Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File:                     wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier:          7KM8fxfJ9iFPypCW0UQO+CcAeE/qhuBgq/A2XGKtr6Q=
Subject key identifier:   73:9C:8F:EB:38:E9:59:3F:46:AF:D2:27:2D:79:6F:7B:05:25:15:0F
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer:       /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial:       019D9AE36B5C4F9F9757BBEA209CEE0AE8FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number:          0B38
Signing time:             Fri 17 Apr 2026 10:01:28 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:28 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:28 +0000
Files and hashes:         1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: CwLgQyG37YGEjTLIpOiauC7zC228hN04jioOFHbtw44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:6b:5c:4f:9f:97:57:bb:ea:20:9c:ee:0a:e8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
        Validity
            Not Before: Apr 17 10:01:28 2026 GMT
            Not After : Apr 18 10:01:28 2026 GMT
        Subject: CN=739c8feb38e9593f46afd2272d796f7b0525150f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fe:94:92:4c:2f:90:be:c1:30:73:b5:51:d3:
                    4e:af:78:dd:dc:e7:7a:cb:30:70:e8:51:47:e2:fc:
                    5b:84:29:c2:15:67:b1:f3:7d:a9:58:b3:53:34:d0:
                    28:6e:d2:aa:b0:d4:9a:d8:0d:ca:ac:e3:e8:d2:d2:
                    52:bd:d2:a7:11:47:f4:a4:28:b2:7e:1c:82:79:ee:
                    48:e5:05:01:71:e7:c7:72:43:74:91:91:f9:82:ea:
                    ab:35:49:f1:2b:d5:45:5d:03:34:61:cb:df:6c:6a:
                    ac:77:12:6d:af:83:37:0e:e5:91:22:2a:18:53:dc:
                    b1:e5:26:c1:e7:68:10:8e:4e:3a:e6:f4:9c:2e:78:
                    d6:19:38:0e:3a:ec:8e:f0:e7:52:32:92:3f:7c:62:
                    a6:68:f2:e5:97:bd:ab:0e:88:f8:ed:1b:be:fe:f6:
                    6c:41:36:55:47:8f:69:a0:26:73:15:fe:aa:3f:7c:
                    2b:ed:2c:e6:a8:2f:12:ef:ee:c0:81:df:eb:25:db:
                    92:84:cd:cc:35:9d:fe:e5:cb:6b:22:06:fb:43:ce:
                    03:91:81:5a:a1:9d:84:92:99:a0:be:e7:39:69:a3:
                    8d:e4:b2:81:85:cc:2a:b2:65:da:23:b6:c0:99:94:
                    2d:f7:36:be:98:0a:66:a5:a4:5e:42:de:67:f2:63:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9C:8F:EB:38:E9:59:3F:46:AF:D2:27:2D:79:6F:7B:05:25:15:0F
            X509v3 Authority Key Identifier:
                keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:07:7d:7d:2e:be:b2:ff:8a:99:8b:b7:64:95:f1:31:3a:9a:
         32:44:b8:ad:d6:fd:03:53:a2:64:c0:9c:25:61:49:b6:eb:42:
         9b:d8:35:3d:b4:a3:7b:e9:87:15:74:7d:f0:42:dc:7d:e9:7a:
         38:0c:99:00:41:b0:62:8d:b2:0c:c6:8e:32:07:8a:01:fa:71:
         ee:2b:27:0f:61:87:26:e2:96:b3:69:d5:97:d4:19:eb:8d:fa:
         c6:de:0a:34:be:7c:52:a7:1f:9e:8b:bc:ad:9b:3e:e4:c0:c0:
         3f:9e:a3:45:e5:7c:67:bb:d9:ee:24:c1:f9:45:71:32:07:94:
         d7:95:40:7c:8f:93:56:33:0b:17:a7:7f:de:b4:18:dd:2a:36:
         25:92:89:f4:14:de:ce:63:67:b1:f8:0d:7f:7b:0b:90:8c:9b:
         c7:e6:f4:88:8e:6a:dc:ee:3c:8b:15:f2:68:2b:dd:6f:ff:8b:
         4c:76:aa:8e:85:5f:f3:77:f7:8d:6c:98:78:b0:c2:ed:6c:ab:
         0d:98:42:22:b8:0d:c5:46:19:fd:9f:43:a7:07:8e:74:17:89:
         88:7c:ad:fa:f4:9a:8e:c5:32:79:d3:bb:29:c9:86:05:1a:58:
         e0:e2:08:70:c7:32:e3:52:e3:a2:09:c6:4f:f6:98:a4:7e:d9:
         3e:f6:3d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:48 2026 by rpki-client