Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
File:                     w4Me3AugfH40q6cBw1c9jnKvGP4.mft (raw, json)
Hash identifier:          Cuz61fA9gmuIoRzCI45xjZrQqAPuXihnh+wivcGTeD4=
Subject key identifier:   17:E3:65:BF:E3:B6:8C:C7:B7:27:08:1E:D9:BD:FD:07:21:CF:79:85
Authority key identifier: C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE
Certificate issuer:       /CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
Certificate serial:       019DA340D0A09CA8B5C1652FAA06265A8162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
Manifest number:          18C9
Signing time:             Sun 19 Apr 2026 01:00:27 +0000
Manifest this update:     Sun 19 Apr 2026 01:00:27 +0000
Manifest next update:     Mon 20 Apr 2026 01:00:27 +0000
Files and hashes:         1: ai3r6amtS95W5Ne0tp1NdS71pYk.roa (hash: hHWGzOuZ4CYJyZkMuwn0BTL6IjKeXJop9yKsyHJPpsI=)
                          2: w4Me3AugfH40q6cBw1c9jnKvGP4.crl (hash: ag5C/jd+ozyYZ7kpP9g2rOPwrQIsVDQ/NeSuF5OUz3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:40:d0:a0:9c:a8:b5:c1:65:2f:aa:06:26:5a:81:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3831edc0ba07c7e34aba701c3573d8e72af18fe
        Validity
            Not Before: Apr 19 01:00:27 2026 GMT
            Not After : Apr 20 01:00:27 2026 GMT
        Subject: CN=17e365bfe3b68cc7b727081ed9bdfd0721cf7985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4f:e9:85:37:cd:ab:07:af:ea:ab:c6:f8:00:
                    e5:36:ed:e6:b4:e0:f6:9a:a6:43:50:70:e9:14:67:
                    36:55:90:38:b4:b3:95:e2:92:36:05:e3:9b:26:65:
                    15:1e:68:74:3f:f8:67:54:20:24:61:ad:f9:4c:8a:
                    3d:26:22:ab:e6:c4:c2:c4:98:26:63:1a:2b:29:ae:
                    4f:fd:b4:c5:20:39:b3:f7:2b:c7:6c:0e:e2:02:3f:
                    34:3a:ce:39:04:ae:b9:2c:91:13:88:e2:3b:f5:59:
                    94:a3:99:7b:0d:b7:7a:da:63:4f:cf:bc:f7:bb:19:
                    14:a4:cc:33:20:0b:1f:74:d1:07:f4:5b:91:12:71:
                    9c:8a:6f:5d:13:31:2f:3d:95:32:a4:c6:89:9c:63:
                    3e:c7:ed:de:67:b5:26:da:b3:5f:7f:ee:4c:28:2f:
                    e8:04:03:ff:86:49:71:e1:37:73:39:75:21:de:d9:
                    75:8a:8a:0d:4d:9a:89:cb:53:70:ad:36:14:c4:02:
                    59:0a:7d:ab:12:88:54:3d:c5:e4:eb:a5:bb:3d:9b:
                    dc:96:a3:18:02:5b:ad:7e:b0:1e:4b:ca:03:d1:5b:
                    61:e9:66:7d:0f:ea:ee:ab:04:32:1c:b9:2f:d3:7a:
                    93:73:93:23:10:60:b4:3c:52:c2:91:15:93:db:52:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E3:65:BF:E3:B6:8C:C7:B7:27:08:1E:D9:BD:FD:07:21:CF:79:85
            X509v3 Authority Key Identifier:
                keyid:C3:83:1E:DC:0B:A0:7C:7E:34:AB:A7:01:C3:57:3D:8E:72:AF:18:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4Me3AugfH40q6cBw1c9jnKvGP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/7f1275-12fc-4397-9e3b-edf6cad1249d/1/w4Me3AugfH40q6cBw1c9jnKvGP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:42:68:bb:20:a2:eb:6b:f6:40:ae:66:1d:86:47:52:a4:
         22:e2:bd:08:0d:0b:48:8e:95:b1:ee:29:52:8c:5b:73:76:ef:
         a3:5b:1b:7e:83:1e:03:45:86:fa:4e:93:b8:57:2a:65:86:e4:
         18:10:94:5a:08:e9:39:e8:75:77:f7:23:ca:13:67:1f:77:6a:
         d5:09:11:2a:5e:90:ef:8e:e4:53:82:14:b8:b5:73:02:13:9e:
         ff:8f:11:83:6f:0f:b7:78:fe:92:ac:6a:52:2b:55:a9:9f:85:
         22:27:1a:42:40:4f:a2:a4:ff:14:23:df:32:2a:3d:09:40:89:
         2a:cd:9b:7b:de:fd:2b:2c:dd:de:b0:9d:27:ca:4b:1f:f7:c0:
         0d:70:70:8d:b4:69:94:96:23:95:ff:96:f7:19:85:2f:73:d7:
         78:f0:8d:6e:34:af:e0:07:6a:0f:08:03:df:ac:71:4f:f5:af:
         6a:7b:eb:7f:0d:68:bd:c4:b0:a1:74:20:7c:fe:c3:e8:1a:9f:
         81:43:b4:87:a9:1c:91:1d:18:1a:2d:4c:9b:e4:51:f5:e3:55:
         ff:f2:d5:cb:81:14:80:ec:7b:b3:81:13:0d:47:53:50:07:f1:
         85:88:32:bb:95:8e:9b:45:17:44:32:46:ac:27:9f:9e:87:18:
         66:f6:f2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:08 2026 by rpki-client