Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
File:                     Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft (raw, json)
Hash identifier:          rk/awen//eT5R0aXnZLhVkwrJkEQB+qHEKbVuCbmg4E=
Subject key identifier:   C9:96:67:67:01:5C:41:E4:F3:FC:A5:57:8E:83:48:A5:42:FC:A9:18
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Certificate issuer:       /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial:       019DA3E6F34551902C9BF28F22A29F7E0F8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
Manifest number:          0821
Signing time:             Sun 19 Apr 2026 04:01:54 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:54 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:54 +0000
Files and hashes:         1: Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl (hash: KMBgGbdJ4mQTDltnKT7EQGOoAOSXTnGxcU4U36z8UHU=)
                          2: vskKnMst18EVmBm6lBj0YzIpNuk.roa (hash: jTxDQ4a1vled+k24Z+iZwB1mJUNUMg7H5qSldRSueFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:f3:45:51:90:2c:9b:f2:8f:22:a2:9f:7e:0f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
        Validity
            Not Before: Apr 19 04:01:54 2026 GMT
            Not After : Apr 20 04:01:54 2026 GMT
        Subject: CN=c9966767015c41e4f3fca5578e8348a542fca918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a6:f2:50:2f:ac:d6:b1:20:b8:3d:86:93:e4:
                    e5:5c:cf:5d:e6:f3:78:98:d5:24:a8:87:bc:46:05:
                    a8:3a:0b:a2:f9:d4:37:13:9b:62:6f:d5:7d:cb:34:
                    24:32:dd:58:c3:b5:22:0e:62:37:89:32:a2:0d:f8:
                    13:ff:65:07:a4:5b:b2:46:ab:6a:c4:b9:16:61:48:
                    ed:06:83:13:d3:50:86:b4:f0:a4:c5:8a:4d:2f:78:
                    ed:27:5d:0d:ed:80:92:9e:92:cb:40:4c:9c:16:4e:
                    da:62:af:ca:69:88:32:1b:82:f5:da:8a:3a:0c:9f:
                    d8:0a:de:29:8f:43:d6:42:ac:1c:74:fc:8e:2a:82:
                    6d:0c:be:05:74:4d:e5:21:14:15:5e:2e:80:5d:87:
                    13:9b:bc:64:7e:cf:c2:9f:6f:f3:5d:85:11:00:9d:
                    b4:71:5c:f8:a2:ed:11:e3:05:61:e4:1c:0c:35:02:
                    30:ff:c1:dc:46:4f:ba:b7:0c:64:68:2d:cb:a4:3d:
                    52:fd:ee:0e:e9:d1:f1:53:b8:17:21:2c:33:18:d1:
                    57:ee:68:a4:5b:1e:17:2e:35:b6:7f:4f:a5:1a:a8:
                    e6:76:02:74:8f:7b:80:94:76:e8:25:8c:8e:96:44:
                    47:0b:86:26:bc:86:55:69:2a:94:6a:88:e9:97:08:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:96:67:67:01:5C:41:E4:F3:FC:A5:57:8E:83:48:A5:42:FC:A9:18
            X509v3 Authority Key Identifier:
                keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:e1:73:e4:f8:15:c7:b5:f7:4e:a2:47:1a:37:37:01:87:
         f2:5c:57:2a:dc:21:1c:98:e8:2d:48:1a:95:51:68:fd:a5:ba:
         0d:37:b5:cc:71:86:09:c9:f3:63:50:08:5c:c2:38:46:25:36:
         c8:84:24:0b:c4:ce:de:74:bf:b5:5d:08:27:4d:c8:ac:8f:59:
         69:82:38:8d:71:c2:39:68:86:2b:03:55:fa:de:3d:b1:8f:aa:
         cd:2e:3f:54:9f:05:be:47:73:b5:95:00:78:e8:a3:74:9a:3c:
         41:87:6e:bd:d1:d4:f1:32:b1:65:62:4f:0c:50:92:ff:97:e6:
         70:18:b9:6b:48:c1:21:55:1a:4e:89:4a:45:1f:e9:35:f7:78:
         e2:e8:d4:90:24:db:4a:17:3e:b1:61:88:8c:33:82:7b:1b:ab:
         46:46:dd:7d:f8:1f:00:82:85:aa:a1:d6:3e:27:25:b6:9f:32:
         44:b0:ac:b1:38:57:09:49:2f:6c:91:ee:64:cf:e7:7a:8d:ac:
         77:14:88:d7:c9:1e:c3:ed:bf:cb:0d:32:53:c9:57:89:1e:28:
         c9:19:9d:7f:4e:44:1c:72:e8:92:19:7a:40:74:03:12:5e:a4:
         40:dc:64:74:64:8e:f6:08:ee:1a:94:f3:de:26:f0:1e:b3:6e:
         a6:be:a5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:35 2026 by rpki-client