Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
File:                     wpN7lGGj0mbpNYNOUEehgiODYsg.mft (raw, json)
Hash identifier:          7diqhW0O0UXhL4rtKfgqX/IsQcpZlVkQ0kmDl0XICKs=
Subject key identifier:   77:E4:D1:04:3F:35:81:38:25:C6:EB:AF:6E:20:30:E9:06:09:7E:87
Authority key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
Certificate issuer:       /CN=c2937b9461a3d266e935834e5047a182238362c8
Certificate serial:       019D9886CF16E318ACA79317C948E9BDC843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
Manifest number:          18C3
Signing time:             Thu 16 Apr 2026 23:01:04 +0000
Manifest this update:     Thu 16 Apr 2026 23:01:04 +0000
Manifest next update:     Fri 17 Apr 2026 23:01:04 +0000
Files and hashes:         1: 0GT7y41M2U2Z4n9p1prIFuSSpCU.roa (hash: 5PN+tyrRAZ9I2OtQw0DrVEloHpHu5PekIGAzz+vR1XM=)
                          2: wpN7lGGj0mbpNYNOUEehgiODYsg.crl (hash: zMPQkfJeb427jiECEGIlvSXrdPZddMSONdPx5jx785Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:cf:16:e3:18:ac:a7:93:17:c9:48:e9:bd:c8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2937b9461a3d266e935834e5047a182238362c8
        Validity
            Not Before: Apr 16 23:01:04 2026 GMT
            Not After : Apr 17 23:01:04 2026 GMT
        Subject: CN=77e4d1043f35813825c6ebaf6e2030e906097e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6b:8d:dc:48:e7:d6:29:7d:a9:16:a1:5b:6b:
                    58:da:e7:a3:bf:e6:02:4f:00:0f:eb:67:d8:c9:15:
                    c0:99:a5:59:61:36:52:3f:4d:9a:46:a9:bb:ca:e7:
                    c7:64:fc:de:a1:2b:b8:88:a3:be:b5:46:97:f2:b9:
                    9f:a8:4a:94:7f:25:4c:a4:fb:36:0b:7d:02:aa:37:
                    06:2b:6d:3c:e2:ef:28:46:63:23:71:36:65:26:83:
                    01:6e:da:9a:3d:c5:06:d5:ea:79:b1:3f:16:80:07:
                    94:6b:8b:f4:fb:84:31:bc:14:b9:48:ed:2b:23:50:
                    d7:89:51:8f:c4:7b:29:19:15:21:08:50:2e:90:18:
                    61:2f:d8:ff:48:9c:78:b6:6c:f0:94:58:67:5d:4b:
                    c5:9e:ad:bf:ca:cf:0b:11:4e:c3:7f:53:66:44:54:
                    8c:11:c9:30:b9:9c:22:4f:6a:1e:1a:36:29:0f:80:
                    58:3b:95:cc:46:ae:0c:f5:99:63:06:c3:b9:40:2c:
                    12:a1:4c:72:0c:26:6a:45:d1:b3:d8:79:34:6e:90:
                    a9:b7:18:07:aa:43:ae:be:8f:33:f2:16:73:a3:6f:
                    73:4e:52:db:3e:1e:9b:71:b2:43:26:7b:18:be:bf:
                    c3:02:91:ac:f5:4c:d4:7c:c0:b6:3f:1d:8c:2e:c7:
                    f9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E4:D1:04:3F:35:81:38:25:C6:EB:AF:6E:20:30:E9:06:09:7E:87
            X509v3 Authority Key Identifier:
                keyid:C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:ee:21:1c:78:e6:8e:43:97:8a:e2:ac:37:15:4f:36:ce:91:
         7b:90:5c:d6:88:6f:78:29:b4:62:65:51:3b:bf:b0:51:7f:a4:
         2f:38:50:46:a9:1a:11:04:cd:a7:51:7a:e0:64:ec:b2:10:57:
         cf:e1:59:88:9d:dd:d3:a7:11:cd:68:81:f6:2c:99:9b:4d:5e:
         a3:ce:d4:8c:1a:d2:b8:ed:a7:9f:d9:c2:09:1e:93:61:48:30:
         78:43:a2:c5:dd:65:63:b2:85:20:b2:ea:53:e7:51:88:05:4e:
         36:c2:65:15:96:69:0a:de:ba:b3:89:f2:b2:86:95:ee:07:10:
         4c:c1:23:24:b2:df:80:12:1c:0e:5b:3f:58:04:f1:8c:29:84:
         23:9e:62:3e:3b:d9:f1:d6:3f:d2:c9:51:b6:10:f8:0a:ce:e0:
         94:12:a0:29:72:4f:f9:a3:79:03:7c:b4:0c:42:de:bf:ed:eb:
         63:8e:74:ad:20:3c:7e:c9:34:73:16:c6:93:e1:28:8c:0d:c4:
         9c:0e:a1:96:22:eb:dd:98:b5:77:be:03:e2:5a:20:27:7e:52:
         1e:51:e6:c2:79:50:6b:72:46:f3:12:0f:39:24:62:fe:2f:41:
         22:aa:66:d4:42:c6:a3:d1:22:a5:35:c9:43:46:e2:6a:b8:53:
         48:5a:5e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:19 2026 by rpki-client