Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
File:                     wlxF_6SjEkYMAP_t4y1NxB_S988.mft (raw, json)
Hash identifier:          wP+oEDZgeMbSoRQSLB9rgQkxPfOWL/n6x6+ZPGaW3Kc=
Subject key identifier:   93:D4:57:7E:00:33:51:7A:20:87:C3:13:FE:08:4E:22:1C:48:02:37
Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF
Certificate issuer:       /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
Certificate serial:       019DA59DB9FDFF17405EA21F6E991CC4D350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
Manifest number:          014D
Signing time:             Sun 19 Apr 2026 12:01:10 +0000
Manifest this update:     Sun 19 Apr 2026 12:01:10 +0000
Manifest next update:     Mon 20 Apr 2026 12:01:10 +0000
Files and hashes:         1: pwR2uuhLQb704CaTl-JhUr6tQUw.roa (hash: WST6jplxdqOcMqOOJtSBgG40d9NpmMZJxxHB0hC7zBU=)
                          2: wlxF_6SjEkYMAP_t4y1NxB_S988.crl (hash: G0ayJcxii/DBt85WKoniiZ3qP8GqPGv2+PzSkC6eJBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:9d:b9:fd:ff:17:40:5e:a2:1f:6e:99:1c:c4:d3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf
        Validity
            Not Before: Apr 19 12:01:10 2026 GMT
            Not After : Apr 20 12:01:10 2026 GMT
        Subject: CN=93d4577e0033517a2087c313fe084e221c480237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:01:2f:cb:18:91:9c:a0:fa:9f:44:5a:8f:8e:
                    d7:71:42:b0:df:9c:56:ae:81:b1:f8:59:93:68:98:
                    86:23:4b:d8:c9:54:da:3f:7a:e0:12:15:7f:d2:f2:
                    08:34:12:f7:f6:70:87:63:91:5a:f6:9b:bb:f5:d1:
                    b5:98:34:91:d7:da:4c:af:32:73:0a:95:a7:8f:be:
                    1f:29:6a:8a:3b:ce:73:53:d9:aa:50:a1:35:d5:5d:
                    13:70:20:7d:76:84:a1:ed:fa:bb:05:de:4a:9c:1d:
                    ee:18:7b:82:9e:71:bb:28:a3:ef:29:c2:47:a0:09:
                    0e:4c:f2:ce:ed:1a:72:ee:ac:cf:06:6c:00:8d:3e:
                    b5:fa:f1:5a:09:fe:74:b9:c5:9a:44:41:03:54:e5:
                    1b:15:87:0f:38:46:37:ec:11:6b:7b:b2:68:4f:0c:
                    f6:84:5d:7c:49:54:fb:ce:bd:cd:28:f9:fc:56:ca:
                    92:2d:30:81:96:68:bc:22:fc:3a:29:eb:e3:4e:8f:
                    b6:b1:0b:bc:c7:58:97:39:fa:31:e3:88:e5:37:5f:
                    ae:07:0c:24:67:55:68:51:12:5e:d4:29:0f:96:39:
                    7c:9f:ab:ee:39:b7:ad:50:62:61:33:8c:ef:64:01:
                    a6:1e:d5:ce:ff:5f:66:1c:1f:32:f8:7c:f6:01:3b:
                    df:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D4:57:7E:00:33:51:7A:20:87:C3:13:FE:08:4E:22:1C:48:02:37
            X509v3 Authority Key Identifier:
                keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:24:b9:87:b1:4c:27:a8:f1:04:96:2a:b7:99:a4:0e:3d:8b:
         ef:f9:c9:47:68:66:93:88:8f:b7:2b:b2:27:9e:fc:60:d5:69:
         d8:f5:95:3a:53:84:86:1e:c6:1b:19:67:a1:39:42:9f:be:3f:
         59:cc:ea:8a:28:63:49:4b:45:2e:e4:f3:a7:79:cd:b3:b4:5e:
         8b:1e:54:68:a7:8c:8d:71:ce:a5:be:79:96:63:9b:7e:d6:c8:
         4f:ea:47:62:9e:19:f2:9c:97:1f:51:e4:35:3f:45:df:d8:28:
         c8:71:c8:b4:1d:1a:d9:71:95:f9:22:00:da:b6:6d:19:d2:27:
         f6:bb:0c:1f:10:98:a4:a5:b1:43:5d:4e:c3:e0:b5:aa:04:e8:
         c2:e3:c3:18:31:bb:d8:af:6d:d1:82:0e:97:40:49:17:b5:27:
         b7:a6:32:f0:dd:cf:db:f5:8d:93:a2:92:94:d0:55:53:31:06:
         00:d9:a2:44:20:b6:a0:0b:94:ea:32:b1:74:15:7a:20:2f:35:
         70:20:52:8e:d9:2d:57:a7:12:c8:22:6b:05:66:93:4d:2b:c3:
         2e:41:8e:9a:1f:95:bc:73:f9:3f:ac:3d:21:ef:93:5b:e4:ad:
         9f:e6:71:cc:3e:42:a4:5c:67:d8:dd:50:1f:d1:25:9e:0d:06:
         4b:ca:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:45 2026 by rpki-client