Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
File:                     WTtT-5MGNG8nJJSSjXeDnLr53cc.mft (raw, json)
Hash identifier:          4u/5v9wOaZcLJi3DTGrNJXVw+PVpha8jaw/GZzjlNAI=
Subject key identifier:   B3:F9:71:98:30:75:C9:F6:75:31:F4:37:99:E6:4B:24:52:50:96:26
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Certificate issuer:       /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial:       019DA378EE09C12060504546A1C3ACF24A2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
Manifest number:          18CC
Signing time:             Sun 19 Apr 2026 02:01:44 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:44 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:44 +0000
Files and hashes:         1: 5yWEOKzu4tvzVdJCuXKUJQcFoxU.roa (hash: em9VKbtVpINCVHChhYDyWfr7R23ZC9iQu/37D7dlUFw=)
                          2: WTtT-5MGNG8nJJSSjXeDnLr53cc.crl (hash: fr7UUz1EjL/L1Yywbp5A21nKMkCF3kAXPBcBJYo4AcA=)
                          3: geQd8_VLJjb5G63zcYOl_5mIh_M.roa (hash: v6gFvhJOa+aQXgxxSKtJY1qv746y7xf2F3e0EqgA+wk=)
                          4: sI_BcImvqhW1VB2jGwFKlyR2UJw.roa (hash: rZhI4UUGBH6D1Xl5jMVJTIkzsORgEFhu4vJQGMva6aU=)
                          5: y8Erf7oDqsDbiw7iSwdN4CNhd_I.roa (hash: rypvlKQBui/mc1XY3OqD0s710e5y1IdgbvnR6X8SWA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:ee:09:c1:20:60:50:45:46:a1:c3:ac:f2:4a:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
        Validity
            Not Before: Apr 19 02:01:44 2026 GMT
            Not After : Apr 20 02:01:44 2026 GMT
        Subject: CN=b3f971983075c9f67531f43799e64b2452509626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:27:d5:40:11:23:f4:dd:02:3e:35:6c:85:d0:
                    d0:1c:49:aa:fe:af:c0:70:c5:8a:8a:2a:cc:95:37:
                    5b:f4:da:7d:96:fa:11:1d:ad:68:f7:56:0e:7c:11:
                    67:84:ae:21:7c:60:11:3a:91:53:9c:d9:ce:67:f7:
                    f7:9f:3a:05:46:1c:1e:31:76:1b:91:8d:96:d0:5c:
                    f7:7d:f6:2c:04:32:43:2e:29:f7:b8:30:41:e2:7a:
                    11:84:4e:48:65:03:f3:74:22:be:71:b8:0b:80:f8:
                    49:8f:7d:6d:32:4f:92:4d:e7:60:a3:6d:8b:95:5d:
                    f4:6b:73:3b:5a:f5:f2:69:a8:fc:c2:d5:85:d4:e1:
                    25:a5:5e:49:6f:c6:c3:7e:62:8a:c1:b1:74:f2:5e:
                    a0:9c:e0:91:50:7d:9f:2a:d8:9a:c4:37:79:5d:af:
                    3a:5b:0a:97:7a:b3:fe:00:b2:06:a5:38:6c:80:cb:
                    66:58:af:0f:a9:f6:af:fd:62:41:d0:c3:66:30:55:
                    3e:1f:0c:bf:42:14:6b:73:ec:02:1a:31:1a:1f:9f:
                    81:f6:b8:42:2c:fa:d2:40:70:91:d2:2c:29:4c:f9:
                    a3:fa:86:b2:17:e4:35:4c:49:e5:e1:a4:81:eb:78:
                    b5:70:8a:40:0f:7c:1f:b5:65:14:d1:6d:44:a1:e3:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F9:71:98:30:75:C9:F6:75:31:F4:37:99:E6:4B:24:52:50:96:26
            X509v3 Authority Key Identifier:
                keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d2:ce:2a:16:8d:28:d8:2c:86:fd:90:27:38:ba:ff:a5:d9:
         a9:1e:89:55:8d:88:b7:1c:be:47:a0:12:c2:94:de:ed:94:5e:
         37:47:39:0d:10:f7:1d:59:1d:66:f7:ac:63:84:e9:d6:d2:60:
         3a:7d:b7:88:5f:7f:28:78:f7:1d:e0:c0:eb:65:12:29:3a:c5:
         86:8a:19:46:b1:31:b2:71:90:21:cb:18:32:f8:ba:c2:61:5f:
         5c:d6:0f:5c:e4:fd:b2:d5:f1:82:43:54:35:4d:84:3d:47:dd:
         7f:c0:8c:d7:91:56:97:1b:da:1e:11:3a:50:0e:16:8f:11:89:
         cb:9a:d9:7a:c7:ea:c7:a1:ea:79:aa:c8:6c:ac:c0:6a:ba:29:
         32:a9:44:2a:86:53:a5:c5:c8:b1:69:b5:90:f0:d0:7e:02:1f:
         fc:0c:65:f8:61:3d:41:40:b6:69:b9:31:76:f2:b8:77:30:cb:
         1f:2a:66:d5:0b:2f:94:35:2b:b3:7d:45:74:cc:ca:26:3a:56:
         4f:6e:f5:59:d0:b1:fe:c8:dc:bf:92:90:ab:28:6a:5d:32:8d:
         f6:d7:bd:05:f8:73:dd:f4:0a:4e:eb:90:6a:fb:b1:08:67:04:
         e6:84:6c:3c:39:13:1f:90:c1:59:1c:8b:fc:9f:4c:d0:09:fa:
         02:ec:09:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:30 2026 by rpki-client