Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
File:                     WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft (raw, json)
Hash identifier:          UoODhz/wp1dUT4E5v/895QRn6eSHhKRtLysb6HAPzRk=
Subject key identifier:   E0:1B:AC:D4:5D:29:46:87:29:22:FB:A4:08:30:CA:48:1A:1D:E9:C0
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Certificate issuer:       /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial:       019D9850490D3DD690894B32D06CF5987E39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
Manifest number:          11AF
Signing time:             Thu 16 Apr 2026 22:01:31 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:31 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:31 +0000
Files and hashes:         1: IyiDYUwXTd8nMW2tsgvpdFAf3I4.roa (hash: wX/PrCSepREzfY5hM9Z51sIMyLpNkHvV3nfyWUKOE2Q=)
                          2: WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl (hash: Cr8blRd6PkfBQR7GWqIDKO92ehyg2h4DY44y6ZpBLOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:49:0d:3d:d6:90:89:4b:32:d0:6c:f5:98:7e:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
        Validity
            Not Before: Apr 16 22:01:31 2026 GMT
            Not After : Apr 17 22:01:31 2026 GMT
        Subject: CN=e01bacd45d2946872922fba40830ca481a1de9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:bb:9a:eb:b3:a8:1e:fd:c8:a9:06:df:7a:
                    69:b4:df:43:0e:d8:28:3e:cc:8d:0c:2e:c0:fe:a0:
                    9f:1a:7f:cf:22:35:3d:1f:a4:03:95:14:b3:3f:03:
                    a4:c4:ca:e8:75:bb:ec:16:a6:58:1f:8d:d2:35:be:
                    12:40:e0:f6:84:76:c8:df:a0:a7:a3:59:1a:97:c0:
                    4f:5e:86:fa:68:cb:29:90:b7:a0:f1:d3:73:30:d3:
                    d8:67:a9:e2:ee:6f:f3:28:6f:20:3e:78:e1:76:77:
                    dd:7a:1d:fa:eb:e4:72:24:0e:6a:b1:e9:a5:c3:49:
                    15:92:33:06:dc:3f:b8:eb:e9:e6:4c:31:79:df:37:
                    1b:8f:2a:ae:a5:c5:df:a3:c9:3e:ad:bd:86:db:c4:
                    9f:30:63:11:9d:10:13:b7:b7:20:0c:68:5f:53:bd:
                    cf:6b:f6:ce:8a:57:cf:f0:ad:d7:44:5d:be:77:94:
                    e2:1a:38:c3:34:0c:d3:6b:bc:4d:da:40:18:e8:1d:
                    82:06:e5:74:7f:6c:19:23:89:29:d5:39:4e:18:d5:
                    7d:3a:fc:45:3c:f8:48:5b:c1:46:09:b6:19:b6:56:
                    ce:a0:2b:6b:27:57:13:99:fc:11:a4:39:4d:9a:49:
                    8a:00:c1:c0:23:31:93:c9:ff:a1:56:c6:d2:e7:72:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1B:AC:D4:5D:29:46:87:29:22:FB:A4:08:30:CA:48:1A:1D:E9:C0
            X509v3 Authority Key Identifier:
                keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c9:3a:d2:fa:4e:4c:58:98:93:18:1c:31:f0:0d:cb:4b:e2:
         20:89:1c:8b:8c:d7:9d:5a:f6:31:3d:32:c4:b2:f1:cb:17:e0:
         b9:2a:9d:79:9e:15:6e:81:9b:44:7b:48:72:7d:e9:3a:73:c8:
         d9:55:2c:29:77:06:9b:83:90:0f:88:bd:24:b9:04:0e:10:76:
         76:3b:57:04:1c:84:8c:8d:8e:c4:39:6a:c9:9e:c5:77:06:5d:
         12:e0:e6:3f:ab:73:63:d2:c0:23:f8:43:5e:96:a9:13:4a:98:
         2b:00:0e:70:c5:7e:11:05:45:88:84:c9:50:9d:83:02:32:2f:
         61:1d:c0:69:81:17:f7:ba:c1:c4:97:54:b6:40:a9:c0:2f:d7:
         63:03:99:28:b4:bf:31:7d:b5:60:ac:6c:c3:4b:16:b7:1a:ce:
         7d:1e:8d:7e:f9:e2:82:31:37:f4:09:ad:ed:51:fa:2b:95:ba:
         7b:c2:6c:6e:78:aa:f0:f9:30:23:d6:d2:fd:68:dd:fb:ea:0d:
         46:49:e8:7f:82:c5:ef:09:ac:c3:06:a2:c7:00:88:a2:11:1b:
         55:5f:ef:cb:0f:2c:b7:63:94:fb:5a:4d:78:55:8c:01:6f:4b:
         c5:01:b9:2b:80:3a:be:d8:06:7c:15:93:6f:ff:c5:78:2c:8c:
         bb:76:39:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:17 2026 by rpki-client