Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
File:                     w7iL5VE_Guckk1Ivpml-_zNpKuA.mft (raw, json)
Hash identifier:          iHNTLkU2belAx6pH2rq2xf4XS8/iDTdx+hY4XV7C2bw=
Subject key identifier:   DB:DC:52:4E:3E:0F:DA:1B:44:36:0D:D9:0C:C4:B8:37:F4:96:87:BC
Authority key identifier: C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0
Certificate issuer:       /CN=c3b88be5513f1ae72493522fa6697eff33692ae0
Certificate serial:       019DA45429885E5744B803C1961C0D261610
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
Manifest number:          0B69
Signing time:             Sun 19 Apr 2026 06:01:12 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:12 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:12 +0000
Files and hashes:         1: 8rmDqmEsv3U_nLQ78eYKP67sL2I.roa (hash: QZ5ZJadUwZH2YCH4im1WUkClReI4yp0qFMn1l3avxQE=)
                          2: w7iL5VE_Guckk1Ivpml-_zNpKuA.crl (hash: 7KUmWdRAp40TvCUQ9GE1NlvSR2RIqUPTf8OLFGygbcw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:29:88:5e:57:44:b8:03:c1:96:1c:0d:26:16:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b88be5513f1ae72493522fa6697eff33692ae0
        Validity
            Not Before: Apr 19 06:01:12 2026 GMT
            Not After : Apr 20 06:01:12 2026 GMT
        Subject: CN=dbdc524e3e0fda1b44360dd90cc4b837f49687bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:31:61:d8:01:e6:49:2e:43:58:a4:85:1c:4c:
                    0b:ab:fb:d5:21:30:9f:68:fe:7e:90:5d:78:50:53:
                    36:21:75:4b:3d:c4:a4:30:44:ed:7a:59:02:51:ab:
                    f3:6d:fb:b2:8e:d0:e4:e6:82:8d:68:6a:fd:c2:05:
                    b1:b2:a1:34:49:bb:cd:a4:61:7b:ec:f1:62:7a:f5:
                    f5:52:cb:06:4e:aa:b3:94:9a:e7:d1:47:13:11:cc:
                    49:3b:0a:29:c8:53:ff:27:da:09:b3:a8:74:4a:99:
                    1b:72:3d:ee:b0:a7:2a:e8:25:03:9c:71:ee:68:cb:
                    fe:9c:5d:f9:d0:ab:eb:75:15:1e:e7:77:8e:18:05:
                    a3:41:6d:da:e8:f4:9f:c5:98:80:92:c4:46:c3:12:
                    1f:2a:77:fd:6a:31:3a:ec:91:bb:f5:0d:17:f0:7a:
                    a8:45:c7:3f:5b:c2:39:7e:ae:17:81:0c:07:e2:ac:
                    fb:ba:35:7f:1c:4d:f3:7d:2c:6e:0a:92:9d:d2:5a:
                    ae:9c:3c:53:aa:d3:86:69:76:20:23:19:24:21:c6:
                    d6:b7:d8:50:0e:10:6c:98:71:ea:32:9b:f1:58:0c:
                    74:28:b3:17:58:0a:8d:30:c2:fb:d5:f7:0e:5c:85:
                    7d:b6:d1:8c:1f:7e:bf:da:18:e3:e1:40:52:11:60:
                    b4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DC:52:4E:3E:0F:DA:1B:44:36:0D:D9:0C:C4:B8:37:F4:96:87:BC
            X509v3 Authority Key Identifier:
                keyid:C3:B8:8B:E5:51:3F:1A:E7:24:93:52:2F:A6:69:7E:FF:33:69:2A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7iL5VE_Guckk1Ivpml-_zNpKuA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6e6df8-e72a-4155-9e08-0e47ede305b3/1/w7iL5VE_Guckk1Ivpml-_zNpKuA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:34:7e:5e:50:a2:bb:f3:ae:1a:98:4a:6a:a3:c2:2f:53:32:
         e8:29:25:1f:ce:2a:ed:9f:48:93:13:6b:d5:b7:f0:e7:91:e4:
         d1:ec:17:2c:33:1c:b0:94:6c:be:79:1f:ab:ff:b3:27:07:03:
         9d:5f:9e:e2:70:73:50:ab:91:ad:39:51:97:28:3e:df:22:06:
         72:9e:62:5f:f9:ca:92:88:00:bd:b2:01:fb:ba:5c:c2:05:09:
         8d:b7:c3:07:91:e1:dd:f6:42:e0:7c:be:12:5f:e7:d8:69:c3:
         b0:3b:4f:b0:c9:db:87:5d:19:2f:8e:3b:ed:eb:17:41:9c:53:
         63:2a:d6:1d:9b:8a:bb:7d:e8:8b:f5:06:e8:48:92:7c:c5:3a:
         f8:5b:f2:af:c1:24:73:71:af:ce:bb:e7:4c:ec:d5:30:c9:fe:
         48:7a:e4:d5:c2:91:f0:ba:ac:48:0c:cd:d8:8b:eb:66:1e:d7:
         0c:cf:2f:d3:8d:25:6c:cc:6f:99:60:95:a2:ce:f3:b5:b5:76:
         23:cf:9c:53:ab:84:6d:30:84:8f:22:07:fd:a6:cf:67:2f:7a:
         2c:c1:7f:99:44:68:d8:66:1b:14:83:3d:93:71:bc:db:91:ad:
         94:d2:f8:28:e8:ec:a0:3e:62:81:20:84:6b:a0:8d:02:87:5d:
         10:df:17:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:21:29 2026 by rpki-client