Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
File:                     wyzHqWT083CSkpHhn_995T8ZvkQ.mft (raw, json)
Hash identifier:          C7uMtCwk8uM1GnahIiTexCxETiE8iWcOvf5lR9lPiiA=
Subject key identifier:   C2:6D:40:53:59:F5:ED:80:28:F7:36:B8:50:83:96:12:36:7B:1A:1E
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Certificate issuer:       /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial:       019D9AAC2A48C531B7408B87076691AB2923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
Manifest number:          13F8
Signing time:             Fri 17 Apr 2026 09:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:07 +0000
Files and hashes:         1: Ad2BYNr4C8UGPtT46SLlPEvhYoE.roa (hash: iHuFlOzhqVh9TVA/RdSn3C6VoHbo7FF1nq7e3/ScdEM=)
                          2: wyzHqWT083CSkpHhn_995T8ZvkQ.crl (hash: 6bCXWMD3BLrbY+KM67fJbL+E1UNiocqOfms99HeunHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:2a:48:c5:31:b7:40:8b:87:07:66:91:ab:29:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
        Validity
            Not Before: Apr 17 09:01:07 2026 GMT
            Not After : Apr 18 09:01:07 2026 GMT
        Subject: CN=c26d405359f5ed8028f736b850839612367b1a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e7:4c:c5:d6:b7:4c:3f:b5:a4:00:ee:e5:8d:
                    12:51:6c:cb:f0:40:ed:c6:4c:f1:e0:e7:fa:9a:41:
                    c6:a5:46:29:5d:1e:9e:56:36:97:db:cb:bf:2d:68:
                    88:3f:58:6b:f8:a9:aa:8d:5f:0f:a4:e1:a4:51:98:
                    e8:0b:a9:ea:a0:74:2c:b3:ea:2e:9e:11:11:77:f6:
                    87:a9:03:19:07:ce:00:90:04:86:38:87:ed:4a:2e:
                    95:3a:43:28:95:b2:2a:de:ea:b1:bf:36:f0:b1:ae:
                    21:7c:9c:e7:cd:9b:0d:59:f8:31:e4:ec:e3:25:66:
                    be:a3:4d:07:91:5d:3a:8f:6a:00:06:96:55:18:a7:
                    0d:d1:47:44:fe:7f:b7:25:88:85:d1:ea:d6:55:89:
                    d2:b8:80:92:de:67:fa:ff:43:d5:f9:4a:17:34:df:
                    38:b4:3d:b5:80:fd:e1:67:cd:5d:c8:b3:f6:2e:f5:
                    79:bb:35:5c:86:98:56:b7:b5:51:b0:28:c8:27:2b:
                    a7:7c:bf:ce:75:cb:ba:0c:07:79:ce:6a:9e:91:fe:
                    5e:7b:4f:a2:4d:cb:ee:c5:84:63:53:75:61:f0:19:
                    72:ab:5b:ba:93:5d:a1:c8:ec:9f:89:39:54:f7:4b:
                    d6:23:e9:fb:a4:9d:24:a7:9e:24:28:8a:51:19:ed:
                    42:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:6D:40:53:59:F5:ED:80:28:F7:36:B8:50:83:96:12:36:7B:1A:1E
            X509v3 Authority Key Identifier:
                keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d8:f1:ac:77:98:f3:25:44:7e:f2:f4:f5:ac:53:cb:b4:76:
         1a:71:c5:a1:f2:18:51:4f:8d:25:5c:92:f9:91:19:48:ed:c8:
         29:da:9a:10:15:2c:94:bd:1a:e6:dd:26:06:36:28:dd:67:45:
         8e:e4:9f:b3:ff:03:de:c2:23:11:9a:8a:f2:3e:a3:57:e9:23:
         4f:9c:f8:74:46:0c:ea:40:d6:72:e3:2d:9b:49:29:6d:f3:20:
         13:7e:e1:7a:83:6d:fd:4b:55:0e:a1:90:30:05:83:c3:65:ce:
         fd:6e:2e:ed:f6:fb:69:0b:37:21:ad:d4:32:3a:ab:d5:05:83:
         84:5b:4c:16:e3:63:c5:b5:ef:90:d7:a2:f1:67:da:79:93:46:
         e7:c3:20:50:e0:8a:9f:38:40:75:dc:01:ee:0a:3d:de:73:a3:
         1f:08:32:99:aa:a2:7e:1e:86:8d:ba:8a:b9:e4:34:fc:14:ba:
         9c:83:bd:31:c4:57:12:03:ec:29:5d:29:6d:88:b6:cb:3f:96:
         cf:8e:92:8a:e9:39:61:17:fa:ed:0d:ad:3f:e6:16:7d:ed:04:
         08:48:a2:cd:f4:eb:08:1b:72:f0:f7:f3:76:3d:21:39:29:81:
         23:65:f9:2f:8b:80:26:10:98:03:04:52:39:bc:0f:64:b8:15:
         52:e1:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:46:09 2026 by rpki-client