Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
File:                     W0rMHfKFg8vjmG9lrToNKhJx15Y.mft (raw, json)
Hash identifier:          ESOaxVvj56G8YHPrmL1VrpAbhzWGIg+rV1bfRdzK/BQ=
Subject key identifier:   80:FF:1B:EE:37:32:51:4C:76:4E:9C:83:C6:BE:40:C2:A7:24:F4:EA
Authority key identifier: 5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96
Certificate issuer:       /CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
Certificate serial:       019D9DACF40E88B7B73804A0F3E32BC2D501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
Manifest number:          72
Signing time:             Fri 17 Apr 2026 23:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 23:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 23:00:50 +0000
Files and hashes:         1: W0rMHfKFg8vjmG9lrToNKhJx15Y.crl (hash: K63F1pdFdG8xjoWxpXRI4luIvjsAmPeUe/EDIugMJ4E=)
                          2: bNkrRgIM4fD8QFp_89_8hGehPbs.asa (hash: kZx+5t2GbTGfdfhnT62+h0A2m0VR4+lyJSkxRKDlaJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:ac:f4:0e:88:b7:b7:38:04:a0:f3:e3:2b:c2:d5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b4acc1df28583cbe3986f65ad3a0d2a1271d796
        Validity
            Not Before: Apr 17 23:00:50 2026 GMT
            Not After : Apr 18 23:00:50 2026 GMT
        Subject: CN=80ff1bee3732514c764e9c83c6be40c2a724f4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:03:23:b5:5e:7c:bc:30:4e:10:40:de:81:27:
                    ec:6d:8e:e2:65:06:19:13:84:88:39:6d:49:7f:1a:
                    cb:17:34:9d:24:b5:40:72:1a:16:46:e5:41:81:8b:
                    3b:b8:80:e1:72:c2:30:5d:77:49:9a:7e:2c:00:40:
                    ab:2e:01:b7:86:f6:59:05:57:ec:15:dd:05:cd:85:
                    45:62:2c:a8:52:11:f4:9a:71:8b:b3:80:10:75:12:
                    e7:a2:bd:5b:70:0e:8e:f2:e6:63:db:c6:5a:78:2d:
                    2d:7c:7c:d2:5e:4f:36:b2:38:15:40:d4:cf:ba:39:
                    8c:04:67:fb:eb:03:98:73:0a:b9:df:05:05:bd:08:
                    12:07:bb:55:aa:67:64:bc:a0:92:4e:10:e9:d0:12:
                    ad:f5:6a:bf:b0:db:c4:1f:f4:28:a2:b5:a8:11:16:
                    71:78:23:5b:f0:eb:7d:78:61:50:b5:10:ae:c9:6c:
                    17:9f:40:06:3b:de:d7:58:5d:0f:ac:c9:27:1c:a9:
                    c6:94:ab:d9:35:e3:6e:6e:87:05:50:0f:32:f8:9c:
                    37:09:38:20:7f:40:77:7e:2a:bc:12:ee:ac:1f:94:
                    35:6b:c6:57:85:e6:3c:3d:b2:2b:84:2d:65:c3:9f:
                    20:32:c3:3e:c8:41:21:24:c9:2f:f8:90:29:c7:6e:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FF:1B:EE:37:32:51:4C:76:4E:9C:83:C6:BE:40:C2:A7:24:F4:EA
            X509v3 Authority Key Identifier:
                keyid:5B:4A:CC:1D:F2:85:83:CB:E3:98:6F:65:AD:3A:0D:2A:12:71:D7:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0rMHfKFg8vjmG9lrToNKhJx15Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/20f4aa-1c1b-4964-a033-b5b70716d83d/1/W0rMHfKFg8vjmG9lrToNKhJx15Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:0d:8b:e3:49:cf:5b:31:87:c7:9a:85:6b:bd:60:d5:d5:
         c8:fe:69:26:f3:74:f0:7c:b5:b3:9d:22:df:f8:90:35:ea:eb:
         46:1b:98:fe:d1:81:86:4a:b0:29:78:c6:ea:7e:a3:cd:04:e8:
         f1:3d:50:82:a5:65:cb:4c:fb:3d:d1:f5:23:57:5f:bb:79:01:
         da:6f:ba:10:d6:c8:ad:72:75:89:c0:c8:fb:9b:35:b4:f0:17:
         d4:7a:bf:90:92:93:24:f5:77:f0:79:cd:c2:ec:44:b5:d9:80:
         33:f3:87:5f:ec:36:70:1a:5b:db:ab:79:1e:f2:25:bd:ee:07:
         18:68:19:3a:d5:5c:38:f2:13:18:c2:0f:c4:52:92:2a:06:30:
         05:81:63:5f:10:4e:04:5e:78:aa:b4:08:a8:c8:14:c2:e8:8d:
         e4:b3:8f:3e:43:4b:0c:b4:f2:28:17:20:69:4c:9a:39:4a:a8:
         03:b8:22:93:c8:e4:2d:1b:97:9e:69:31:4b:98:bf:35:9b:99:
         fb:dd:d2:7b:ae:9d:6f:f2:d7:6c:19:e1:97:f3:81:6f:db:d4:
         8a:4a:a2:f4:75:c4:ea:aa:5e:8d:16:2f:20:bc:5d:fe:66:75:
         51:c4:81:e1:76:f9:e3:c3:b5:4f:a5:fa:1b:21:fd:57:9a:a1:
         c3:6c:0b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:24:17 2026 by rpki-client