Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
File:                     wtgszwyN6n1_atcujmJGLXviDVY.mft (raw, json)
Hash identifier:          5suF6w6jHpO8w8aLvhc5w6IldD5IgKmmHgZzVT4inV8=
Subject key identifier:   17:7F:E7:76:12:39:57:22:A9:D4:D7:F2:7D:8D:37:8D:31:80:DF:F1
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       019D9AABB084690268A62458013F3B2B41CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
Manifest number:          18CA
Signing time:             Fri 17 Apr 2026 09:00:36 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:36 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:36 +0000
Files and hashes:         1: YFh9-2nTeDmUHEyrVn852pFgnwo.roa (hash: yyThjzHGK9fG9mEurU44rgO6nvdWGooy3WaBaE5pipY=)
                          2: e-XOnC-I_poqKVcu-oTCyL0Qmz8.roa (hash: c2RKRL7A/fU0mRm1zb8DuJEx4OgsR06sHWdY9eY+h7M=)
                          3: wtgszwyN6n1_atcujmJGLXviDVY.crl (hash: HsO+Z6+lZKeq+KoIn/5R362JJLQv7pDS0F2B61gc/LA=)
                          4: xedrbfhupLPmqrs2cnazcNbuQ6s.roa (hash: Y/EDgTZimwkgVMZ0kvboCaG04PSLtb5uHoL17HArkIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:b0:84:69:02:68:a6:24:58:01:3f:3b:2b:41:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Apr 17 09:00:36 2026 GMT
            Not After : Apr 18 09:00:36 2026 GMT
        Subject: CN=177fe77612395722a9d4d7f27d8d378d3180dff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:fa:cd:df:d7:34:6f:78:f1:f7:b6:8e:ff:
                    1a:06:ba:05:8f:88:40:a1:10:f2:f6:9f:f5:1f:9e:
                    6e:7f:9e:c9:34:0e:5d:68:7b:62:5c:5a:84:20:8c:
                    90:40:d2:7c:03:06:df:37:6b:06:88:7a:95:b1:8c:
                    c8:dd:03:ff:2e:10:5e:d1:ff:8b:e2:1b:75:01:c8:
                    91:7d:f2:ad:0e:09:1e:fc:2e:2b:d4:09:78:46:dc:
                    0a:28:1c:30:64:1d:4a:4c:78:e4:ae:2b:ce:a9:0a:
                    71:a4:55:c0:b0:d2:7d:34:ba:64:fb:a8:13:d2:1c:
                    22:fa:85:52:5b:69:96:25:5e:3e:a6:5b:2f:07:10:
                    71:a5:9b:71:9a:35:bd:a3:e5:65:d0:a6:b8:d3:30:
                    da:1b:ee:10:17:5e:4c:a9:9d:fc:17:d2:3b:86:fc:
                    72:d8:7f:e7:3b:d5:03:f8:ea:72:dd:3f:a0:43:6d:
                    f9:75:bd:81:c5:be:a0:b8:e6:1a:4b:64:67:30:3d:
                    a6:e4:a1:76:60:0d:b1:1a:06:87:2b:91:fe:51:ec:
                    23:be:51:af:df:7a:49:b9:79:03:ae:83:04:59:df:
                    47:e6:54:1e:09:97:68:bb:c1:06:30:7d:5c:f6:b4:
                    7a:78:09:d4:ac:a0:84:bd:77:8b:8d:63:23:34:6f:
                    4c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7F:E7:76:12:39:57:22:A9:D4:D7:F2:7D:8D:37:8D:31:80:DF:F1
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:f5:65:d8:9c:8e:30:37:47:bd:e3:9c:62:05:a4:f9:27:51:
         e6:12:e2:04:e8:69:0d:97:11:45:3e:bf:d6:7c:77:77:58:8e:
         f2:ab:48:da:a5:4a:cb:73:9c:fa:b0:be:c3:5f:4b:fc:bd:4d:
         dc:d7:91:ef:2d:53:fb:fd:d8:e3:5e:8e:a8:20:07:c1:63:47:
         96:62:0f:b4:bc:fe:aa:70:13:e2:06:82:d0:73:d5:b7:8e:24:
         0d:df:c0:fd:75:9d:93:f8:8b:19:23:b2:97:13:47:4f:f9:8a:
         99:ba:82:9c:56:49:22:21:24:94:66:6b:8a:5a:a1:dc:e4:27:
         73:0d:e8:bf:d2:3a:34:de:33:a4:ea:ed:cd:85:35:02:d6:96:
         f5:66:36:4d:ce:c2:7b:6a:ee:ec:b7:aa:db:88:4b:53:63:b1:
         bf:06:43:49:c2:57:89:86:8c:00:2e:27:4f:90:51:6a:0b:3d:
         fa:10:1f:94:98:30:82:35:c5:40:fd:9a:e8:f4:04:46:51:e6:
         26:36:02:2c:bc:c8:31:aa:d7:ac:6c:84:3f:c9:34:85:ef:d5:
         e3:c0:4d:49:ab:0e:54:39:fb:9c:65:51:09:57:62:dc:07:ff:
         7d:cd:77:5d:10:21:93:38:25:51:53:41:40:f7:05:d7:54:31:
         c9:d7:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:02:53 2026 by rpki-client