Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
File:                     wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft (raw, json)
Hash identifier:          wGPiJSM9f8a5zkxITEACkZJZK0x7zJDxFPRKj4HJRu0=
Subject key identifier:   E5:EA:36:29:6F:05:00:D8:CF:3A:E1:78:62:3D:60:5F:41:76:9A:45
Authority key identifier: C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Certificate issuer:       /CN=c273fff178ed52fd1de7093112423b6417cea2d3
Certificate serial:       019D9D08238CE73C1407142A20D5649DD45C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
Manifest number:          C0
Signing time:             Fri 17 Apr 2026 20:00:49 +0000
Manifest this update:     Fri 17 Apr 2026 20:00:49 +0000
Manifest next update:     Sat 18 Apr 2026 20:00:49 +0000
Files and hashes:         1: euo56ZtX6v5B0AKUx9R-FKNO9EA.roa (hash: w3fmR0eCcrM0dELQMZ8IdSvLZfYhYkLBqG/PpUnPMls=)
                          2: wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl (hash: 3B8JSsOEh5pVaa/86OWrRKD60ntzM2W6dFAm0BiZlIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:08:23:8c:e7:3c:14:07:14:2a:20:d5:64:9d:d4:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Validity
            Not Before: Apr 17 20:00:49 2026 GMT
            Not After : Apr 18 20:00:49 2026 GMT
        Subject: CN=e5ea36296f0500d8cf3ae178623d605f41769a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:27:5d:80:de:b9:87:56:7e:4b:2d:28:8d:
                    bd:3e:77:fc:49:e5:a4:0f:57:b4:bd:48:c2:67:a9:
                    2a:a6:90:00:b8:c3:09:5e:b7:ca:8a:cd:17:77:25:
                    9d:05:d6:19:c5:9e:99:e6:a3:45:e6:a4:94:71:54:
                    9f:d4:5c:1d:dd:5e:25:a4:37:7e:da:d2:79:bc:0b:
                    fe:fe:ef:fc:9c:4a:d8:7f:36:4c:34:32:fb:92:f4:
                    26:bb:c7:71:bb:92:28:e9:59:9e:f8:8d:8e:44:d6:
                    ad:a8:e2:58:a6:98:3c:4c:9e:7a:b7:93:02:b5:51:
                    4a:2e:95:7b:cc:fe:aa:ea:9d:73:03:b4:76:88:d7:
                    c3:bf:e6:c3:ed:43:5b:53:9a:92:c9:0d:ab:ff:10:
                    51:fb:66:fe:17:b3:1b:91:e2:1d:86:4a:b2:dc:e7:
                    87:fb:65:f9:7e:2a:e7:77:d0:4e:e4:d8:99:3a:58:
                    d7:66:35:f9:2f:aa:34:ca:3b:ce:54:ac:31:60:a1:
                    8a:b2:cf:91:2f:6e:43:f0:46:79:a0:0a:3b:e9:68:
                    45:d5:86:cd:1f:1b:24:82:61:5b:3d:ad:1e:66:a1:
                    fb:4f:a2:90:f9:96:cc:cc:d6:b2:46:60:65:53:a7:
                    89:b7:ff:5f:c1:2d:1f:83:c9:f3:4e:91:eb:27:31:
                    53:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EA:36:29:6F:05:00:D8:CF:3A:E1:78:62:3D:60:5F:41:76:9A:45
            X509v3 Authority Key Identifier:
                keyid:C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:4d:75:40:b2:9c:58:a8:da:51:2c:a9:b8:8d:da:36:64:a0:
         0f:1e:65:79:11:88:ff:bb:a7:a9:98:f6:45:18:b1:a6:f6:bd:
         55:dc:69:ae:97:7f:23:ea:61:09:98:be:4e:6c:ab:43:07:37:
         c2:8c:b7:1f:53:33:11:f4:af:50:bf:45:cf:67:95:8c:09:df:
         b7:fd:20:20:77:96:22:8d:5c:fd:ea:2c:5b:7f:f2:8b:33:e8:
         27:45:e2:1f:e0:d5:7b:9f:5f:27:01:d2:03:66:10:0e:48:c8:
         5a:5a:e5:80:54:32:c2:38:92:72:7f:4b:7e:d2:2d:df:33:81:
         11:7e:07:86:ec:dc:b3:66:db:07:8e:53:69:29:80:f1:a3:59:
         64:bc:8d:0f:af:fa:db:cc:1a:f6:71:28:25:6d:5c:d5:0d:d2:
         56:df:65:e3:ac:60:93:ee:1a:6a:2c:7e:35:75:db:04:40:60:
         f9:72:7d:51:f3:1a:bf:62:7b:59:ae:b9:70:65:f4:89:2a:c2:
         2c:ad:98:dc:57:1f:02:92:4c:e3:ba:9f:a0:2d:b5:96:3b:92:
         52:18:44:9a:b7:18:e8:b7:2c:b9:29:a9:ea:ef:bc:81:bb:f8:
         93:24:e1:98:00:fa:99:49:44:de:9a:09:53:48:c2:a6:28:26:
         b5:c3:86:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:51:48 2026 by rpki-client