Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          u9ZXb8eUPwhebOvgahstkf7SY3P+gXDEGnf9I0icehI=
Subject key identifier:   00:13:F6:28:17:60:3E:9A:D4:10:45:6B:BF:5D:B6:3C:B5:28:73:89
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       019DA45436ACF6EF150EA5528571FB7B8551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          18D6
Signing time:             Sun 19 Apr 2026 06:01:15 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:15 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:15 +0000
Files and hashes:         1: 7rlFWVvMWKLAs_-CwEfFx1HBnYY.roa (hash: Pq6qLtXzClwLxML1ozcVt+Ip73JNmGPve9pIBAJv6IA=)
                          2: Fb1LxadIV7oBDqCNnGTm-OSYcpU.roa (hash: Fl5GSOOt62GrdSA1DfCyrlVCI+6NRse3s+pMK1jPEng=)
                          3: jYY_ixTwgJOc5Fm5bCXMoT8UKbs.roa (hash: +muUSZsgKVwKKY94l/X1a1ye28aD1e0NYwivFYV1wxQ=)
                          4: q5DJrkGpFtBRVSTiER6qubZrzwg.roa (hash: d2oZQywAG8/Q2HF8swgC8YVUSDiFpeqcb9GLnII1M0c=)
                          5: rMdXeptRpu0Pt2xvscICCvTvL1w.roa (hash: /3qPf2GIjkHB+ECKNRa9eV5BXy6n4Np+NAUC/iSaKqg=)
                          6: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: 98Gbn8HBP7zgfFaf3vchPQarepJHxUDkvZnJktCn77U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:36:ac:f6:ef:15:0e:a5:52:85:71:fb:7b:85:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Apr 19 06:01:15 2026 GMT
            Not After : Apr 20 06:01:15 2026 GMT
        Subject: CN=0013f62817603e9ad410456bbf5db63cb5287389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:67:a4:28:5f:65:d8:73:f6:ab:77:b8:27:d2:
                    2e:9b:b4:34:34:d4:91:00:05:f7:c1:06:a6:52:86:
                    5a:bf:c1:7d:c2:2a:d6:5f:ee:7e:a6:6b:3f:26:19:
                    2f:be:cb:47:69:10:e9:67:94:52:dc:36:64:bb:36:
                    22:f3:23:ff:e9:9a:3c:1b:2c:78:43:a5:04:52:1a:
                    fb:1f:ba:e7:c5:f9:df:0e:8a:97:3c:84:72:22:73:
                    8a:3c:35:e7:c2:2c:df:13:1c:cb:9c:fc:ec:3b:24:
                    1b:2d:95:27:cf:41:83:9e:dd:2f:4a:5d:5a:4a:55:
                    77:91:37:69:9c:4b:7e:17:6f:a3:43:94:d2:59:a9:
                    51:33:40:67:c7:8d:7a:3f:1b:28:9b:7f:bd:60:88:
                    25:8f:70:b6:66:83:d7:b4:0c:82:7e:a2:6a:07:ce:
                    25:38:87:00:4f:f7:5b:84:b5:7d:3a:1b:20:a9:82:
                    f6:ce:6a:73:75:8d:4a:9e:bb:21:46:26:f8:bc:ce:
                    c4:c8:68:1d:cf:85:4c:ed:39:f3:33:e4:3c:f6:92:
                    e9:64:a4:b3:5a:03:e7:2f:21:c7:10:9c:40:c4:c8:
                    ed:d0:eb:cc:8e:69:c5:91:a5:10:6a:7d:e4:e2:b5:
                    11:76:88:1b:00:be:7b:09:92:38:13:f5:4e:81:22:
                    64:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:13:F6:28:17:60:3E:9A:D4:10:45:6B:BF:5D:B6:3C:B5:28:73:89
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:bc:bf:6d:bd:d0:30:3f:e1:44:f7:1f:e3:23:31:25:47:77:
         e5:0b:8a:77:9d:9e:2e:0c:38:68:4e:d4:65:a5:80:a1:3a:f9:
         ad:97:66:fa:f7:f7:47:17:98:d3:45:92:64:9a:95:eb:6e:db:
         1f:a0:48:f8:be:03:50:00:d0:3f:39:e6:99:91:a1:84:bb:23:
         ba:19:18:6d:c7:b6:d0:16:4b:4e:8b:0b:28:a9:f5:7d:c6:75:
         ec:04:1a:0d:dc:72:b6:45:17:fd:e7:80:e7:1b:71:c3:29:70:
         86:51:51:ff:7f:b7:68:db:26:57:d8:30:dd:75:a3:ad:a7:53:
         79:d2:1f:d6:4a:4b:6c:92:a6:a0:d7:03:44:48:47:d6:9f:1d:
         50:e0:af:f8:70:20:54:9f:d4:da:ce:49:6c:75:d9:bb:5c:ab:
         eb:ec:d3:b5:32:a4:8f:29:43:25:fc:a7:4c:4e:ba:42:9f:59:
         37:0b:2f:73:e9:73:68:fd:09:6e:97:11:d5:b8:31:88:fd:2e:
         27:8d:bc:0f:46:ad:ae:94:af:11:cf:4c:f3:4e:38:d6:08:d3:
         78:fa:65:b7:dd:a0:1a:78:d5:8d:1b:c0:50:ee:f8:fa:e0:e4:
         ce:0e:6e:19:43:2d:df:64:e2:c4:54:d8:d6:ea:06:64:2a:8b:
         36:dc:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:19:19 2026 by rpki-client