Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
File:                     wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft (raw, json)
Hash identifier:          ZPb3nyObsUqbFN8nfYMEZlfJa+Owc1UhbbZbMX8sczU=
Subject key identifier:   E8:C4:F5:E9:40:4B:92:63:DE:44:03:15:5D:F3:03:DE:B5:18:F2:AA
Authority key identifier: C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88
Certificate issuer:       /CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
Certificate serial:       019DA3E5E314F52CD7E6FA1DF1194DDFA142
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 04:00:45 +0000
Manifest this update:     Sun 19 Apr 2026 04:00:45 +0000
Manifest next update:     Mon 20 Apr 2026 04:00:45 +0000
Files and hashes:         1: 1zaf526F9wVX38tplWDbgzfQwbY.roa (hash: qMnDOWXrsPt22GD6D3lnOwEaYsOjFucJb3/yloTnxl8=)
                          2: YOfOiVtbFPjv5qlxGYD5hMa5pvg.asa (hash: BRgXVBcV8E1flieZOrUO66c4KxWhFECdnyVZ6NuuWi0=)
                          3: wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl (hash: zfG/3fInbPF765r0xZ9OvzUHKBZl+k5nhYIYrOpLjz0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e5:e3:14:f5:2c:d7:e6:fa:1d:f1:19:4d:df:a1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1adbdfe01e9a3f96d50022c3cdafdc3e1a8d988
        Validity
            Not Before: Apr 19 04:00:45 2026 GMT
            Not After : Apr 20 04:00:45 2026 GMT
        Subject: CN=e8c4f5e9404b9263de4403155df303deb518f2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:b9:2e:9f:fd:c3:9e:c0:22:d8:a9:43:7c:
                    df:30:01:8a:39:01:7b:4a:b9:15:ea:65:de:f1:dc:
                    55:ff:67:17:e1:b8:e8:9e:57:c8:d1:21:56:d1:aa:
                    11:07:0f:ef:41:6f:43:aa:97:f5:91:b7:b7:16:43:
                    df:ee:24:11:da:18:93:cc:84:7e:39:9d:99:15:02:
                    cc:7e:71:71:6a:3d:a7:8c:70:a0:86:ff:2d:1c:2c:
                    e9:76:a3:71:4c:17:cc:bc:8b:a7:98:15:d7:cb:06:
                    d7:d2:a4:07:bf:4a:1b:f6:9e:32:2f:4e:30:a7:72:
                    47:d4:60:ce:53:3e:19:c6:aa:ea:65:20:aa:2c:fc:
                    ed:07:23:e2:0b:df:fe:ba:c4:ab:53:eb:da:e1:4d:
                    f5:29:a2:51:24:bf:a9:63:01:a0:a0:ec:04:60:ff:
                    ff:db:71:65:32:04:50:21:2c:d3:42:7d:1d:61:1d:
                    ab:94:27:16:d7:65:4b:40:d3:f0:ed:11:f7:e1:5b:
                    a8:f7:2f:c4:32:91:48:71:06:f4:84:8e:23:4a:80:
                    c0:e2:55:14:bf:3f:b1:bd:b4:d0:d4:ef:02:3b:2d:
                    77:69:22:ab:a9:66:8e:fa:87:0e:c8:95:f4:54:f0:
                    7c:5a:9d:3c:0b:7e:43:cd:9c:3e:26:96:e1:a4:ce:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C4:F5:E9:40:4B:92:63:DE:44:03:15:5D:F3:03:DE:B5:18:F2:AA
            X509v3 Authority Key Identifier:
                keyid:C1:AD:BD:FE:01:E9:A3:F9:6D:50:02:2C:3C:DA:FD:C3:E1:A8:D9:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa29_gHpo_ltUAIsPNr9w-Go2Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a4c6f1-7c93-45ee-8eaf-4394052cd65e/1/wa29_gHpo_ltUAIsPNr9w-Go2Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:20:d1:f9:4c:e6:37:04:1b:2e:f8:48:10:55:67:89:6c:6b:
         fa:62:bd:43:d7:b4:7f:98:2d:e6:3b:4e:9c:15:62:32:d8:88:
         ed:69:31:75:08:b6:41:f1:36:1b:3f:fc:f5:62:2f:4d:23:98:
         f8:5c:f0:58:0d:1b:a8:90:3d:3c:d2:10:85:83:c3:1f:ca:2f:
         a3:03:55:50:a5:7e:08:44:4e:2e:d3:61:dd:19:b6:d3:f7:ac:
         2f:bb:68:a8:b1:8a:15:20:fd:45:72:8b:9f:66:f7:9c:d6:63:
         b0:5c:77:99:80:3c:0c:a6:5b:b2:47:49:7c:19:47:79:07:23:
         e0:13:a4:53:a6:84:80:7b:cf:a2:c1:4f:cc:8a:6d:ba:00:93:
         73:75:92:21:cd:58:77:54:03:72:b4:94:55:a7:39:59:22:99:
         26:4d:ca:0e:57:02:26:ab:50:e5:ab:88:58:ba:30:b8:23:68:
         dc:94:2e:77:78:44:5e:57:0f:ef:93:2d:63:2e:72:2c:c0:f1:
         01:2f:48:dc:4d:fd:2c:fd:75:f9:7e:9a:81:0b:9e:41:be:b9:
         ee:41:c7:e4:43:61:f9:34:8b:2b:da:28:26:d5:48:5d:ee:21:
         53:04:5f:3c:a4:e6:6b:8e:07:20:02:da:df:13:aa:d4:8b:61:
         b3:e5:cd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:28 2026 by rpki-client