Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File:                     pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier:          X4IiicMPnhd60AjgDpk3RjZ25wb+2B8gii4l4jB+vxk=
Subject key identifier:   65:45:26:C7:40:3E:9D:CA:48:96:39:13:AC:56:60:DE:63:AE:E5:C9
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer:       /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial:       019D98F4426245E588F3031240315C305680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 01:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:37 +0000
Files and hashes:         1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: f1fPjyM+BUOGG1l3q+7qSzqFSKmRLOZsFj9/oIVP4ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:42:62:45:e5:88:f3:03:12:40:31:5c:30:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
        Validity
            Not Before: Apr 17 01:00:37 2026 GMT
            Not After : Apr 18 01:00:37 2026 GMT
        Subject: CN=654526c7403e9dca48963913ac5660de63aee5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:2e:42:a1:cb:67:4c:46:37:6f:56:14:30:
                    1e:f7:ea:49:2f:aa:23:2f:f2:02:28:b2:8e:33:03:
                    1e:b3:96:f8:fe:b9:d1:1f:57:f3:8e:1b:a6:c9:dd:
                    22:28:99:cd:0b:7d:8e:06:14:d2:94:11:7d:ab:5f:
                    7f:05:d3:73:55:50:eb:72:48:b3:20:15:88:8f:e4:
                    30:3e:44:64:14:06:cd:a4:3e:1e:44:d8:be:b8:b9:
                    87:79:6e:8b:49:4f:23:d1:ef:61:27:eb:8d:73:f3:
                    04:a4:db:96:6c:c1:c2:6d:b1:34:b9:c6:6a:b3:95:
                    9e:6c:05:3e:f6:17:bb:97:84:74:27:6b:6a:c3:a5:
                    34:bc:5a:b6:3f:a7:09:0d:10:45:d1:e8:47:87:3a:
                    7a:ed:3a:81:f8:13:c7:58:76:1e:eb:07:35:64:bb:
                    37:9f:ce:7a:44:3b:f5:78:b3:03:60:5e:b5:42:8d:
                    93:c5:7d:ea:cc:4c:7f:70:dc:47:85:1f:29:6b:2e:
                    8a:e7:e0:76:ae:ad:b9:b4:13:51:00:6c:d0:de:3b:
                    33:cf:b8:57:e4:cd:2f:7e:d2:55:f1:0e:28:40:bf:
                    22:28:dc:de:69:5a:06:b2:e8:b4:03:a0:e7:ae:42:
                    44:e3:c4:d6:28:6f:c2:12:2c:af:aa:2c:cc:be:66:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:45:26:C7:40:3E:9D:CA:48:96:39:13:AC:56:60:DE:63:AE:E5:C9
            X509v3 Authority Key Identifier:
                keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:af:c8:48:d7:71:d3:f2:ce:82:ea:4c:0a:25:a1:b2:34:f6:
         ed:64:80:82:5f:22:f7:5e:d8:45:1a:5a:e2:d7:37:d7:cd:2c:
         9c:36:95:bd:66:2d:7d:67:0c:e7:cb:fb:af:70:91:f2:17:7f:
         ab:6d:e0:e3:4d:dc:3f:a8:5d:95:08:63:0c:e4:7e:74:08:c5:
         f1:53:b1:2f:e6:35:6e:97:9a:ff:64:1f:0e:52:0f:c6:a4:bb:
         90:e1:7f:97:45:b2:d0:fd:0f:2e:d5:1b:e7:e8:83:88:46:4d:
         15:81:45:45:75:7e:af:5f:04:33:aa:6b:77:1f:a4:68:eb:8c:
         83:7b:b6:5b:4c:56:51:83:28:2c:81:26:da:1b:99:cf:f2:4e:
         94:77:89:a7:40:77:45:bf:09:92:32:9c:5a:f2:f9:0d:eb:cf:
         ba:7f:b5:4b:f6:1e:cd:a2:0e:f8:84:ac:b2:42:51:8d:41:1a:
         54:1f:5b:62:d6:31:1c:c4:96:21:87:4a:2b:01:b6:6d:97:ea:
         aa:72:79:f0:47:f7:ad:c5:ca:3e:b0:cd:ce:76:6f:7e:ec:d8:
         a5:5c:62:fe:33:b8:80:50:cd:6c:d0:93:fe:d6:ea:c1:e7:bb:
         62:c4:d2:8b:81:91:d2:26:72:54:e7:d8:2b:88:a0:63:b3:69:
         26:ab:c0:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9EJiReWI8wMSQDFcMFaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWM3ZmZkNjAzZGExNDg5MjI4MGIxODM3YzNhMDM3NzYz
NTJkNTQwHhcNMjYwNDE3MDEwMDM3WhcNMjYwNDE4MDEwMDM3WjAzMTEwLwYDVQQD
Eyg2NTQ1MjZjNzQwM2U5ZGNhNDg5NjM5MTNhYzU2NjBkZTYzYWVlNWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzEuQqHLZ0xGN29WFDAe9+pJL6oj
L/ICKLKOMwMes5b4/rnRH1fzjhumyd0iKJnNC32OBhTSlBF9q19/BdNzVVDrckiz
IBWIj+QwPkRkFAbNpD4eRNi+uLmHeW6LSU8j0e9hJ+uNc/MEpNuWbMHCbbE0ucZq
s5WebAU+9he7l4R0J2tqw6U0vFq2P6cJDRBF0ehHhzp67TqB+BPHWHYe6wc1ZLs3
n856RDv1eLMDYF61Qo2TxX3qzEx/cNxHhR8pay6K5+B2rq25tBNRAGzQ3jszz7hX
5M0vftJV8Q4oQL8iKNzeaVoGsui0A6DnrkJE48TWKG/CEiyvqizMvmbpbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVFJsdAPp3KSJY5E6xWYN5jruXJMB8GA1UdIwQY
MBaAFKXsf/1gPaFIkigLGDfDoDd2NS1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUt
N2RiMjBlNmZjMTFkLzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUtN2RiMjBlNmZjMTFk
LzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq/ISNdx
0/LOgupMCiWhsjT27WSAgl8i917YRRpa4tc3180snDaVvWYtfWcM58v7r3CR8hd/
q23g403cP6hdlQhjDOR+dAjF8VOxL+Y1bpea/2QfDlIPxqS7kOF/l0Wy0P0PLtUb
5+iDiEZNFYFFRXV+r18EM6prdx+kaOuMg3u2W0xWUYMoLIEm2huZz/JOlHeJp0B3
Rb8JkjKcWvL5DevPun+1S/YezaIO+ISsskJRjUEaVB9bYtYxHMSWIYdKKwG2bZfq
qnJ58Ef3rcXKPrDNznZvfuzYpVxi/jO4gFDNbNCT/tbqwee7YsTSi4GR0iZyVOfY
K4igY7NpJqvAxw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:30 2026 by rpki-client