     wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json)
Hash identifier:          fGeXqW3yWh/3LoQUPoHfe597YBugQUyaLH83Xb+hT+g=
Subject key identifier:   22:B3:EC:1D:05:58:84:C4:C7:AA:A4:D6:38:BB:A5:0E:4C:17:55:92
Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5
Certificate issuer:       /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
Certificate serial:       019DA3417DC3DFE6507B8177167D575665A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
Manifest number:          18C3
Signing time:             Sun 19 Apr 2026 01:01:11 +0000
Manifest this update:     Sun 19 Apr 2026 01:01:11 +0000
Manifest next update:     Mon 20 Apr 2026 01:01:11 +0000
Files and hashes:         1: ONtLdxm2tPCgNG6apw05G9CfJl4.roa (hash: GtpvzkZjqYfxcugYhiiM43AgTEuXOvMKvTUhpVcadjY=)
                          2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: KRJkADVEiEGqCbQN7pmWbmO58VHq4eCjepT/5O/ZuJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:7d:c3:df:e6:50:7b:81:77:16:7d:57:56:65:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
        Validity
            Not Before: Apr 19 01:01:11 2026 GMT
            Not After : Apr 20 01:01:11 2026 GMT
        Subject: CN=22b3ec1d055884c4c7aaa4d638bba50e4c175592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:c4:17:64:0a:ad:bc:8f:22:9f:40:3b:f4:
                    87:c1:c6:f8:16:88:4b:6d:b0:78:b9:35:2c:4d:6a:
                    57:ae:62:67:d3:45:91:36:32:e8:d7:e6:39:2f:26:
                    b3:ab:ae:12:61:57:95:8e:0f:2e:16:e4:9d:30:5f:
                    09:3a:09:0b:31:ec:43:32:b4:b5:55:3e:d6:fd:98:
                    3f:a6:d4:56:bb:17:66:14:5e:55:81:b3:ba:b4:e0:
                    49:a7:62:73:98:cf:e8:ec:60:5f:14:58:bc:a6:d0:
                    86:d7:5f:6c:21:89:8f:9f:7e:a5:58:92:68:55:14:
                    fd:35:9f:ce:0d:ec:1d:f6:4a:ec:59:b8:88:0d:78:
                    ff:93:3e:12:22:3b:3b:7e:10:ad:d0:9e:70:d3:24:
                    62:80:e8:c5:28:73:7a:0f:73:59:80:47:f5:b1:0f:
                    59:66:e5:fb:9e:af:85:12:33:dc:4e:43:47:57:3a:
                    73:a3:e1:bb:8f:ad:9c:3e:59:80:93:a5:11:e6:22:
                    ed:66:3d:ec:5d:60:75:ba:a5:1d:93:96:3e:3b:95:
                    94:7b:ef:60:a1:7f:3b:b0:b8:51:10:9b:d6:18:20:
                    70:d8:5a:c3:2d:2b:db:29:29:f1:e7:52:df:d7:4f:
                    99:e7:14:c5:7d:41:e1:d8:d5:ef:76:52:7e:65:58:
                    2e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B3:EC:1D:05:58:84:C4:C7:AA:A4:D6:38:BB:A5:0E:4C:17:55:92
            X509v3 Authority Key Identifier:
                keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:01:69:b3:d9:e1:b0:6c:5e:bf:98:f1:68:ea:34:bc:f2:d7:
         23:1f:86:e9:be:69:42:14:7c:cf:76:72:1b:09:40:81:7f:32:
         71:c9:96:21:af:ef:01:c7:f6:52:d5:fa:19:9c:4b:bc:c0:bf:
         a1:aa:e8:7a:ed:71:1f:54:91:b3:22:28:63:56:08:43:cd:8d:
         e5:99:f6:b5:c1:8a:9d:b2:0b:9b:ac:fc:88:4f:9f:49:ff:f5:
         6f:91:21:55:0a:c0:4f:b1:0f:18:79:19:6f:ab:c4:d6:05:02:
         ca:2b:aa:61:65:f2:dd:07:59:a2:6f:4e:01:45:09:61:4e:49:
         9d:ac:9f:40:b4:be:96:1e:77:7d:ff:25:bf:d5:6a:6f:00:f6:
         8c:95:d1:54:ea:dc:48:22:67:6f:7d:f2:9a:85:d1:66:63:6a:
         17:c9:a9:83:b4:ce:97:38:aa:4f:ee:1a:7e:e1:49:13:4b:be:
         c0:10:ec:db:e1:64:d0:07:9a:f2:5c:ef:f9:47:b0:a3:01:4b:
         be:7a:77:fb:74:e7:59:ac:90:6e:8d:6f:57:61:96:ff:1c:50:
         e7:06:4f:52:b7:d2:73:9e:36:57:26:b8:bb:47:47:48:7f:4c:
         00:ee:3f:52:4c:a0:d0:f9:a7:a9:6b:32:c3:78:e1:ed:c9:28:
         4f:9a:0e:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jQX3D3+ZQe4F3Fn1XVmWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZWExZGRiYTRjYmQzY2I1N2VjODYwZDg1ZmY0ZmY5MzAx
YWZjZTUwHhcNMjYwNDE5MDEwMTExWhcNMjYwNDIwMDEwMTExWjAzMTEwLwYDVQQD
EygyMmIzZWMxZDA1NTg4NGM0YzdhYWE0ZDYzOGJiYTUwZTRjMTc1NTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrvEF2QKrbyPIp9AO/SHwcb4FohL
bbB4uTUsTWpXrmJn00WRNjLo1+Y5Lyazq64SYVeVjg8uFuSdMF8JOgkLMexDMrS1
VT7W/Zg/ptRWuxdmFF5VgbO6tOBJp2JzmM/o7GBfFFi8ptCG119sIYmPn36lWJJo
VRT9NZ/ODewd9krsWbiIDXj/kz4SIjs7fhCt0J5w0yRigOjFKHN6D3NZgEf1sQ9Z
ZuX7nq+FEjPcTkNHVzpzo+G7j62cPlmAk6UR5iLtZj3sXWB1uqUdk5Y+O5WUe+9g
oX87sLhREJvWGCBw2FrDLSvbKSnx51Lf10+Z5xTFfUHh2NXvdlJ+ZVgulQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKz7B0FWITEx6qk1ji7pQ5MF1WSMB8GA1UdIwQY
MBaAFMDqHduky9PLV+yGDYX/T/kwGvzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEt
M2NmZDZjM2ZkY2E0LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEtM2NmZDZjM2ZkY2E0
LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwFps9nh
sGxev5jxaOo0vPLXIx+G6b5pQhR8z3ZyGwlAgX8yccmWIa/vAcf2UtX6GZxLvMC/
oaroeu1xH1SRsyIoY1YIQ82N5Zn2tcGKnbILm6z8iE+fSf/1b5EhVQrAT7EPGHkZ
b6vE1gUCyiuqYWXy3QdZom9OAUUJYU5JnayfQLS+lh53ff8lv9VqbwD2jJXRVOrc
SCJnb33ymoXRZmNqF8mpg7TOlziqT+4afuFJE0u+wBDs2+Fk0Aea8lzv+UewowFL
vnp3+3TnWayQbo1vV2GW/xxQ5wZPUrfSc542Vya4u0dHSH9MAO4/Ukyg0PmnqWsy
w3jh7ckoT5oOMw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:13 2026 by rpki-client