Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
File:                     w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json)
Hash identifier:          yNWi8tE9zcY9jLaX6TPy+PTSHl1MO1OZR19/CH/l+jI=
Subject key identifier:   7A:D3:41:48:0F:1B:91:AE:9D:47:B2:08:DB:97:D4:0D:3A:97:96:85
Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
Certificate issuer:       /CN=c355722b4e8a48240acdf5f337838aa206aa02da
Certificate serial:       019D9A0735FE5BF3B0BFE086DE31D64875AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 06:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:57 +0000
Files and hashes:         1: Pygss5f1ruujkq8WTW7laONkQ2o.roa (hash: 7WHTQ4+Rj6UfUnW2B2kYVMQPC72bm+std85TSgIO/SI=)
                          2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: mHHE4U5D6gkB6EPdIzw+sLMPwepH16pdbx+8YEHE+l8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:35:fe:5b:f3:b0:bf:e0:86:de:31:d6:48:75:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da
        Validity
            Not Before: Apr 17 06:00:57 2026 GMT
            Not After : Apr 18 06:00:57 2026 GMT
        Subject: CN=7ad341480f1b91ae9d47b208db97d40d3a979685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bf:57:74:2b:81:da:02:75:6f:56:13:c3:27:
                    9a:d8:eb:aa:55:18:0f:22:5a:42:53:68:19:ce:f1:
                    bb:3e:5b:0f:8b:6a:47:4a:cd:2c:98:b1:73:90:19:
                    84:08:27:60:dc:b4:3d:d6:89:4e:48:d5:ee:d7:9a:
                    ec:a2:aa:b8:00:4e:52:c6:ac:73:87:8f:f1:dd:be:
                    d1:1d:2c:e6:77:0d:a2:a9:6e:dc:1f:bf:38:f0:84:
                    54:38:d0:1f:b4:95:3a:99:67:36:93:d7:1c:7d:48:
                    5b:ba:92:49:da:12:13:b6:f9:a8:08:da:53:59:45:
                    48:e0:d2:75:fa:59:52:a6:df:af:14:7d:20:cd:ab:
                    93:40:cf:50:1c:31:34:e6:02:c1:32:c5:5f:13:30:
                    55:7e:cc:0a:d7:28:29:02:4c:e0:02:c7:46:9f:95:
                    44:85:e3:86:bb:d5:c2:39:a5:fa:60:23:8a:8e:ab:
                    21:1f:92:bc:50:09:dc:2b:78:56:74:5b:3c:43:5f:
                    4c:42:97:52:0c:cb:6b:6f:26:58:91:40:41:97:f7:
                    bb:9d:af:6f:b7:4e:3e:7b:81:2d:e5:b5:65:af:4d:
                    eb:7a:4a:6f:6b:96:37:c4:db:df:e9:f2:59:52:58:
                    11:29:fd:c6:29:0c:fc:34:75:77:50:cf:c1:fb:21:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D3:41:48:0F:1B:91:AE:9D:47:B2:08:DB:97:D4:0D:3A:97:96:85
            X509v3 Authority Key Identifier:
                keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:02:9e:81:4b:da:9b:18:b5:53:7c:e3:fb:44:e0:43:76:6e:
         8c:a3:2f:ae:8f:1a:64:df:f3:d0:ae:da:a4:07:2c:33:d3:b6:
         ed:d8:2c:b3:3c:13:bb:f0:7f:40:e3:c1:2c:8f:00:cc:c9:a7:
         9d:6b:f6:e7:86:1f:17:4c:b2:59:4b:33:a5:fa:26:3a:c1:5f:
         61:e7:be:e0:27:4b:43:1d:18:1c:78:ae:85:9a:87:65:3c:24:
         34:d5:f8:cd:43:21:1f:52:eb:3d:cc:08:6e:a8:83:d8:9b:0e:
         0f:54:a4:ed:63:0a:67:a2:f7:ca:d1:8f:6a:17:92:27:b9:d0:
         97:de:db:c1:dc:5f:db:c8:62:dc:c9:3a:88:1b:8e:b7:a5:97:
         3a:6f:fa:fe:98:13:1c:a0:13:57:42:f5:a8:94:a2:ce:a9:69:
         2d:c4:fb:c6:7b:18:43:36:ad:75:90:b9:ed:55:d7:48:b3:5b:
         22:13:5e:04:ab:99:aa:90:f2:ee:40:3a:d6:8b:f8:7f:d3:96:
         1e:f3:31:e3:7a:3c:91:0c:4e:b7:f1:c3:df:07:2a:8b:a5:6a:
         45:81:ef:82:44:df:bb:ad:47:78:a2:1b:d9:8a:8c:d9:ee:eb:
         c7:97:d6:70:a1:a9:53:0b:2e:a1:65:b9:ba:c9:39:fd:fd:e8:
         55:7f:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:01 2026 by rpki-client