Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
File:                     w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft (raw, json)
Hash identifier:          qOkYtydEYGxk/M+fB0BOgMbqO26LaJSFfJNM9Uv82jc=
Subject key identifier:   E3:2D:11:C1:A8:3E:48:AA:50:43:5E:62:EB:A2:79:51:D3:96:76:AE
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Certificate issuer:       /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial:       019D98869138E5A5B52B93483F6FCA073BE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
Manifest number:          1211
Signing time:             Thu 16 Apr 2026 23:00:48 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:48 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:48 +0000
Files and hashes:         1: CaF9jDRtHy3skgKS7QCnXm4PI7A.roa (hash: V9ZLClAO25ZfSnTZeTYg00I4twtSynvhNaSIPSAPlv0=)
                          2: bSfoqAesrmojtDNBxt2VZHxOHqI.roa (hash: Z7b9r8p1AdR9DmR8LmSnmnhIJm2T4hKdRLt3c111qtg=)
                          3: puvvxkuyGGm9hRKcVBF60FM3T20.roa (hash: 859vc/MnpuH2XD8iZDZO4+LCLxVjdb1X9+4Sxo2qG9k=)
                          4: w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl (hash: tgvPB8/plLKU/3am0QqrK3QjNRLzKhjnstJEL84OJAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:91:38:e5:a5:b5:2b:93:48:3f:6f:ca:07:3b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
        Validity
            Not Before: Apr 16 23:00:48 2026 GMT
            Not After : Apr 17 23:00:48 2026 GMT
        Subject: CN=e32d11c1a83e48aa50435e62eba27951d39676ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:ce:70:ab:ac:22:4e:04:a8:7c:66:92:10:
                    32:17:7f:7c:03:8e:b4:cd:06:e1:9a:bb:da:1f:7e:
                    b5:a4:36:f5:59:c9:6b:72:a0:d8:ba:01:92:5d:4e:
                    a2:a5:6d:63:f3:b8:ed:98:5d:95:2e:05:4d:d1:a2:
                    78:a1:a0:08:15:b6:f4:29:56:eb:59:b9:9f:b7:57:
                    91:e8:52:68:17:f0:ec:75:bd:c8:fb:d6:f6:cc:27:
                    12:89:5f:8f:83:b1:16:d6:88:8b:a6:26:73:74:e9:
                    33:b5:be:19:9e:85:b3:10:47:de:d7:72:8e:17:9f:
                    ef:e3:2f:ab:97:48:47:4e:07:a1:d1:d3:49:66:13:
                    68:f0:e0:49:d4:6e:c3:98:43:7c:54:16:4e:04:ce:
                    16:b8:4c:aa:b2:11:f3:65:fa:44:ef:2e:28:32:76:
                    86:a0:a7:4b:41:98:6f:cf:74:85:44:38:5c:5c:13:
                    a2:c6:ee:88:c1:91:f5:60:ed:cb:00:29:26:d2:0d:
                    9e:55:e0:9e:a7:4a:f4:f2:c4:08:e4:db:51:05:12:
                    42:98:4c:9b:1d:4f:0d:34:07:38:ac:43:e1:a9:61:
                    13:f5:87:52:88:43:b0:93:71:05:b5:76:b4:90:e2:
                    52:bc:b1:19:40:6b:ff:ae:13:ee:21:e9:f7:e2:4f:
                    75:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2D:11:C1:A8:3E:48:AA:50:43:5E:62:EB:A2:79:51:D3:96:76:AE
            X509v3 Authority Key Identifier:
                keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d4:ff:b1:e6:45:70:fa:7f:7e:32:9c:d9:f7:37:21:9b:ba:
         bf:71:30:ee:e0:0e:b2:60:33:e0:97:21:9c:32:c6:0c:db:3d:
         ac:ab:ec:96:d3:db:2b:c0:8c:0a:0a:86:97:fb:fe:10:ea:39:
         96:4c:4a:50:1c:53:a3:2e:ce:5c:f1:cb:e8:f8:57:91:f4:a8:
         38:62:24:e5:78:37:e8:43:d9:5e:1b:d5:c1:d2:3d:a3:ed:7d:
         c7:48:04:e4:2f:58:6c:f3:43:21:e4:04:e7:03:f5:9e:6d:c5:
         c8:63:23:23:b8:89:ca:f4:af:27:f1:b1:c8:30:18:95:fe:33:
         65:f3:a4:5e:1e:ea:ee:0e:b3:1a:ee:96:bd:75:5b:b3:24:c2:
         a9:4b:b3:67:66:6b:49:21:df:ff:2e:76:db:84:72:76:7d:63:
         c5:41:da:8c:d6:ba:24:06:23:3d:e9:b5:87:8d:cf:ac:40:70:
         35:a3:cb:7f:ca:8e:ad:ea:f5:73:c9:c6:af:dd:be:57:35:38:
         48:e9:87:49:c3:6c:de:ad:27:52:3e:c8:db:37:80:c9:2c:e3:
         8a:f0:d0:63:8b:8d:19:aa:48:f0:7b:12:6f:de:ac:4c:c3:6a:
         67:df:f4:b9:a6:8f:d7:36:f0:6d:2a:df:6c:90:be:cb:02:66:
         f5:fb:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:32 2026 by rpki-client