Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File:                     wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier:          zhnjL72jbFBDPlQWQD6e7EJa16nLR7pkD4x1rpATIvg=
Subject key identifier:   7A:F6:8F:39:7E:FE:1F:88:66:6E:3A:0E:D0:DF:8B:8D:D9:1C:5C:9E
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer:       /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial:       019D9B19BB1B45C94E9845FE04BFF2E11ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 11:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:47 +0000
Files and hashes:         1: qfLg6_O2M8WS1thcqc7yvX4X2YA.roa (hash: QWR0hHgaSdM86S0MEOSeh4BxClfakxPYih9gZR0Zp3g=)
                          2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: eIZ7VRl0ZODQCzxNAiNcT3yFzr3168s+KRDldKOydp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:bb:1b:45:c9:4e:98:45:fe:04:bf:f2:e1:1a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
        Validity
            Not Before: Apr 17 11:00:47 2026 GMT
            Not After : Apr 18 11:00:47 2026 GMT
        Subject: CN=7af68f397efe1f88666e3a0ed0df8b8dd91c5c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:a3:cf:06:c8:39:9a:33:5f:23:c1:97:c0:
                    6a:70:75:f6:b4:f3:6d:b7:63:ea:b7:d9:12:e9:1d:
                    fa:23:c0:90:71:ab:77:9c:4e:56:65:72:e9:d8:06:
                    8d:01:32:53:29:21:8a:c4:93:74:14:2f:2c:b2:ff:
                    da:97:35:1f:2a:d7:73:53:ed:da:bb:d9:c2:18:2f:
                    a7:d3:a6:a0:10:ae:bb:14:c2:41:d6:71:59:97:ab:
                    a8:2d:f3:24:67:e2:0d:5c:d7:56:c8:fe:25:64:a9:
                    67:5a:1a:84:5c:5e:6b:40:a3:05:1a:a9:2e:07:32:
                    49:be:be:b0:5b:3e:c9:2c:3e:a0:74:ca:5b:7d:a7:
                    9b:6f:9f:e2:7c:44:a7:c1:79:d4:a6:36:3e:88:f0:
                    58:ae:95:50:17:0f:eb:fd:fc:8d:a6:7f:a3:8f:d7:
                    ae:4c:25:6f:9f:5e:d9:50:dd:da:7a:ed:b6:1e:50:
                    ca:9e:28:50:fa:35:de:b6:6c:1d:b0:38:a8:b8:3b:
                    7d:60:75:a7:84:5d:a7:f8:03:06:26:b9:f6:c9:6b:
                    71:a5:01:b9:ae:24:b1:7c:bd:f5:3d:f3:30:44:b3:
                    d7:cc:bc:64:e2:35:f5:19:d9:a4:cb:f1:09:42:a3:
                    6b:65:a7:be:fd:98:45:02:f6:5d:32:55:c7:f8:49:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F6:8F:39:7E:FE:1F:88:66:6E:3A:0E:D0:DF:8B:8D:D9:1C:5C:9E
            X509v3 Authority Key Identifier:
                keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:24:47:b0:3e:db:fb:71:f2:f6:0f:0b:3b:4c:cf:ea:20:91:
         c1:40:23:2d:0a:5a:53:c3:6c:f7:3b:87:18:8f:f3:f2:84:1e:
         a8:72:ab:13:51:2a:b9:74:fe:c3:cc:b2:18:05:ad:b5:c7:e1:
         eb:f0:96:f7:8a:68:58:f9:ab:45:01:6f:9d:47:88:f4:ec:0b:
         da:cc:a1:7d:77:e2:56:25:39:d4:4f:04:4e:54:7d:e5:ca:64:
         26:2c:36:8a:84:9c:bf:d4:b5:e5:d7:84:19:ac:4f:67:54:94:
         31:56:e9:ab:0a:1a:dc:a6:0b:83:74:2b:6a:8c:82:09:30:6c:
         64:b9:b7:35:64:36:8f:db:5c:c5:a1:e4:5d:1d:89:6f:a4:ef:
         a1:7d:58:b6:51:e3:05:c3:20:5d:32:45:44:6d:ac:bc:85:1a:
         c6:e9:d0:33:d3:43:36:87:11:6b:59:60:67:e7:18:40:63:1f:
         98:ec:d5:5c:4c:f8:1f:77:65:e8:d9:b9:e3:a1:26:64:cb:86:
         d9:c9:81:c4:01:71:28:c8:8d:33:0c:ad:e6:6d:47:8d:b5:7b:
         62:71:88:6d:14:99:2b:70:54:41:2f:54:9e:41:c6:b6:60:0e:
         0b:d2:15:74:c3:3f:f1:00:e0:6a:8a:d5:9a:e1:33:61:38:eb:
         62:1e:18:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:25:47 2026 by rpki-client