Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File:                     wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier:          crcwlMmHaAjn79jqNA+vdRFeAdMnPTFiTFbcAi0DiV8=
Subject key identifier:   48:95:F6:92:AE:93:A9:33:7D:EF:28:93:2E:7E:D4:A1:04:46:24:1D
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer:       /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial:       019D98184ABE76580AA309E0B238A74EBB6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number:          06B4
Signing time:             Thu 16 Apr 2026 21:00:21 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:21 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:21 +0000
Files and hashes:         1: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: Ut5q7PQMnTWj4jgrJQMpCEsPVmMfp61zuzXZDOGAIQU=)
                          2: yXtUNYm9UJDhZ6FworfWme9OQyo.roa (hash: rr8EZy6xf85lv5Hhtm/H3eXN/QDSdw1UbOFotOK3AWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:4a:be:76:58:0a:a3:09:e0:b2:38:a7:4e:bb:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
        Validity
            Not Before: Apr 16 21:00:21 2026 GMT
            Not After : Apr 17 21:00:21 2026 GMT
        Subject: CN=4895f692ae93a9337def28932e7ed4a10446241d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:dc:74:bd:53:50:98:9f:6a:38:e0:e5:7c:
                    38:fb:e6:64:39:d6:7a:1c:d3:82:91:56:07:0c:71:
                    39:24:aa:5a:1f:6c:2b:43:2a:c1:d9:bf:a3:ed:19:
                    46:70:cd:54:e7:d6:70:96:d7:17:5a:a6:f7:e1:cf:
                    a8:f0:af:12:cc:4a:7e:26:60:20:45:b2:86:e6:7b:
                    95:1a:93:59:28:3b:7f:58:7c:9b:6a:8f:9e:cc:6a:
                    fe:4c:e6:61:f3:e9:45:76:33:ed:ff:d3:2e:6d:1f:
                    2e:56:f5:e8:72:08:ca:a6:38:4e:3c:3e:24:ea:81:
                    c2:ce:ca:8c:bb:d5:a6:a8:a9:f2:04:23:a8:9f:f0:
                    2c:8c:34:2e:52:6c:f5:22:63:0d:7e:a9:9a:35:30:
                    e0:ff:e2:b6:66:41:d2:55:4c:be:3c:7c:a2:9d:d2:
                    d2:ad:bd:b1:83:fc:96:58:b8:59:ac:f5:38:a1:6a:
                    29:a7:c9:5e:43:25:98:ed:a3:b7:d1:16:ea:6a:6a:
                    55:6b:99:a0:35:44:af:0f:ff:1d:8a:45:d2:50:ab:
                    b1:88:e4:56:3e:1a:b6:ca:35:69:11:8b:ee:c8:79:
                    8c:57:4b:43:a9:f6:4f:db:e9:89:4e:a0:35:9f:fc:
                    05:db:8b:24:c7:3b:ff:0b:c1:a2:7e:2b:51:63:0f:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:95:F6:92:AE:93:A9:33:7D:EF:28:93:2E:7E:D4:A1:04:46:24:1D
            X509v3 Authority Key Identifier:
                keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:df:2b:b6:70:56:71:8a:dc:52:db:13:bc:92:fb:f3:5e:32:
         f8:ce:a5:f7:cf:e0:2b:f2:3b:a4:ee:6b:0e:f7:47:6d:f3:64:
         0c:b0:83:11:42:d8:9e:bf:78:25:e4:69:7e:a9:9e:1f:c7:61:
         ac:f1:d3:22:8c:45:f4:89:40:a2:49:ae:4d:7a:f3:56:07:5c:
         e3:c2:4a:dc:dc:31:a7:3b:13:19:bd:92:00:8e:90:33:98:d1:
         ba:71:b1:87:89:b0:f3:b8:26:a8:a4:ac:aa:0e:9e:2f:d8:b9:
         0e:37:11:60:c6:e3:10:bb:dd:10:0a:5e:69:6e:70:60:df:51:
         5e:4f:22:38:dc:90:4a:fc:f2:b0:9a:1e:2b:75:ad:f6:55:38:
         c5:68:54:79:9b:30:27:1f:ce:c2:7d:65:90:8a:ea:10:33:1a:
         40:3d:51:80:4e:6f:42:3a:2d:61:b4:ca:3d:a2:8b:be:9b:4a:
         a3:35:73:ae:f7:ef:04:18:54:ef:0c:05:61:3e:2d:f1:8d:67:
         48:9c:8e:84:2b:68:e3:8a:c5:bc:07:be:05:ed:34:f9:5e:c9:
         72:ee:04:96:1b:e2:ef:52:63:8d:f6:85:64:5a:2b:2a:f5:19:
         47:75:61:fc:2c:00:ba:b5:e5:98:7a:98:52:70:0c:80:2a:9d:
         e8:4c:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:20 2026 by rpki-client