Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File:                     WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier:          TOa+QJwLwROxIB6T9WOlxOOcnR8yAiz+p6dg2ate1Ck=
Subject key identifier:   58:35:F9:91:E5:2A:9D:F9:DF:3B:0B:43:ED:0A:E6:80:91:E6:9A:E5
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer:       /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial:       019DA3E6DDE3DC78335F5953E7CC6B533A4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number:          18CC
Signing time:             Sun 19 Apr 2026 04:01:49 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:49 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:49 +0000
Files and hashes:         1: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: nxezWvxyN8F9Ld7XWyJeva6jFxjFiu2DqdSIPW917EM=)
                          2: dh3-sHMeGbUF9c787oQeIrR3cvo.roa (hash: cq7zvKxoUoXgAO8e6Ng0dFBUcSjnfzShtC4FRcWx5UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:dd:e3:dc:78:33:5f:59:53:e7:cc:6b:53:3a:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
        Validity
            Not Before: Apr 19 04:01:49 2026 GMT
            Not After : Apr 20 04:01:49 2026 GMT
        Subject: CN=5835f991e52a9df9df3b0b43ed0ae68091e69ae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:df:9d:bb:b6:0a:38:13:0e:45:cc:1f:0e:
                    38:8d:a5:7f:26:ba:fd:6d:b9:91:57:56:5f:83:a0:
                    00:11:a5:6b:52:e4:b2:87:9b:10:4f:67:c4:ce:a6:
                    c6:f0:9e:3e:16:86:08:15:50:09:96:3f:52:13:83:
                    ee:ff:0b:76:c5:73:bc:6f:de:a9:c1:fd:56:00:f7:
                    e7:75:f9:45:5d:17:a5:98:ec:96:69:3f:d1:12:fc:
                    f6:63:ac:b8:50:ba:b8:85:56:6a:7e:45:58:52:64:
                    93:ce:80:25:85:8c:a5:13:ea:d7:88:01:63:46:62:
                    b3:cf:08:ed:cd:2b:12:f7:f0:e6:76:db:45:1e:16:
                    66:fc:ed:5c:ac:34:17:55:1e:52:eb:61:9f:64:d5:
                    37:ae:49:a6:e8:6f:3a:9e:eb:ef:85:42:30:8c:c6:
                    ce:af:f9:3d:df:cc:0a:31:fe:12:5b:fe:ff:6e:c5:
                    b2:66:2e:b8:45:5e:39:0f:07:ec:f1:fa:81:e5:eb:
                    d1:b3:e5:cb:8d:7c:33:25:5e:f6:c0:18:94:a3:2b:
                    38:42:89:a3:bb:a2:89:f2:25:03:26:c3:c8:be:59:
                    c3:58:42:f0:ad:c4:a0:71:2b:bb:8b:d4:7d:d3:a5:
                    16:c7:43:12:06:54:9e:1b:7a:83:32:69:e1:49:e0:
                    ae:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:F9:91:E5:2A:9D:F9:DF:3B:0B:43:ED:0A:E6:80:91:E6:9A:E5
            X509v3 Authority Key Identifier:
                keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5c:20:55:4d:2e:a1:e5:44:b0:d5:e3:77:96:fc:77:54:01:
         6c:c0:a0:d8:4d:08:85:43:ab:82:d3:cb:e7:54:2f:f7:af:7c:
         c6:ac:39:57:79:56:4a:8e:63:d5:a2:1a:e3:00:c3:e3:66:49:
         98:c1:ed:a7:19:58:7b:5d:a8:3d:c7:c0:81:fe:f7:da:c4:c5:
         3d:cd:7b:5f:58:48:c0:8a:2b:18:c4:3a:03:b3:07:cb:27:26:
         f7:6e:d5:84:d2:fb:8d:ca:d8:ef:70:a2:5d:52:8b:e7:fd:77:
         ac:15:13:f7:3a:db:10:d1:95:67:4a:f0:84:d8:ed:02:e0:8f:
         cd:b2:6c:e9:be:a9:dc:3e:33:0f:8c:f4:bb:5a:2f:a4:3b:14:
         ca:83:86:c9:7b:99:02:8f:0d:8e:60:d2:09:fb:81:a3:62:79:
         f4:1c:9d:65:51:74:d6:3e:96:c6:b8:c5:d8:4f:04:a6:12:8e:
         20:ab:de:57:0d:57:72:f1:df:d0:ba:16:b1:2d:76:b7:84:e6:
         27:1e:ba:09:8d:da:d8:74:56:9c:fd:bb:a2:9c:fc:15:1f:f0:
         6e:37:01:5e:77:37:b8:67:2b:7e:03:cd:23:de:35:4b:03:25:
         7a:60:85:0d:c5:b7:48:f0:58:b4:62:60:80:38:c2:98:e9:0c:
         57:1e:cf:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2j5t3j3HgzX1lT58xrUzpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NjMyOWYzMDdiOTgyODViNzFkMjJjNzE5N2VjMTliNzAx
ZGVkNjcwHhcNMjYwNDE5MDQwMTQ5WhcNMjYwNDIwMDQwMTQ5WjAzMTEwLwYDVQQD
Eyg1ODM1Zjk5MWU1MmE5ZGY5ZGYzYjBiNDNlZDBhZTY4MDkxZTY5YWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruTfnbu2CjgTDkXMHw44jaV/Jrr9
bbmRV1Zfg6AAEaVrUuSyh5sQT2fEzqbG8J4+FoYIFVAJlj9SE4Pu/wt2xXO8b96p
wf1WAPfndflFXRelmOyWaT/REvz2Y6y4ULq4hVZqfkVYUmSTzoAlhYylE+rXiAFj
RmKzzwjtzSsS9/DmdttFHhZm/O1crDQXVR5S62GfZNU3rkmm6G86nuvvhUIwjMbO
r/k938wKMf4SW/7/bsWyZi64RV45Dwfs8fqB5evRs+XLjXwzJV72wBiUoys4Qomj
u6KJ8iUDJsPIvlnDWELwrcSgcSu7i9R906UWx0MSBlSeG3qDMmnhSeCucwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg1+ZHlKp353zsLQ+0K5oCR5prlMB8GA1UdIwQY
MBaAFFhjKfMHuYKFtx0ixxl+wZtwHe1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dNcDh3ZTVnb1czSFNMSEdYN0JtM0FkN1djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAt
ZTBlNGJlNjY5NmY5LzEvV0dNcDh3ZTVnb1czSFNMSEdYN0JtM0FkN1djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAtZTBlNGJlNjY5NmY5
LzEvV0dNcDh3ZTVnb1czSFNMSEdYN0JtM0FkN1djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlwgVU0u
oeVEsNXjd5b8d1QBbMCg2E0IhUOrgtPL51Qv9698xqw5V3lWSo5j1aIa4wDD42ZJ
mMHtpxlYe12oPcfAgf732sTFPc17X1hIwIorGMQ6A7MHyycm927VhNL7jcrY73Ci
XVKL5/13rBUT9zrbENGVZ0rwhNjtAuCPzbJs6b6p3D4zD4z0u1ovpDsUyoOGyXuZ
Ao8NjmDSCfuBo2J59BydZVF01j6WxrjF2E8EphKOIKveVw1XcvHf0LoWsS12t4Tm
Jx66CY3a2HRWnP27opz8FR/wbjcBXnc3uGcrfgPNI941SwMlemCFDcW3SPBYtGJg
gDjCmOkMVx7P5g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:02:56 2026 by rpki-client