Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File:                     wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier:          TbCyeZPno9qQJGFQ72R/IIwn6yXuNoZvCSj+grwkr38=
Subject key identifier:   11:22:85:C6:06:54:98:E8:52:A8:BB:83:18:84:4A:5F:37:14:3D:E8
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer:       /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial:       019D9BBE57F49BD41D1F4C2FE5C1EE3D4051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number:          07C6
Signing time:             Fri 17 Apr 2026 14:00:35 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:35 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:35 +0000
Files and hashes:         1: IJ2P19IcEVD5TXJ_fPVhgYBm_qY.roa (hash: N2VSLUJTgIas4vbaZK4n5fSPJQ+7roJjvsDns30p6Kc=)
                          2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: CalMhNjFJlfIDXZD92rY0G95xZUkMFhA05R3Qz7a1Yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:57:f4:9b:d4:1d:1f:4c:2f:e5:c1:ee:3d:40:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
        Validity
            Not Before: Apr 17 14:00:35 2026 GMT
            Not After : Apr 18 14:00:35 2026 GMT
        Subject: CN=112285c6065498e852a8bb8318844a5f37143de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:ba:83:28:02:ea:d0:f3:a2:e9:06:7a:39:
                    a5:eb:29:7f:48:85:ea:a9:f5:0a:69:78:05:80:b0:
                    87:48:41:bc:e2:07:a5:35:ca:ab:0c:4a:65:c9:03:
                    c2:54:71:8f:17:a6:6e:a0:c3:43:e7:9d:3c:16:ae:
                    66:95:63:98:d3:49:eb:ac:cf:f2:9f:19:37:62:9f:
                    b7:65:b7:76:a8:6c:09:9c:0d:19:d2:95:dc:ab:65:
                    1f:ff:82:7e:0f:cd:ab:64:b6:ff:1c:c1:04:bd:4a:
                    31:c0:37:6b:86:29:28:e3:0d:c1:bb:50:79:e7:4b:
                    8d:d9:9d:a6:4b:08:22:2b:8c:c3:53:9d:9c:06:f0:
                    a2:46:eb:71:9c:f2:dd:30:ec:b5:15:3c:e8:b9:a3:
                    b2:03:a9:fa:eb:a8:be:2f:fd:25:a3:8e:15:4c:bd:
                    d3:af:3f:34:c3:5e:c3:e3:7b:e7:1b:2a:01:99:61:
                    6a:a5:ca:bc:99:d1:e3:52:3f:ac:36:e8:fa:c2:e3:
                    cb:4b:e5:8b:ee:60:a8:d4:f3:ba:44:cc:d9:ba:04:
                    2d:e3:3c:72:4a:2d:4f:a2:e4:4c:cb:20:d5:b4:d2:
                    06:98:88:66:89:b4:05:21:20:1f:02:41:88:48:9b:
                    0c:f8:b0:19:a2:c2:f4:e6:07:f6:94:14:86:2a:4d:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:22:85:C6:06:54:98:E8:52:A8:BB:83:18:84:4A:5F:37:14:3D:E8
            X509v3 Authority Key Identifier:
                keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a9:d8:3b:c6:c0:92:71:74:f8:2e:1e:01:d3:13:9a:16:b8:
         66:48:41:4c:4d:41:0f:81:e1:82:79:b3:ef:72:af:1b:55:59:
         4e:3b:9a:58:18:ee:3d:bc:8b:f1:bb:8f:1e:a5:5d:a8:00:3c:
         ae:9b:98:70:fa:14:38:93:59:bc:ff:08:e3:a1:b4:4a:8b:5f:
         28:45:b5:88:b5:b4:85:b2:fe:ad:94:2a:11:bd:3c:c3:76:05:
         c6:e8:60:77:6e:56:d7:7a:d9:e1:b8:a1:59:b2:39:f6:54:a3:
         4f:1f:ab:f8:17:8e:84:94:f3:28:74:a7:06:75:b1:57:e1:67:
         e7:e3:8a:25:80:b5:6d:dd:b6:15:01:32:12:01:76:51:3c:73:
         87:a4:bd:17:30:cd:3b:f6:23:f1:80:b3:04:2f:82:ae:fe:58:
         38:84:7c:2c:b4:3c:1e:e9:e9:0e:8d:67:8b:cb:f9:5a:cd:b8:
         c7:08:db:33:77:11:6c:c3:e2:f8:63:3a:ba:09:ef:d0:99:fd:
         f1:c0:b5:de:06:bf:2d:cf:e0:90:d6:b2:50:6c:bd:89:23:13:
         90:33:7c:cb:7c:bc:fd:54:07:e1:a1:14:18:7f:04:9e:dd:96:
         6c:44:a2:d2:f3:54:74:96:c5:c4:d2:3b:17:e1:4c:4e:89:06:
         82:e1:cc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:41 2026 by rpki-client