Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
File:                     E-wlUTMqDDL7dyXQaVgta1C-Np8.mft (raw, json)
Hash identifier:          gqEJVaOmQ5i1QujBcGg9reWrTMyjaGqpD25F6ta5mPc=
Subject key identifier:   38:0C:D4:DD:AB:F0:B8:06:B0:19:B5:80:CD:F6:71:FD:EA:81:74:FC
Authority key identifier: 13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F
Certificate issuer:       /CN=13ec2551332a0c32fb7725d069582d6b50be369f
Certificate serial:       019D98F505EA5BFA99CFD4DF93441388DA7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
Manifest number:          0BA1
Signing time:             Fri 17 Apr 2026 01:01:27 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:27 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:27 +0000
Files and hashes:         1: E-wlUTMqDDL7dyXQaVgta1C-Np8.crl (hash: DLqp85Tw3xAs6i2CwtY82gVo+5TIzgBkPccaakYcIXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f5:05:ea:5b:fa:99:cf:d4:df:93:44:13:88:da:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ec2551332a0c32fb7725d069582d6b50be369f
        Validity
            Not Before: Apr 17 01:01:27 2026 GMT
            Not After : Apr 18 01:01:27 2026 GMT
        Subject: CN=380cd4ddabf0b806b019b580cdf671fdea8174fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:72:0b:63:fe:48:0e:15:ea:41:80:6d:e9:7f:
                    e6:03:07:35:e5:ba:7c:2c:10:5e:41:21:39:c4:44:
                    46:fa:53:e2:7a:38:1a:04:99:98:62:eb:ba:a8:cd:
                    9c:31:fe:3a:ce:d0:d1:56:f7:85:ff:b3:fe:fe:57:
                    a9:64:1e:85:f1:9b:dc:18:13:bd:99:bd:cf:89:08:
                    fa:8e:93:80:fb:ba:c3:7f:57:bc:33:63:b1:79:3c:
                    4a:d9:3a:bc:07:1f:1d:b5:87:96:a0:03:05:71:0e:
                    81:a0:9c:c2:ae:46:64:66:e3:df:e8:b6:d7:19:4b:
                    7e:f8:ad:ed:50:02:5e:cf:3c:05:5f:56:15:1f:3a:
                    56:b6:6f:19:0a:86:6a:a1:4b:0a:ff:bf:d8:a1:a5:
                    cc:cc:58:6d:84:17:21:c9:74:95:ac:35:23:5d:a7:
                    56:1d:fb:32:da:00:3a:3f:3b:99:8c:44:1d:c7:1b:
                    37:7e:29:1d:3f:bc:6c:96:e8:6c:de:a9:91:64:0b:
                    48:95:65:1b:b0:32:5d:a5:eb:b7:fb:67:70:e2:e3:
                    18:5e:b4:b8:eb:d4:2e:9d:7f:ff:3b:72:09:7a:9a:
                    62:42:0d:64:90:de:7f:28:95:38:cb:1d:ce:79:a3:
                    89:c2:5f:e0:d0:bb:30:ce:b6:62:12:2c:45:51:4e:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0C:D4:DD:AB:F0:B8:06:B0:19:B5:80:CD:F6:71:FD:EA:81:74:FC
            X509v3 Authority Key Identifier:
                keyid:13:EC:25:51:33:2A:0C:32:FB:77:25:D0:69:58:2D:6B:50:BE:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-wlUTMqDDL7dyXQaVgta1C-Np8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a6cd5e-ba95-4371-8ddb-2ee565141b32/1/E-wlUTMqDDL7dyXQaVgta1C-Np8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5e:5a:64:33:bf:13:dc:3b:b4:95:7b:af:df:ef:e5:a4:9f:
         14:4d:8d:f8:fd:67:f3:df:ae:74:8c:ef:7d:52:c9:5d:3d:dd:
         03:31:a0:9c:a9:10:bf:ab:49:26:6a:fe:dd:3a:a7:ab:e8:1c:
         79:44:d7:b2:80:19:44:21:24:ea:7a:6e:85:b0:55:c5:54:c3:
         30:be:96:45:d2:d1:4d:45:c9:62:b8:dc:4f:5e:1c:6d:c6:84:
         28:e3:2b:d0:35:87:e1:2d:5f:e6:e3:ed:6a:5d:b2:5e:6b:e8:
         18:f8:7f:4a:63:bd:b9:e0:5a:73:9a:80:1e:e9:0e:30:02:a2:
         88:bd:0f:06:6c:67:4d:06:6f:ba:d8:aa:08:5b:92:27:77:68:
         50:b9:46:eb:f2:95:44:80:16:5a:65:7b:ea:b6:e1:b5:f6:f0:
         d4:ac:47:9d:82:b1:61:26:ea:25:b2:c4:43:82:c8:9e:53:1b:
         df:ee:07:58:97:6e:ae:52:92:a1:2f:8f:38:5f:24:52:0e:d0:
         28:7f:bc:2d:26:f3:bc:a7:53:79:f5:1b:c3:79:6a:06:db:85:
         51:bc:34:b6:41:eb:65:17:5e:9a:21:67:66:0b:05:6d:4f:ca:
         25:ec:2c:82:9d:c3:01:b9:2b:79:e2:15:73:c1:aa:fa:4d:c1:
         ba:83:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:59 2026 by rpki-client