Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File:                     wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier:          cmqfe1ucisqGJ3aF0vrba6VwlAimkOPkksVs4tVWIJE=
Subject key identifier:   E5:CF:BF:A4:4C:CD:F3:20:99:F0:DB:30:FE:D0:46:22:1B:FB:95:78
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       019D98186D7CC5EF44463A02580FB67DF964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number:          0A5A
Signing time:             Thu 16 Apr 2026 21:00:30 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:30 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:30 +0000
Files and hashes:         1: B0Uzs5RoulMpxtKQXud6u4TA0PM.roa (hash: mR2i4aLtlRQUg0BXj5ANdcDouKnEouJa0KGOvU/8HYM=)
                          2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: ZavjQ02QVZl4bVqOkAScfM6gU+jhnqesnlkVBxJwQsk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:6d:7c:c5:ef:44:46:3a:02:58:0f:b6:7d:f9:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: Apr 16 21:00:30 2026 GMT
            Not After : Apr 17 21:00:30 2026 GMT
        Subject: CN=e5cfbfa44ccdf32099f0db30fed046221bfb9578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:b5:a6:46:ef:9d:85:1c:f5:44:1d:c5:e8:
                    c8:5a:b6:73:b3:dd:e1:e6:1c:41:07:95:7f:1b:b8:
                    49:dc:b7:fc:bf:79:20:73:eb:df:3f:e4:4d:48:ec:
                    ed:ed:39:c5:f6:28:9e:d9:f0:aa:bf:b0:59:a9:2b:
                    3b:2c:36:63:04:a4:ab:71:7b:e7:a2:35:c4:ce:47:
                    59:7e:2a:1f:96:67:fb:92:8a:0a:24:54:76:ac:2a:
                    c8:7b:c0:4d:4a:2c:ab:60:43:e1:51:a6:e8:d6:1e:
                    4f:55:b6:5d:d6:39:e7:e6:98:ed:30:06:ce:4b:c0:
                    d2:84:99:e3:8a:27:24:a4:85:02:80:b0:ab:74:7e:
                    57:2b:19:c6:90:5b:6f:1a:ee:98:c4:4b:83:e8:42:
                    c2:29:45:c4:b0:79:7d:a6:e6:c9:1f:e4:87:14:d3:
                    2b:08:0b:7e:cb:32:93:86:9f:35:2b:64:60:e6:e3:
                    2d:b9:1b:a4:8b:2d:72:e7:e7:70:e1:f3:e5:9e:f8:
                    a0:bf:01:f7:b6:b1:1f:81:6b:a1:c0:08:aa:f1:00:
                    01:bf:d7:56:8a:c6:fb:70:12:3c:af:de:b0:11:a9:
                    31:cb:1c:06:2e:70:d1:e5:a9:f3:c6:37:6b:5b:8a:
                    aa:fa:0b:b9:c9:cc:80:54:64:2c:49:81:bf:0a:52:
                    f4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CF:BF:A4:4C:CD:F3:20:99:F0:DB:30:FE:D0:46:22:1B:FB:95:78
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8c:c1:8d:bb:f6:24:f2:01:90:3a:b1:bc:e3:86:aa:a0:84:
         1f:13:26:b8:ca:ac:9d:f7:a6:77:c1:c9:a6:bb:00:c6:0f:07:
         b5:25:95:e8:b0:0b:e5:09:3b:d9:12:b5:0c:06:c6:a0:27:72:
         a4:7d:84:85:bf:6d:7b:e1:50:fb:1e:5e:bc:fc:05:f3:34:87:
         be:8c:92:29:e7:13:e2:f9:9f:59:29:f1:0a:63:47:fd:c8:e0:
         43:09:36:e2:c2:11:1e:0f:6b:0a:d3:03:0a:30:27:76:5e:16:
         db:e3:be:7a:a3:9e:b2:8e:df:05:88:f8:0c:7e:cc:60:dc:1d:
         b7:0e:63:39:8d:e2:36:d9:fd:b9:fb:0c:1b:46:58:86:ed:38:
         44:78:51:69:c8:b7:31:b7:5d:c4:e9:63:50:cd:91:53:8c:e0:
         1d:3b:79:da:08:14:f9:b8:05:d7:57:b5:35:34:5d:c4:9b:53:
         c0:17:a3:c6:23:a4:50:d4:20:28:b1:35:b7:eb:a0:b7:6c:d9:
         68:75:d8:07:13:a0:9d:25:02:0d:d8:21:a7:75:cb:07:aa:63:
         e0:b6:f6:87:05:67:40:87:76:19:ae:99:e9:83:19:a4:de:38:
         a6:77:c3:61:4e:20:5f:81:b1:b0:76:47:4c:63:bf:d7:39:50:
         2b:8c:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:10 2026 by rpki-client