Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
File:                     WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json)
Hash identifier:          Fr6hocm9oJXcDJMKL/b5os3WxGoO77X4XWb1i74VZ3Y=
Subject key identifier:   AA:38:3B:02:D9:68:8A:62:C3:C1:98:25:90:35:C6:F0:01:32:7E:7F
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Certificate issuer:       /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial:       019D992B3EC75C8494B1FF5E889D9DDB87D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
Manifest number:          0971
Signing time:             Fri 17 Apr 2026 02:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:41 +0000
Files and hashes:         1: 4CeETaDbMmlemWxGvvx0_WuaR08.roa (hash: Ihn6EFoGwfYZmijHSSAZ4/aOa56nJlt5ht+N8FXjtEs=)
                          2: 8ojHQg-5gn_Du7oteDU3y4gT3eo.roa (hash: i3m9CQuoZX6ywBrI0Ffbx9GRfJOG6PI2xg9iGzfKe/A=)
                          3: N3r4w-QIKvt5t1EKPBx4W22sMKU.roa (hash: Qa8i2BVXp+zXiBbIFyM8ihwV78k0q1+vinEYtsDy1/E=)
                          4: UhhULK4VhHUpXbHrquJFK5XwzTM.roa (hash: cTOGj51BZIsKfKZvp1Y6kCOw9tCtCwH0h8hrKoSZm2w=)
                          5: UqpRL__Efeid9a8cIN4aVjD7btc.roa (hash: Jo0BVJIAZaCqo9aHwqKM5mX9gen1oqBNsGDUzTFR458=)
                          6: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: 70WJpIeyjSoZliJif9/5MxSm3g5t8WPcIrd4xnh7Lko=)
                          7: _d1c_IHHvO6uDgtUgM8v6NT-Glw.roa (hash: kRKEDuodtt5EkFPvSVIB0r4OcamCM+hlEDHgUbHAC8A=)
                          8: dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa (hash: YlXWb2ZjWO3ovA5560Lai+bFI6OdRPrtCGWZJCxeZw8=)
                          9: eiNx0hyWr9_GPT53IvxQM9d7nQM.roa (hash: 24M5NJX5qdMlDv9jNkA+N6M6xg4k0uj4d4NoagskJ0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:3e:c7:5c:84:94:b1:ff:5e:88:9d:9d:db:87:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
        Validity
            Not Before: Apr 17 02:00:41 2026 GMT
            Not After : Apr 18 02:00:41 2026 GMT
        Subject: CN=aa383b02d9688a62c3c198259035c6f001327e7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:50:55:f5:9d:2b:07:59:7b:a1:80:f5:ac:
                    5c:72:bc:a8:81:c1:9c:76:0a:39:70:64:1b:ba:5c:
                    fd:f7:a7:16:83:fc:6d:9f:8e:7c:26:a9:a5:05:e0:
                    4b:87:7b:ca:e1:ea:33:1d:36:5e:bb:fd:27:74:61:
                    7e:2a:58:e5:95:d2:b5:6d:6b:cc:6a:9c:e5:2d:4a:
                    cc:67:91:39:ce:a2:0d:67:32:bd:84:25:d5:0b:ef:
                    1a:99:38:09:79:51:7d:2c:05:f6:38:20:f6:7c:45:
                    a7:35:89:7a:e6:b1:43:98:b4:67:81:e1:b9:14:54:
                    79:e4:c2:02:fb:4e:c2:2b:37:74:81:ea:5b:8c:8c:
                    51:be:ab:f2:92:60:ab:aa:c2:4c:f8:b7:27:d5:bd:
                    7d:4a:6a:79:6f:04:98:f0:de:65:40:12:10:ea:f1:
