Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File:                     wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier:          y1F/f3fCIW2ix2IcOHPUvTytEDHVssStup/G6Obtus8=
Subject key identifier:   66:BA:12:96:79:BB:56:AB:03:2C:C3:FD:F6:4A:F6:8D:06:2C:AD:A1
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer:       /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial:       019D98508A66CEBD5C4B904ED35A39DF196B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 22:01:48 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:48 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:48 +0000
Files and hashes:         1: 7Y44MOwzJmz5iRw5y_JduCcKKUk.roa (hash: 2vcmpHN+5kJCm/08etkIw8U2CdDO3ehswhHinxrPXXA=)
                          2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: +nbpBfh2VVaBRZOFH4plySyLyW8Xah0vhWkOfZLcg8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:8a:66:ce:bd:5c:4b:90:4e:d3:5a:39:df:19:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
        Validity
            Not Before: Apr 16 22:01:48 2026 GMT
            Not After : Apr 17 22:01:48 2026 GMT
        Subject: CN=66ba129679bb56ab032cc3fdf64af68d062cada1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:36:97:ce:17:57:57:af:e3:fd:bc:6b:fd:
                    05:0c:cb:d3:d5:6e:ee:45:25:e9:67:fe:ef:4b:c2:
                    a0:ce:f6:9a:27:dc:3b:54:00:b4:8f:d0:17:c7:ac:
                    63:8e:ec:d4:7a:08:32:1e:bc:79:2d:1b:23:3a:95:
                    a4:fe:f1:3c:d2:9e:53:c6:b4:ad:7a:b5:7c:40:fb:
                    5c:1d:c5:6d:ab:54:38:2b:af:74:24:72:5e:18:6b:
                    65:cb:16:cc:0b:ab:b6:9f:72:75:81:6f:08:35:9c:
                    0f:e1:fe:89:b6:6b:de:23:06:b4:f2:7a:a6:bc:fe:
                    f4:e5:45:d8:e9:70:06:e1:89:95:58:56:c0:e6:22:
                    de:c1:06:8e:9c:92:cc:cd:24:de:31:43:d6:e7:81:
                    36:c0:cf:bc:e7:b6:f1:a5:6d:67:4c:f6:a6:96:45:
                    58:cf:b3:17:01:c3:3d:a6:de:3b:bc:2e:c7:ad:be:
                    00:8f:2e:2d:0b:c6:67:50:cf:2f:8a:f5:3e:94:1c:
                    35:53:02:fc:2f:0b:08:8e:46:6c:84:7a:dd:52:61:
                    01:d4:e0:90:4b:a0:eb:fc:36:5a:55:9d:d2:f1:04:
                    a4:e0:31:33:20:90:b5:02:8c:7e:61:34:e0:f9:2e:
                    37:80:fa:c3:18:db:7f:0a:48:83:f9:8c:a3:4d:d6:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BA:12:96:79:BB:56:AB:03:2C:C3:FD:F6:4A:F6:8D:06:2C:AD:A1
            X509v3 Authority Key Identifier:
                keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:41:94:17:e0:da:71:67:8e:d9:e1:dd:c4:47:55:7f:7e:a8:
         5e:35:ca:2b:5c:16:cb:6b:aa:ce:6d:a7:8e:e5:71:b0:99:2b:
         e1:e3:da:d6:b2:31:3a:8a:c3:c1:62:15:09:59:a2:27:2d:4c:
         58:d1:84:91:1c:d9:03:c4:4c:1e:fc:d2:d2:24:f6:3d:48:3b:
         0c:43:3e:b2:db:b9:c8:c4:85:2c:81:35:31:c8:9c:7b:02:3f:
         08:ed:2b:cd:92:e0:ef:0c:29:b4:92:43:be:a6:6e:c2:08:93:
         1e:46:6d:c1:7f:41:37:30:d6:65:df:54:60:f6:6c:91:6e:0e:
         39:66:51:9b:05:e7:dc:43:ee:08:c6:eb:41:0b:c0:58:7f:ce:
         67:7f:41:28:16:2f:3a:f8:ca:01:d3:96:45:2c:d3:da:62:dc:
         64:8a:2d:c4:45:43:5d:58:0e:ce:8e:ff:f0:3e:00:35:7d:d5:
         4f:f3:36:3e:58:bb:09:aa:e4:ab:e9:ff:b6:ee:c5:c9:1e:f9:
         7e:1d:cf:dd:bd:84:f7:b1:76:ef:a9:bf:5b:d7:bd:db:1c:93:
         fb:a0:45:2f:2a:ad:8c:9a:24:b1:b3:50:b8:e2:bb:15:6f:03:
         db:88:c1:0e:90:7e:6e:6e:34:f1:4f:83:f2:b8:81:81:26:6a:
         90:87:0f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:36 2026 by rpki-client