Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          omp5w5nxE4ohyuOzZviXI7Oz3UnkfByNhzotG0hUjdQ=
Subject key identifier:   F2:EB:4E:A6:DA:75:DD:3C:1B:17:C5:E5:26:62:08:36:5E:61:D1:82
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       019D98865A7E3911B9F346C8AAD75166087C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          1194
Signing time:             Thu 16 Apr 2026 23:00:34 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:34 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:34 +0000
Files and hashes:         1: 4nK7xMejEGysuibSYJIso6RlQpI.roa (hash: WFo/Wgq0Q0zz5SgRWVK30WfT98xnLcIsGWqhNlQwY78=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: Bw2Y8MdiTlQTeScgNVHeZNwnXihYjomLoVHfIAvPVNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:5a:7e:39:11:b9:f3:46:c8:aa:d7:51:66:08:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Apr 16 23:00:34 2026 GMT
            Not After : Apr 17 23:00:34 2026 GMT
        Subject: CN=f2eb4ea6da75dd3c1b17c5e5266208365e61d182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d9:22:8d:54:84:e0:aa:e9:cf:e5:ec:53:e7:
                    d7:1f:58:be:c1:0c:29:f3:80:c4:82:68:7a:b2:2d:
                    2b:b1:40:fc:65:25:cd:9f:38:13:a1:0d:30:82:f2:
                    dd:4d:0f:e9:62:c3:fd:23:aa:f2:09:eb:4e:be:8f:
                    de:63:4c:8c:d9:f3:aa:21:f1:c6:2b:cd:d5:e1:36:
                    a5:52:64:1e:31:30:24:d0:8e:96:af:bc:bb:18:39:
                    5a:a1:3e:e8:f2:04:04:bf:83:60:70:ee:97:70:5a:
                    1c:54:ea:6e:fc:b9:f4:69:db:30:44:d6:28:d8:33:
                    eb:75:a7:74:8b:5a:f1:97:b1:73:c8:72:2e:1d:62:
                    ad:fb:38:00:ff:30:d5:90:1b:51:24:6e:42:1c:9d:
                    40:b2:60:1a:ad:93:db:b7:92:5c:2e:2b:ea:75:2d:
                    ca:4a:53:c0:f1:69:c2:82:61:77:a5:be:68:34:73:
                    d6:60:29:fd:24:bd:fc:00:40:b1:be:bb:4b:21:7e:
                    8f:a0:a8:38:44:ae:a8:3f:0f:71:84:3e:45:84:09:
                    40:12:50:50:fd:c9:3f:e7:48:f1:14:98:d6:ac:7f:
                    74:bc:18:d7:4d:9a:0e:2e:1f:7d:2d:70:c5:20:f8:
                    3a:da:92:aa:0c:03:a6:f7:5d:5f:7c:ca:99:ba:83:
                    34:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EB:4E:A6:DA:75:DD:3C:1B:17:C5:E5:26:62:08:36:5E:61:D1:82
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e9:68:17:0c:26:da:cd:cb:32:79:ad:cc:d4:32:10:fb:b9:
         d5:52:a9:38:41:c2:f1:b0:cd:cf:0d:e1:d8:fe:5a:63:b6:bc:
         43:3a:66:7e:ac:f6:a0:75:c3:3b:f5:8f:fa:38:53:9f:b9:27:
         1b:02:21:e1:ff:91:30:7e:fc:cd:25:2d:b6:97:a8:bf:c7:50:
         fa:44:71:80:1a:e9:8e:af:44:a0:b6:35:13:27:e1:c0:2c:98:
         4d:91:fb:29:93:33:dc:87:82:ea:f8:bf:30:39:ea:5e:3b:c6:
         d8:19:e4:98:b5:05:ec:d8:39:fc:f5:b6:64:dc:8b:c0:30:c1:
         23:90:31:43:a0:1a:fd:8a:48:52:bd:fa:a3:0c:ca:81:11:7e:
         76:43:30:ce:b5:90:cb:4f:34:8d:96:b1:28:4b:ea:ad:2f:9e:
         08:c0:c0:25:00:8c:95:c7:a5:e0:c0:71:ea:7e:ee:60:55:a2:
         5f:13:e9:e7:7c:fb:bf:48:76:9e:90:8e:c9:5a:62:da:49:09:
         b5:b0:84:f3:ab:aa:4e:0b:91:d9:dd:74:64:0d:85:40:de:08:
         70:be:8c:10:d3:9d:54:9a:c7:7b:b0:be:5e:e7:44:b5:2b:15:
         03:a5:4c:7d:d5:29:c3:f9:b8:d4:07:e9:75:30:65:9a:88:f9:
         17:7a:89:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:07:47 2026 by rpki-client