                    12:c9:6c:78:39:a0:cb:6a:c5:e5:11:31:71:c9:54:
                    20:2b:46:5f:df:8b:79:cf:76:11:95:63:74:54:99:
                    49:0d:93:27:2f:6f:dd:9f:35:b1:9d:f5:c7:4a:a0:
                    71:9e:b1:e1:19:d6:ab:08:c4:25:94:d9:18:9b:50:
                    90:f6:b2:cd:aa:24:08:35:ce:be:ca:e2:8d:88:d2:
                    18:6d:83:58:62:fa:8c:4e:24:af:5e:f9:4d:84:52:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:38:3B:02:D9:68:8A:62:C3:C1:98:25:90:35:C6:F0:01:32:7E:7F
            X509v3 Authority Key Identifier:
                keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:07:f1:5d:3e:d6:15:37:e5:8a:b0:fc:8c:f3:77:db:91:a5:
         6b:0f:ea:a6:75:a7:a5:eb:41:de:24:cb:43:f6:1b:f3:68:f3:
         b6:16:5d:ee:f7:68:ba:0e:97:4c:b0:f0:ee:38:47:ff:05:b2:
         c0:9e:e1:db:99:89:4e:61:88:38:67:b9:41:5c:98:cc:37:83:
         bb:b2:ec:67:fb:d6:46:91:2b:3f:0d:fd:e1:fb:1e:79:ba:32:
         88:dc:3f:a8:10:56:53:87:57:fa:eb:12:77:b9:96:ac:5e:7b:
         a2:72:ea:73:50:69:bd:69:0c:4f:6e:92:8d:24:04:bc:2e:ed:
         7e:e3:86:ae:28:96:db:46:08:fc:19:e7:3f:73:38:64:2c:b7:
         54:cb:a9:4c:e2:08:f1:05:d4:8f:45:70:6f:46:0d:72:04:4f:
         a2:a4:03:b9:f8:7e:ab:16:a8:3b:8c:af:dd:4d:11:19:89:1c:
         dd:8d:ea:fd:b2:be:9b:8f:e5:bb:78:85:e7:e4:8f:f7:9e:b3:
         c2:d3:0f:52:d2:e3:de:b0:ed:6a:fe:2a:c7:04:c0:a5:89:e6:
         40:90:60:a8:80:55:30:21:6f:b9:6f:a1:2a:b1:bc:30:fb:1b:
         08:76:fc:ef:63:8b:cc:26:d7:3f:c8:e8:a7:5b:20:a8:4a:fd:
         fc:d8:aa:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKz7HXISUsf9eiJ2d24fZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3
YWJlZmIwHhcNMjYwNDE3MDIwMDQxWhcNMjYwNDE4MDIwMDQxWjAzMTEwLwYDVQQD
EyhhYTM4M2IwMmQ5Njg4YTYyYzNjMTk4MjU5MDM1YzZmMDAxMzI3ZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvdQVfWdKwdZe6GA9axccryogcGc
dgo5cGQbulz996cWg/xtn458JqmlBeBLh3vK4eozHTZeu/0ndGF+KljlldK1bWvM
apzlLUrMZ5E5zqINZzK9hCXVC+8amTgJeVF9LAX2OCD2fEWnNYl65rFDmLRngeG5
FFR55MIC+07CKzd0gepbjIxRvqvykmCrqsJM+Lcn1b19Smp5bwSY8N5lQBIQ6vES
yWx4OaDLasXlETFxyVQgK0Zf34t5z3YRlWN0VJlJDZMnL2/dnzWxnfXHSqBxnrHh
GdarCMQllNkYm1CQ9rLNqiQINc6+yuKNiNIYbYNYYvqMTiSvXvlNhFLR9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKo4OwLZaIpiw8GYJZA1xvABMn5/MB8GA1UdIwQY
MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt
NzljODk4N2E4YjFjLzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj
LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgfxXT7W
FTflirD8jPN325Glaw/qpnWnpetB3iTLQ/Yb82jzthZd7vdoug6XTLDw7jhH/wWy
wJ7h25mJTmGIOGe5QVyYzDeDu7LsZ/vWRpErPw394fseeboyiNw/qBBWU4dX+usS
d7mWrF57onLqc1BpvWkMT26SjSQEvC7tfuOGriiW20YI/BnnP3M4ZCy3VMupTOII
8QXUj0Vwb0YNcgRPoqQDufh+qxaoO4yv3U0RGYkc3Y3q/bK+m4/lu3iF5+SP956z
wtMPUtLj3rDtav4qxwTApYnmQJBgqIBVMCFvuW+hKrG8MPsbCHb872OLzCbXP8jo
p1sgqEr9/Niq6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:10 2026 by rpki-client