Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
File:                     Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft (raw, json)
Hash identifier:          Co/wqDofza7rVcpHCdB5/BKAA87pYAhdvkzQCOkvLJQ=
Subject key identifier:   6D:0E:E4:91:CE:4D:72:22:0F:31:C2:46:AB:EC:A6:D3:E4:48:8A:13
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       019D98BDC17E97A1F3D4D481069DF692B91D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
Manifest number:          092D
Signing time:             Fri 17 Apr 2026 00:01:05 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:05 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:05 +0000
Files and hashes:         1: EdVO9FKaVINf4-EcfDH2n-UZXgI.roa (hash: dwVT4CPLLp3oBHUxJmbUMjoihn96t4N47NrHTtml6ac=)
                          2: MaHcS05o3WBeZOrNVbnsOPGuJZk.roa (hash: hWXPAtBNsAo9ZPaQbHx34drt2IC8j3ryox2B1+pnB+E=)
                          3: NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa (hash: 0+UTjLVBfjPCy7oBImPLDU8M26qc7pRRuIqY0xDLdrA=)
                          4: Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl (hash: qpzBfT4EGqY2+wl6C4NN531jf9XsbDD3Ew44ZYKR9dc=)
                          5: ybipZwfesbQV__aPxuV5d5A89PY.roa (hash: Y2ObOEWw+FxcDxPbeDirQ1ndGcwUsmZzdYgHyDiU8K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:c1:7e:97:a1:f3:d4:d4:81:06:9d:f6:92:b9:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Apr 17 00:01:05 2026 GMT
            Not After : Apr 18 00:01:05 2026 GMT
        Subject: CN=6d0ee491ce4d72220f31c246abeca6d3e4488a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:57:90:9a:07:8c:41:78:c6:9f:07:e7:e8:
                    a9:57:a7:16:ed:63:b3:fe:3e:8c:1c:87:26:7d:45:
                    50:a3:ad:91:e9:78:a8:71:78:fe:11:e9:b8:0b:ab:
                    fd:c7:df:e8:51:62:19:70:76:be:26:cf:ab:29:b8:
                    60:f0:7b:c4:7f:7a:80:69:af:4e:0a:7d:0b:b4:11:
                    47:48:e1:27:66:d9:21:d2:a9:7d:bb:64:32:f3:b0:
                    d0:9d:20:b9:b2:55:eb:89:5c:a2:f8:22:4a:25:09:
                    91:a1:f2:8b:d4:05:8e:07:cc:7a:fa:26:f4:c0:ec:
                    5d:08:ea:6a:39:b5:7c:4b:c1:15:dc:ea:02:8f:11:
                    c2:ca:e2:c6:3f:90:b1:6b:7f:97:f1:b5:a2:d9:ff:
                    0c:bd:13:21:14:67:8c:c9:f6:97:99:38:3e:ec:60:
                    8c:c9:84:71:6f:39:59:5e:65:25:d1:30:b6:2b:8f:
                    3b:f7:48:d8:fb:bb:c5:35:de:fe:b4:32:e0:b9:91:
                    b0:d5:24:f4:02:1e:3f:d3:bb:07:f8:bc:be:0b:dd:
                    ae:38:1b:ef:f7:4f:0b:1a:04:85:51:d0:e2:9f:e2:
                    bb:0c:8e:9c:1a:ef:66:de:39:db:39:31:67:d6:c5:
