Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File:                     wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier:          ihqWyHL0wyEgRujM5SkZMn88ervm8uJEwO+io1E+o1Y=
Subject key identifier:   5E:18:7C:7A:BD:AC:FD:FD:69:0C:C5:42:02:98:46:24:17:8D:CA:E7
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer:       /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial:       019D9A3E7B015E7F4D530E00D0A5AF0A07C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number:          0817
Signing time:             Fri 17 Apr 2026 07:01:19 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:19 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:19 +0000
Files and hashes:         1: q3u9GktXoLgCZIQQoRw88D77rK0.roa (hash: Wq1luHTlsjej4HJm0sE4531JEh3otjUKEdcgSuym7L0=)
                          2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: qR15hHXI/Mjw80Cw+9rNZbB+zIGcqFWak0hdFs7RjMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:7b:01:5e:7f:4d:53:0e:00:d0:a5:af:0a:07:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
        Validity
            Not Before: Apr 17 07:01:19 2026 GMT
            Not After : Apr 18 07:01:19 2026 GMT
        Subject: CN=5e187c7abdacfdfd690cc54202984624178dcae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:00:b7:e7:e3:a3:1e:ba:00:8b:cc:2a:bc:87:
                    1c:8b:46:5c:fe:66:2e:64:db:16:ff:74:3a:af:00:
                    1e:0c:20:1e:e3:f3:60:ba:45:34:98:c8:3b:2c:2c:
                    62:8e:21:57:3a:e8:b9:c4:f5:f9:34:31:7b:4f:87:
                    de:e7:eb:98:9d:35:30:46:89:2c:83:6c:c8:73:7d:
                    0e:8a:4d:0d:a6:77:a7:b2:66:c8:c7:1a:a0:02:15:
                    bb:96:70:4a:73:3c:e5:2e:69:a0:1d:06:60:f1:b1:
                    93:e7:78:79:3b:d8:e4:a1:75:49:d2:7c:bf:23:d8:
                    76:95:18:c4:1f:78:7e:00:18:46:34:68:80:49:ab:
                    bd:8d:51:61:4b:53:c2:a6:11:4c:c7:33:2c:04:b6:
                    bd:ff:8c:33:3c:e0:2b:aa:67:39:07:ef:fd:15:39:
                    8a:f7:e9:31:82:4a:c2:bd:ab:de:9b:7f:ca:23:67:
                    9f:34:fa:6f:30:f1:10:ea:6f:79:7b:7c:b6:de:49:
                    78:5c:3d:69:ca:22:b7:a7:70:a8:7b:c1:1c:81:d9:
                    3e:eb:6b:a9:c6:a2:ae:19:8f:54:5f:77:23:58:bc:
                    26:ca:79:01:f4:e4:8e:d2:d5:55:2f:e9:bb:26:ee:
                    22:84:95:f3:8e:bd:07:66:7f:08:8a:10:87:c9:a4:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:18:7C:7A:BD:AC:FD:FD:69:0C:C5:42:02:98:46:24:17:8D:CA:E7
            X509v3 Authority Key Identifier:
                keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:9b:ba:32:9b:8c:04:e9:67:8a:30:6b:e7:07:94:c5:34:08:
         5e:44:22:f6:6f:89:19:da:06:49:42:5a:6b:10:b3:28:4a:78:
         55:6d:42:59:6f:e7:b7:b2:1a:ba:4c:f1:20:88:bc:cb:53:e5:
         c7:61:68:b7:c3:cf:40:07:ca:6d:65:31:32:01:8c:a7:1e:9f:
         49:9b:c9:8b:1f:b1:9e:4b:f7:fb:d5:f9:0c:9d:ee:e3:33:1f:
         bc:06:6e:37:cc:26:05:9f:c2:7a:a6:e7:c0:01:65:fa:37:2f:
         e9:d2:f4:28:42:4d:c0:98:c8:47:60:ae:cd:e8:9c:f9:2b:6a:
         07:62:ae:51:9f:d5:b8:e0:69:61:d9:8c:a4:94:a0:e4:9b:dc:
         8f:96:32:33:ec:56:3a:c0:83:9f:15:2a:fc:66:2b:10:08:a1:
         50:55:5f:27:03:bf:2c:92:cc:2d:0c:d2:5c:50:f1:03:51:0f:
         4e:36:4b:04:5a:8c:44:2e:d5:03:4c:c9:bf:3a:b7:af:a6:1b:
         34:29:6e:cd:22:1d:e0:a5:e3:55:68:34:63:01:f9:99:85:d4:
         fd:36:21:54:4c:cd:9f:e8:cc:29:d1:3c:d0:f4:77:2b:ed:fb:
         f7:cc:be:47:15:ef:14:2f:bb:46:50:f0:9c:5b:ee:e3:03:fa:
         35:8b:0d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:04:38 2026 by rpki-client