Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File:                     WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier:          o65lfzW90wV2cgHzLytakxkfhACDCumBQ2p7R2TqZ9s=
Subject key identifier:   16:C4:30:E8:0F:C4:25:EA:11:3E:7F:B5:61:A6:19:9D:ED:3D:AF:5A
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer:       /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial:       019D9961F83DC18FF8F49C8C43D3D557045B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 03:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:27 +0000
Files and hashes:         1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: phTjtU9ZvrYbhRF/M7WhXwoWFoR2kqFWxkU3vcbUM+0=)
                          2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:61:f8:3d:c1:8f:f8:f4:9c:8c:43:d3:d5:57:04:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
        Validity
            Not Before: Apr 17 03:00:27 2026 GMT
            Not After : Apr 18 03:00:27 2026 GMT
        Subject: CN=16c430e80fc425ea113e7fb561a6199ded3daf5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b9:45:2c:b1:fd:be:fa:09:29:61:cc:e4:7d:
                    58:e3:b9:8a:00:e0:cc:97:be:53:e8:2c:c5:3f:79:
                    52:0e:b6:1a:fe:65:10:d6:f0:1a:9d:67:ca:29:9b:
                    40:e3:97:fc:2b:16:38:ce:a6:10:98:bf:c9:62:79:
                    4b:d8:84:a4:c6:70:bb:e9:e4:83:73:d6:b4:a3:88:
                    75:97:45:7a:d7:ab:84:ee:14:43:43:89:0b:a8:c8:
                    a8:5b:29:ca:a6:69:b0:66:bd:9b:22:78:da:e7:a1:
                    68:00:8a:ac:3b:db:25:da:91:f0:f3:76:cc:51:73:
                    ee:0c:cb:d8:25:ea:b6:6c:3e:6e:f2:d6:af:1c:e1:
                    ad:eb:1e:8e:a3:3f:36:16:0c:97:a1:7a:8e:0f:62:
                    e0:5e:18:09:26:67:22:3a:c9:46:cb:2d:36:b5:2e:
                    f7:78:37:cb:a7:3f:b0:51:8d:db:08:a1:b2:78:62:
                    68:46:d7:7d:33:47:42:eb:fe:84:be:cd:e8:85:e3:
                    29:51:52:ee:8f:ac:00:14:28:65:2a:18:3d:69:90:
                    17:99:49:75:38:49:e3:b9:03:66:85:2b:69:ab:90:
                    fc:5f:72:2c:b1:df:ed:3f:86:e4:c9:70:92:bf:20:
                    5a:f9:3d:37:95:38:09:bd:b1:e1:80:c6:aa:97:7f:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C4:30:E8:0F:C4:25:EA:11:3E:7F:B5:61:A6:19:9D:ED:3D:AF:5A
            X509v3 Authority Key Identifier:
                keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:5b:16:b9:af:e4:99:bc:c5:42:df:e7:f2:cc:61:c5:d1:a1:
         2e:27:ec:f2:47:7f:9d:1a:31:39:11:49:f3:a4:b0:72:f6:96:
         2b:70:0b:78:e0:75:67:37:ed:0e:6f:0c:92:e7:54:02:1f:e8:
         76:c3:23:8a:c1:1c:41:f2:2a:9d:9d:54:c9:32:05:fc:ef:d6:
         06:b1:0b:09:46:05:e5:71:00:74:ca:a5:0c:99:6c:13:1f:6d:
         06:bc:8a:a0:03:59:1b:e2:4b:1d:c0:b5:15:e1:10:e3:ea:f6:
         e0:9d:fb:90:43:f3:21:3c:53:db:69:af:d1:0d:3b:f5:6c:41:
         6f:22:fd:8a:71:27:99:28:b7:83:a0:f6:47:5e:2b:d0:88:c4:
         dd:5c:16:a2:cd:c2:d3:3b:01:90:84:a3:cc:c6:17:36:7c:25:
         f1:fe:71:f8:ff:d4:f7:6a:5a:8a:3c:3f:9c:97:7a:bd:07:aa:
         08:ed:9f:df:87:d6:2b:dc:00:cf:e6:67:45:96:92:85:62:b8:
         b6:4a:40:9a:45:cf:61:ec:30:c3:7b:50:56:05:52:99:21:cd:
         7d:f6:c2:cb:6b:6e:fd:84:fe:ea:c1:87:a6:ca:d6:4a:ab:74:
         70:41:f5:df:32:34:ae:4d:98:bb:2f:a0:3c:3f:ac:af:a6:98:
         f6:5c:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:00 2026 by rpki-client