Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          aJhGFpKsd13+wkx4oQZJO1Dv7R30E6q3SOI05rsuXZw=
Subject key identifier:   DF:C0:C7:83:E3:C9:78:E6:73:B3:3C:C1:2A:14:22:D7:E5:6D:D5:E2
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       019D99D02D0C2D4F272B5C93C95E2006B5CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          18C8
Signing time:             Fri 17 Apr 2026 05:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:50 +0000
Files and hashes:         1: CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa (hash: 62NrbZ3F0XaxVmb0wIiq4eSU0cht7XOifDXoDw7smqk=)
                          2: Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa (hash: idu2KS48f2h5e79Q1R66rhjvET6BFhf6C4kPWcByyac=)
                          3: NyFZ2eW1WSoY97If0z5zbstqwOc.roa (hash: tzK5PMS/xleldxj4Om3hBpSiQl1y+6+WsVVnD8xC2Jk=)
                          4: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: CswTOBQqWnXMkNtHZW4lTv44l/3plJNLgSXVfrsJ/1E=)
                          5: ebzad07NZYcwcy_R1eapuxHVLc8.roa (hash: npZjo0OeCdQvVEsvxdLKnv7xOn/66fNjn6RzPB16PNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:2d:0c:2d:4f:27:2b:5c:93:c9:5e:20:06:b5:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Apr 17 05:00:50 2026 GMT
            Not After : Apr 18 05:00:50 2026 GMT
        Subject: CN=dfc0c783e3c978e673b33cc12a1422d7e56dd5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:8b:ea:1d:6b:49:29:96:bc:44:cf:ad:63:
                    c8:5f:b6:e5:aa:87:9b:82:f9:9a:60:9e:65:60:c8:
                    b2:0f:c0:03:b5:0e:9d:55:c2:78:75:f5:b9:15:26:
                    6e:07:12:52:20:f9:08:65:45:7a:47:2f:9e:e8:3c:
                    27:75:26:e1:cc:2b:dc:b2:44:2f:67:f0:67:10:92:
                    98:9c:56:e3:91:30:8f:93:ee:56:de:22:b3:62:9e:
                    e1:53:40:8a:a7:6a:9e:36:a5:ff:a0:b5:75:63:6b:
                    d4:40:32:ca:77:96:10:22:74:91:59:01:fc:6a:74:
                    18:ef:43:7a:16:e5:1e:46:02:e3:4c:53:0d:70:dc:
                    3b:f5:0a:39:a7:86:59:6a:0c:32:3f:87:29:ba:c8:
                    7a:6a:f4:46:34:78:32:51:17:cd:ea:e2:75:88:92:
                    e3:13:e8:fc:dd:c5:16:60:9b:3a:9a:12:4c:dd:8a:
                    9a:72:8b:73:f8:1f:fd:b9:bf:ae:40:8b:be:16:4a:
                    f2:42:80:76:1f:83:72:c6:67:e5:c0:81:42:8d:30:
                    4b:ee:10:a8:b6:8d:bb:67:a5:6d:62:2e:74:be:6b:
                    9b:d5:c3:20:5f:7c:05:35:80:2c:59:dc:8f:3d:53:
                    02:c8:76:0f:1f:12:d7:51:8c:64:6a:67:e2:90:02:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C0:C7:83:E3:C9:78:E6:73:B3:3C:C1:2A:14:22:D7:E5:6D:D5:E2
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:da:1b:18:0d:18:9c:8a:87:51:69:67:7c:98:0a:75:a9:aa:
         5a:0f:6a:64:eb:18:16:9c:60:0e:a6:4b:c0:d6:24:48:1f:d3:
         26:a2:26:95:32:ca:91:6b:f9:a3:a4:12:24:e4:6f:ae:69:cd:
         e6:bc:0a:9f:cf:87:10:5d:e9:f3:a1:01:9c:d6:99:50:67:58:
         48:4d:90:27:8b:6e:4a:8b:95:20:4d:3a:de:0c:66:b9:dc:be:
         f0:27:54:bc:7c:53:d7:c4:64:97:d4:85:d0:e8:28:9e:25:3b:
         50:34:90:12:90:d0:48:17:57:c5:a8:e6:e8:e1:be:92:2c:9e:
         58:f6:a1:6e:eb:a3:35:01:a6:44:5e:91:60:af:6e:2f:2f:78:
         80:97:d3:cf:0e:cd:ec:95:41:4d:e3:3d:63:52:30:fa:09:e1:
         2b:09:c1:35:e2:3e:5d:f1:40:bb:b7:2b:23:51:88:8e:32:08:
         5e:5c:5e:17:66:12:ce:50:55:34:7c:3f:df:7f:5e:59:b6:eb:
         ea:c1:07:e0:34:d5:85:ca:68:cc:d6:c4:0d:67:95:66:17:9f:
         e2:f7:de:0b:74:df:bf:d7:5d:3d:25:bc:7a:c6:02:66:0f:0a:
         39:86:56:ab:84:3c:a4:d1:bc:60:6f:9a:4f:d6:6a:c0:5b:ba:
         d8:51:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:53 2026 by rpki-client