Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
File:                     wbYHxYUVNn03yfPmmUguV6M8c_U.mft (raw, json)
Hash identifier:          VKZujp/VM4yeFo9czLpQw/ktM4nDGCsqEqJjz+6fu7I=
Subject key identifier:   11:E3:96:B0:F8:5E:B0:E2:2C:D9:DB:68:A3:9F:D3:F1:DE:74:64:D6
Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5
Certificate issuer:       /CN=c1b607c58515367d37c9f3e699482e57a33c73f5
Certificate serial:       019D9AE3A40D1FC8B4BB1CE719916107B143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
Manifest number:          15CF
Signing time:             Fri 17 Apr 2026 10:01:43 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:43 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:43 +0000
Files and hashes:         1: luaG9iyuGP8nFZp85aiqtsp0z2c.roa (hash: 9QToNx/tKXCeA3T2RqIfOvqid+nCt4rK1QL6hXksot8=)
                          2: wbYHxYUVNn03yfPmmUguV6M8c_U.crl (hash: YwV6vPKUoCrUk98dgXHJ/XWhfRSqbrO73VJZx6KFQQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:a4:0d:1f:c8:b4:bb:1c:e7:19:91:61:07:b1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5
        Validity
            Not Before: Apr 17 10:01:43 2026 GMT
            Not After : Apr 18 10:01:43 2026 GMT
        Subject: CN=11e396b0f85eb0e22cd9db68a39fd3f1de7464d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:33:4c:5a:67:90:dc:3a:a1:b7:35:af:c3:2e:
                    7a:f0:c5:cd:f4:ec:76:6c:f1:81:26:37:ad:29:9a:
                    ba:15:18:bf:03:61:9a:c7:56:de:5b:8b:46:2c:0f:
                    6f:aa:a4:cb:55:22:48:13:15:67:d6:c4:32:b4:ff:
                    ae:4d:11:67:d0:23:d9:52:6c:c1:02:86:5e:4e:17:
                    b7:27:2b:4e:c5:d5:96:41:31:7b:1c:47:79:f9:c1:
                    02:64:31:e4:38:5e:98:68:81:cc:00:ee:3a:55:c2:
                    66:7c:e5:97:be:1d:c2:4e:63:0f:27:91:c2:a1:f8:
                    94:81:21:cb:8d:82:fd:fb:fc:76:28:43:53:00:94:
                    13:77:ae:ec:5c:31:76:6b:66:2f:23:ee:d4:d9:05:
                    4b:07:9b:c0:fc:52:4e:b9:6b:28:f1:59:52:64:5b:
                    d8:30:c4:13:8f:0b:d0:d3:b7:38:d0:42:e1:b9:ec:
                    09:77:d3:35:1a:73:43:c2:fe:04:44:1a:ba:11:7e:
                    99:37:2d:e6:35:b3:44:d1:e9:a7:2f:ff:33:6b:ad:
                    e8:4f:3e:7b:05:a3:99:b1:dd:fc:f2:e3:b4:e7:79:
                    61:56:5d:51:91:33:70:02:07:81:be:ad:7d:41:19:
                    33:0f:3a:0b:65:bd:e4:e3:8c:f2:1c:48:22:ca:ae:
                    5c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E3:96:B0:F8:5E:B0:E2:2C:D9:DB:68:A3:9F:D3:F1:DE:74:64:D6
            X509v3 Authority Key Identifier:
                keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:57:30:dd:50:e4:62:5c:cb:78:94:24:65:a7:07:20:66:f5:
         a0:a4:37:40:98:db:a4:3a:f1:cd:7f:68:9a:1f:b4:80:d5:a1:
         ea:89:9d:9c:04:36:79:ea:2e:4e:21:9f:bf:fe:f5:ae:d8:cf:
         23:39:69:13:d6:80:0b:17:30:c1:31:39:20:cf:4c:cf:d5:d6:
         3f:75:c6:ec:9a:5c:db:6e:54:29:6a:8d:4d:1e:82:ba:95:3a:
         84:d1:6a:ee:43:7d:e9:72:b0:22:f6:df:c9:af:c4:9d:61:e1:
         1b:2f:59:db:77:ae:76:44:81:3b:07:94:70:f8:13:5b:15:fb:
         32:d1:94:9e:2d:b5:20:0f:cd:11:dc:8a:4f:47:09:e1:92:69:
         5c:20:db:5c:d2:0a:dd:10:68:8b:c7:8a:e8:e0:d2:e1:63:43:
         ec:43:73:af:3a:80:3e:e2:46:d3:61:ec:30:4d:f7:63:6a:29:
         f7:87:57:26:b0:01:47:99:61:07:04:64:62:a1:2b:37:ae:09:
         06:6b:e9:79:a0:ab:e9:ab:0c:70:3e:74:73:1c:d3:cb:db:b0:
         f8:b5:64:e4:80:95:6c:8d:59:4a:c3:e6:2b:98:1e:3b:3e:b7:
         6b:6e:2a:b5:ae:fe:dc:b2:b8:3a:80:87:25:51:76:6e:1e:1c:
         75:da:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:11 2026 by rpki-client