Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File:                     wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier:          4MNPvMgdAC9VE7PKeKY1hSjY8Lod1BrRQz2FadzG4XY=
Subject key identifier:   F9:8E:DD:E8:87:35:3E:3F:76:DC:BA:B3:1A:C4:44:A7:97:B6:D0:CB
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer:       /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial:       019D9A74A2EE7A97A6BAA92F03ADF6A19E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 08:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:28 +0000
Files and hashes:         1: KvzDHgVmpEkdkjHPk99sFJrY1zs.roa (hash: l/TyURMCTytuEA/n9GPaS9YbOV/gxZwZ/TqXXQqrbdc=)
                          2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: L83b6K7ti2ALurk1isYgwARmGyCSBmTg+fhZPyYXpcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:a2:ee:7a:97:a6:ba:a9:2f:03:ad:f6:a1:9e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
        Validity
            Not Before: Apr 17 08:00:28 2026 GMT
            Not After : Apr 18 08:00:28 2026 GMT
        Subject: CN=f98edde887353e3f76dcbab31ac444a797b6d0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:81:d3:d3:d1:f1:2d:0c:03:e8:00:d2:e1:47:
                    db:76:3e:24:5c:41:d9:85:68:50:f3:f5:f7:47:12:
                    52:50:97:90:77:cb:41:9d:7e:4b:66:e6:f5:90:ac:
                    88:8c:af:33:3c:7f:fa:cc:a5:3a:f8:db:e6:e6:d5:
                    4a:b7:09:37:2f:fc:fc:fb:07:78:20:da:6b:44:0c:
                    97:23:79:dc:0d:98:07:a5:82:81:13:0e:fd:79:44:
                    0b:11:65:91:1e:48:d2:24:13:8b:4f:b1:4c:97:98:
                    22:03:71:93:27:43:36:25:e4:39:d4:5d:cf:b9:99:
                    49:65:23:0f:d6:34:1b:3d:28:9d:93:64:40:0a:ca:
                    88:13:9b:05:55:6f:a9:c0:93:68:0e:b6:27:8f:e4:
                    d1:db:cc:b6:85:5e:a3:a4:9d:46:5e:3b:50:be:9c:
                    1c:1e:9d:13:f5:7a:15:ff:88:93:30:7e:57:ff:38:
                    14:fa:4f:5a:60:e3:d1:af:0d:0e:f8:b0:6a:9c:1c:
                    93:af:42:d9:7b:d9:30:58:90:97:37:7c:1d:8f:cd:
                    d2:8b:3a:2a:59:35:8c:c5:9c:08:6d:e2:87:20:9f:
                    3f:bf:ef:2b:fd:7f:36:ab:4a:ab:70:c9:a2:81:bf:
                    7e:92:ca:61:70:7f:40:87:aa:22:87:49:37:15:98:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8E:DD:E8:87:35:3E:3F:76:DC:BA:B3:1A:C4:44:A7:97:B6:D0:CB
            X509v3 Authority Key Identifier:
                keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d6:be:6c:56:4c:cd:d4:f5:f2:07:cb:c5:76:71:f3:38:b2:
         8b:aa:f9:27:5f:8b:8b:69:ef:35:ca:da:8c:02:56:c4:bc:f5:
         f6:08:fd:32:1d:8d:85:bc:27:bc:63:b7:a2:35:bb:58:6c:54:
         e6:2d:b3:d3:2c:5e:d2:f3:91:a0:1a:5f:79:02:f1:28:aa:68:
         a6:e8:48:d5:37:09:54:19:f7:26:ad:f0:b1:e6:9e:5a:f9:3e:
         20:b3:fa:5d:4a:20:01:7c:8f:94:fa:eb:77:0b:85:c7:9c:b0:
         6e:79:f0:26:dc:56:2b:2c:20:1b:f2:8e:02:0d:d2:71:04:ca:
         25:ba:b2:f8:6f:77:30:ab:2e:69:ed:af:29:d8:f5:b9:4b:c9:
         2b:65:76:7a:fd:80:8f:5f:b9:8e:5d:69:7d:c1:30:3e:be:8f:
         75:5f:99:a5:a3:d3:75:69:15:e1:c8:2d:4e:62:5e:a5:0f:67:
         e7:c1:85:16:b7:e9:80:ce:20:e3:d8:ac:72:7a:9f:74:23:a4:
         fb:09:9b:39:2c:28:dd:44:a4:33:be:c3:ed:8a:1b:13:5f:e3:
         79:3b:25:09:0a:51:30:6f:62:9a:3a:d9:82:11:f4:b7:46:d1:
         68:9e:57:20:85:d5:e2:c2:bb:75:54:7e:a3:7e:02:10:c8:ab:
         c3:30:da:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:23:31 2026 by rpki-client