Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File:                     W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier:          f91A60fR8fUlDEoSnGyQm3xXNWl2+ZSl4DSQ8SbrFxM=
Subject key identifier:   09:90:F1:0C:13:0C:9F:25:8C:5B:F1:51:78:9C:37:E8:7C:E4:74:C5
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer:       /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial:       019D99D0310390A0ED8507C5CE47B6600445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number:          17AC
Signing time:             Fri 17 Apr 2026 05:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:51 +0000
Files and hashes:         1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: J41+Lkw0VDyPySHpHeRWFI/DMGL2VHKACLq0fVVU9Og=)
                          2: zQPH05SIZNuQg4zGS0l4MvCEJwc.roa (hash: ueZfBj8JGiHYfSauWwC/j0GXwlPaWH1VC5mIskTovc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:31:03:90:a0:ed:85:07:c5:ce:47:b6:60:04:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
        Validity
            Not Before: Apr 17 05:00:51 2026 GMT
            Not After : Apr 18 05:00:51 2026 GMT
        Subject: CN=0990f10c130c9f258c5bf151789c37e87ce474c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:19:fb:7d:88:22:e9:4f:31:6e:37:40:48:bc:
                    ad:ad:9f:08:f6:49:4b:fa:2a:60:b0:b2:42:62:42:
                    13:03:13:16:ba:8a:c6:87:1a:f0:e0:a5:a8:00:48:
                    5d:22:09:cd:a5:07:e5:09:4a:9b:f2:75:ad:58:e7:
                    ac:5c:3d:06:43:4b:b2:36:bc:92:7a:32:5f:15:dd:
                    6c:58:d7:13:1c:b4:49:b9:cc:ea:08:96:31:62:c5:
                    96:9c:fb:44:13:27:c7:90:c4:66:6e:78:24:2b:e4:
                    96:41:01:cf:9b:5f:f4:ac:aa:50:49:58:61:73:3d:
                    10:d0:04:c7:d1:73:6a:ac:d1:93:ce:60:f4:6c:b6:
                    db:d3:a3:1c:c7:df:65:9d:22:af:da:c0:aa:f9:11:
                    01:80:c1:95:55:13:f3:95:45:ce:84:63:f3:0d:3e:
                    1c:29:62:59:d9:8e:4d:5b:d3:37:9d:2a:d5:55:13:
                    ea:d4:95:ac:5c:3a:60:32:17:de:b5:5a:fe:23:16:
                    9a:00:4e:7f:f6:17:54:4d:f5:0b:3a:c4:f1:72:6c:
                    e1:01:74:9b:da:c3:63:eb:36:9c:b5:47:ab:e5:d9:
                    9d:4c:5d:39:65:d3:83:1a:8a:bd:0d:0c:0c:46:f4:
                    05:8d:9f:06:62:95:29:c6:f4:69:3a:f8:51:99:b2:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:90:F1:0C:13:0C:9F:25:8C:5B:F1:51:78:9C:37:E8:7C:E4:74:C5
            X509v3 Authority Key Identifier:
                keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:5b:2c:b0:f4:17:ca:3e:95:0c:1a:54:d2:61:34:b8:fb:6e:
         df:cb:c9:e4:46:0a:ec:a8:b8:8c:ec:66:63:ee:b5:82:a7:ba:
         6b:0c:49:2f:b5:89:da:26:fc:9a:49:76:fe:aa:15:b2:56:d5:
         5b:d9:a0:a5:39:82:a4:c7:9b:ce:02:5b:57:8b:26:77:7b:31:
         21:f5:2c:fe:50:70:3c:bd:87:a7:c9:19:4c:49:78:dd:9f:fc:
         1e:c6:fd:36:f6:9c:c5:b9:9a:53:f6:07:98:36:3c:26:62:e6:
         ef:19:ac:1e:ec:63:da:81:ff:d4:59:4b:ed:06:48:5c:c7:1d:
         ba:73:34:28:6f:9e:e9:e7:9c:29:9f:47:34:5f:fa:60:90:19:
         19:d5:7f:54:5c:58:73:bd:0c:0d:65:2a:0e:b4:8a:30:ff:bc:
         7c:b7:81:a8:db:a1:91:af:12:e2:85:2b:95:44:8e:1d:49:bb:
         44:f9:90:00:da:40:9d:5e:b4:bb:d3:b4:6f:bd:47:01:17:75:
         16:b3:9b:ea:83:59:5c:d4:c8:94:20:f0:6b:48:7d:dd:af:64:
         e7:f3:b2:31:64:80:5c:8a:d3:eb:4d:b2:e2:dc:a4:05:e5:53:
         84:ec:22:2c:27:5a:ef:e8:25:76:6c:d7:e0:94:d4:3c:f3:59:
         ca:9c:2c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:38:22 2026 by rpki-client