Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
File:                     wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json)
Hash identifier:          njTOBSXczgM6UTpJ26mBRCdamCtHCDIX5Ju3KtFHNb8=
Subject key identifier:   10:79:6A:E2:A9:85:06:7C:DD:36:95:46:54:E4:6E:F2:DE:D9:EA:34
Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48
Certificate issuer:       /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
Certificate serial:       019D985074B878CB6E33A3392658235B255C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
Manifest number:          0F4D
Signing time:             Thu 16 Apr 2026 22:01:42 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:42 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:42 +0000
Files and hashes:         1: 1mKr2BYewzXDecj0nNw7rfiYO80.roa (hash: 6ynFOsQcc4+COoSJWkYKLEzNdnYU6AWGSoX2YiGPF3I=)
                          2: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: M2E+2jh37RvXQBw72B9u/iEFJ++pDSkooW6OXeByvro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:74:b8:78:cb:6e:33:a3:39:26:58:23:5b:25:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748
        Validity
            Not Before: Apr 16 22:01:42 2026 GMT
            Not After : Apr 17 22:01:42 2026 GMT
        Subject: CN=10796ae2a985067cdd36954654e46ef2ded9ea34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:d6:b0:91:99:c9:bd:bd:27:6f:00:3e:00:
                    06:71:4e:41:46:bd:ad:16:d6:f8:25:ba:00:46:6c:
                    db:4b:0e:55:61:13:6c:55:b4:9a:a1:4c:fc:1e:fa:
                    8a:c6:a1:b6:bf:ad:3b:25:6b:f8:a6:7c:84:25:a0:
                    77:74:49:ec:b1:f1:8c:2d:95:81:bc:79:d2:a0:6b:
                    76:10:c6:61:04:0d:89:f8:75:1a:27:b1:2b:3b:4b:
                    9e:f8:12:d1:0d:94:7f:df:08:5e:e7:07:a0:29:f8:
                    81:54:2d:48:cc:90:74:15:37:d5:12:02:7c:0c:cd:
                    e5:44:49:d4:0d:9e:17:01:a8:13:ee:29:cc:46:9e:
                    e7:0b:ce:5d:39:0d:8b:69:e3:42:c9:16:5a:aa:11:
                    15:16:10:2f:07:8d:c0:a5:72:b5:b7:e5:63:7d:a5:
                    0e:7a:5a:f3:44:95:89:dc:68:de:93:92:30:ef:b1:
                    e7:21:32:5b:3a:2d:87:f0:ee:22:57:93:d2:e6:2f:
                    d3:5c:93:a6:fd:7c:b6:a4:14:a1:13:b9:28:55:24:
                    58:1a:db:3c:61:b5:dc:2a:83:5a:08:44:50:e3:86:
                    67:75:82:e6:df:86:2c:01:d2:f7:97:b1:57:76:2b:
                    36:21:1a:b6:4d:02:51:99:22:04:2f:a0:4b:7f:ab:
                    f5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:79:6A:E2:A9:85:06:7C:DD:36:95:46:54:E4:6E:F2:DE:D9:EA:34
            X509v3 Authority Key Identifier:
                keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f8:f8:f0:2e:da:b1:93:d6:c2:8d:b4:54:f3:c2:8e:b9:2f:
         4f:a3:a7:7b:4b:a5:11:10:b9:6a:22:e9:c1:e2:40:c0:8e:74:
         90:08:ab:db:e2:76:fb:80:06:68:d1:48:a3:47:aa:c7:60:c0:
         e9:6c:e7:f3:8f:ef:3c:86:87:6c:54:1d:ec:7a:c5:9a:0e:2d:
         21:16:6c:3a:64:be:7e:70:08:b1:1e:d0:a2:34:52:38:b6:d2:
         02:cb:4b:97:50:0e:d6:b3:e8:e1:b1:9b:3e:89:18:c3:0b:a2:
         87:d4:f7:fe:27:22:bd:e1:07:e3:d4:14:85:69:73:c3:e7:2e:
         c9:41:e0:d6:8a:3c:ef:0e:cb:88:c7:67:ae:a9:61:30:f9:9d:
         79:14:2c:53:93:c1:70:5a:62:ef:d9:aa:6b:13:43:2b:b7:e2:
         92:b3:1b:72:67:9f:0d:71:93:a7:43:b3:43:11:6a:bd:32:8d:
         de:2b:76:39:d4:e1:ce:26:ce:12:25:63:33:4a:13:09:96:56:
         7c:32:a3:5f:32:c7:c7:bd:f2:0c:92:96:ba:ec:35:59:59:ab:
         9f:af:92:bb:29:63:b1:0a:df:57:50:83:5f:3d:bb:38:de:18:
         20:37:3b:3c:c8:94:04:ea:20:d9:d5:2c:50:ad:03:2e:45:13:
         42:c4:13:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:10 2026 by rpki-client