Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
File:                     wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft (raw, json)
Hash identifier:          Q/SopkDkN2KvdWXJ4UXYdjzVuLyONOZC1pYCo3jVUqY=
Subject key identifier:   22:18:2D:F6:AF:61:EA:DD:B3:59:9C:3C:78:9B:E5:8D:83:2E:A5:0F
Authority key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4
Certificate issuer:       /CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
Certificate serial:       019D9AAB9A16EA2CB3FAB3D968E1E88B09F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
Manifest number:          05E3
Signing time:             Fri 17 Apr 2026 09:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:30 +0000
Files and hashes:         1: J2ac7yBZ1rddlP4OYM3qXYokeC4.roa (hash: 661rctvmo5buxvwD1rNnJJOMy13YlgHsaEVyiDN+3aA=)
                          2: wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl (hash: Fq5lZTQJrqnmWivy2afpTUdW3VE6g/K2IOhrb1hYzrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:9a:16:ea:2c:b3:fa:b3:d9:68:e1:e8:8b:09:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
        Validity
            Not Before: Apr 17 09:00:30 2026 GMT
            Not After : Apr 18 09:00:30 2026 GMT
        Subject: CN=22182df6af61eaddb3599c3c789be58d832ea50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:52:ab:f9:5c:dc:5e:a7:34:3c:b3:cd:2f:
                    83:80:be:77:07:fd:0f:d2:d2:02:84:4d:2e:cb:21:
                    af:79:d1:d5:5d:7f:eb:92:2e:4b:18:d0:7e:5e:fc:
                    a2:04:0d:b1:a0:61:2a:49:e8:15:d8:d5:33:e7:37:
                    4b:5d:91:e5:8d:0b:d2:c5:94:3b:35:1c:4b:f6:1c:
                    5f:41:fd:df:9d:8c:39:48:b1:29:11:62:0a:b9:93:
                    9a:34:1a:24:52:04:f9:59:3f:81:e8:08:9b:87:6c:
                    cc:df:40:02:4f:2b:07:57:5d:d3:5a:e0:d7:47:cf:
                    1e:2d:3c:1f:6c:34:07:e2:26:6f:1c:4e:ee:17:59:
                    a6:d0:b6:63:7a:66:13:d2:53:f7:12:3a:52:fd:3f:
                    5e:e2:ab:8f:3c:c4:82:e5:e8:c7:17:ac:71:af:4c:
                    ca:3d:3a:f8:b0:17:b3:53:b1:b1:79:0f:57:f7:92:
                    37:4c:d4:c3:f2:d1:72:26:b6:08:7b:05:55:5a:87:
                    d1:82:bf:bd:06:6e:97:9a:82:77:55:f8:91:72:97:
                    26:cd:aa:fa:d0:45:f6:c5:8f:6c:2b:52:99:36:e4:
                    e0:42:25:b3:95:8c:a7:d1:87:b7:3e:a5:c0:5e:fc:
                    6c:b2:18:b9:31:24:db:43:d2:c4:0d:13:c3:5c:c9:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:2D:F6:AF:61:EA:DD:B3:59:9C:3C:78:9B:E5:8D:83:2E:A5:0F
            X509v3 Authority Key Identifier:
                keyid:C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:cd:52:65:b2:5a:48:3f:b1:91:33:8b:61:6a:42:f4:c8:e9:
         29:2a:aa:d0:d4:df:a2:56:b2:87:7e:26:c0:33:71:62:0c:fc:
         52:e2:33:d8:dc:11:f8:09:f6:15:8b:7e:cc:cf:6d:07:2b:3a:
         63:69:57:40:15:31:05:26:be:bf:4a:bc:ce:b3:4f:91:4a:d7:
         28:33:79:b0:8f:ff:8e:c3:f9:8a:b4:36:b3:bb:ba:c5:5c:c1:
         52:3b:f1:df:14:3f:f8:03:ff:07:18:2c:d5:30:95:a5:7e:8f:
         78:b5:94:b0:7d:0b:5e:88:28:58:b9:1a:95:a2:0e:ff:70:c7:
         2e:3f:e3:fc:29:a3:f3:70:9a:68:ca:52:96:fb:45:ff:05:af:
         6b:fe:c4:ae:33:1e:45:cf:92:7f:9b:10:d6:e3:75:22:5f:50:
         92:3a:9e:09:df:4d:b7:f9:cd:f2:b7:b3:80:f8:be:87:66:97:
         39:dc:ac:35:33:b6:50:8a:ba:33:8b:50:4d:9d:c1:5d:cc:8c:
         b0:09:df:be:f2:a9:f2:f9:ec:7a:ce:29:14:1f:de:a7:d5:b0:
         e8:4e:e8:0b:71:53:5b:84:40:97:7f:5b:e8:ed:74:7f:ff:ac:
         88:f5:2c:b3:7b:87:29:0d:e1:9b:c2:5b:e4:71:9c:fe:cf:12:
         9f:9f:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:37:35 2026 by rpki-client