                    05:04:25:53:4f:24:f3:c0:dd:d7:da:60:f8:ae:c5:
                    0a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0E:E4:91:CE:4D:72:22:0F:31:C2:46:AB:EC:A6:D3:E4:48:8A:13
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:63:29:88:6c:e4:c0:a7:07:22:87:6d:c8:3b:b5:de:1c:3d:
         7f:a6:49:87:f0:74:7c:44:c1:1f:99:bc:8c:85:b6:5d:64:81:
         bd:b8:f5:18:07:e5:dd:d3:fe:77:9b:98:03:be:f4:f0:6a:6a:
         b6:8e:dc:9d:87:1c:05:40:a1:60:ff:83:eb:09:b5:00:bf:0e:
         a5:88:cf:cb:a5:a8:b9:02:97:a0:92:d9:eb:31:37:0f:d8:bf:
         cd:c8:ec:a6:de:41:1b:60:22:d4:47:27:f4:f2:e4:2a:87:99:
         e8:36:1f:de:97:7c:1f:a0:e5:e5:51:dd:d7:d5:06:07:a8:67:
         27:de:a8:30:8a:ce:a8:c8:13:cf:40:cf:03:70:39:98:ad:6b:
         7d:01:f9:84:88:b8:c3:4b:e5:78:6b:50:89:63:74:39:d8:a6:
         af:33:8c:dc:2c:e6:a1:0b:a3:89:6f:ec:a4:91:e0:7b:9d:0a:
         4c:47:81:64:d1:fe:46:16:62:c6:0e:a4:31:62:7f:9a:a1:fd:
         e7:ab:d6:15:6b:72:32:50:e0:1a:4c:0f:13:7d:87:73:59:47:
         6a:17:25:08:f5:4b:bf:10:b8:53:d9:5e:d8:66:f9:78:82:44:
         01:d3:c9:1d:cd:73:b8:24:fa:09:57:32:fa:3e:96:9e:cf:d5:
         41:d5:6f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvcF+l6Hz1NSBBp32krkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDg3ZDFkYzk4ZTI2ZTRjOTU5ZDA5ZjYxNDZkN2ZkZjg2
OWU0ZmMwHhcNMjYwNDE3MDAwMTA1WhcNMjYwNDE4MDAwMTA1WjAzMTEwLwYDVQQD
Eyg2ZDBlZTQ5MWNlNGQ3MjIyMGYzMWMyNDZhYmVjYTZkM2U0NDg4YTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8FXkJoHjEF4xp8H5+ipV6cW7WOz
/j6MHIcmfUVQo62R6XiocXj+Eem4C6v9x9/oUWIZcHa+Js+rKbhg8HvEf3qAaa9O
Cn0LtBFHSOEnZtkh0ql9u2Qy87DQnSC5slXriVyi+CJKJQmRofKL1AWOB8x6+ib0
wOxdCOpqObV8S8EV3OoCjxHCyuLGP5Cxa3+X8bWi2f8MvRMhFGeMyfaXmTg+7GCM
yYRxbzlZXmUl0TC2K48790jY+7vFNd7+tDLguZGw1ST0Ah4/07sH+Ly+C92uOBvv
908LGgSFUdDin+K7DI6cGu9m3jnbOTFn1sUFBCVTTyTzwN3X2mD4rsUKrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0O5JHOTXIiDzHCRqvsptPkSIoTMB8GA1UdIwQY
MBaAFFsIfR3JjibkyVnQn2FG1/34aeT8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMt
MDlkYmQwOGNiZTJkLzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hOWEwNmUtNjlhYy00NWNlLWJhZGMtMDlkYmQwOGNiZTJk
LzEvV3doOUhjbU9KdVRKV2RDZllVYlhfZmhwNVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2MpiGzk
wKcHIodtyDu13hw9f6ZJh/B0fETBH5m8jIW2XWSBvbj1GAfl3dP+d5uYA7708Gpq
to7cnYccBUChYP+D6wm1AL8OpYjPy6WouQKXoJLZ6zE3D9i/zcjspt5BG2Ai1Ecn
9PLkKoeZ6DYf3pd8H6Dl5VHd19UGB6hnJ96oMIrOqMgTz0DPA3A5mK1rfQH5hIi4
w0vleGtQiWN0OdimrzOM3CzmoQujiW/spJHge50KTEeBZNH+RhZixg6kMWJ/mqH9
56vWFWtyMlDgGkwPE32Hc1lHahclCPVLvxC4U9le2Gb5eIJEAdPJHc1zuCT6CVcy
+j6Wns/VQdVvoQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:45:15 2026 by rpki-client