Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File:                     w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier:          QRgu9I+19BA8T9GKWWvmzvMfOObSUAcT1hUtwywzAM0=
Subject key identifier:   18:27:15:85:A5:DC:09:3B:1B:35:93:AB:02:86:9F:03:AB:CF:70:F5
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer:       /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial:       019D98F4737B906473D608462B94BC2B1036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number:          0A18
Signing time:             Fri 17 Apr 2026 01:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:50 +0000
Files and hashes:         1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: J64K4YYOSZFfjh+pYu4QRbNCzOq2NmFgaGpxZ7CoGEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:73:7b:90:64:73:d6:08:46:2b:94:bc:2b:10:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
        Validity
            Not Before: Apr 17 01:00:50 2026 GMT
            Not After : Apr 18 01:00:50 2026 GMT
        Subject: CN=18271585a5dc093b1b3593ab02869f03abcf70f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:51:f4:72:ef:59:f7:9c:86:56:08:f2:3c:
                    ae:04:36:31:08:0f:33:82:9a:bd:a7:b2:ca:8a:39:
                    e3:6f:c8:9d:24:d6:41:e8:0e:0e:cd:c3:23:9e:70:
                    94:ae:cb:8e:93:f5:2d:22:ed:41:43:d7:c5:29:5d:
                    69:af:a6:27:00:7f:26:d9:c7:f1:08:39:fb:b0:d3:
                    ae:3d:87:af:50:de:eb:61:08:30:cb:f1:83:d6:3e:
                    c4:54:a8:63:38:b6:34:f4:ac:ee:58:5a:0e:5b:d3:
                    c7:7a:1a:fd:cf:c6:89:67:78:5d:93:7f:ff:1e:9d:
                    1a:be:13:5b:8f:10:13:c5:76:73:5e:67:13:a7:f3:
                    0a:51:fa:c5:ae:a6:19:cb:e5:41:de:4e:f7:9c:eb:
                    f3:db:20:3f:83:ce:8a:16:92:6a:ee:a7:a9:c7:31:
                    b5:0e:83:11:f0:08:61:c9:6d:74:bf:55:2a:0b:c4:
                    76:1a:85:55:f4:a5:dc:ea:53:5e:19:ab:bc:77:6d:
                    64:2c:7b:9e:3f:e5:dc:c1:1d:ea:1e:2e:7f:f0:73:
                    1d:46:af:c6:89:29:51:aa:d4:ed:db:d9:04:e8:54:
                    f8:7c:bd:8b:0a:35:51:e2:d1:0e:9f:7b:7a:2a:4f:
                    ba:cc:a6:e8:de:cf:07:f2:25:ae:42:93:41:d9:88:
                    28:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:27:15:85:A5:DC:09:3B:1B:35:93:AB:02:86:9F:03:AB:CF:70:F5
            X509v3 Authority Key Identifier:
                keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a6:6a:e3:92:be:b6:ac:d1:a8:ec:1f:79:16:a9:8d:b3:2c:
         36:aa:0e:e1:a9:e9:c5:52:e9:2e:dc:4e:b9:81:0f:ea:24:3c:
         fb:20:82:16:9e:1a:5f:9d:88:4d:0c:66:db:95:ae:c7:e2:42:
         19:a2:ad:36:27:14:2e:dc:cb:23:37:fe:18:4b:52:38:d7:79:
         c9:6e:27:1c:39:38:26:6a:45:e1:33:2d:14:68:1e:9e:11:7e:
         a6:91:2f:85:5d:38:59:41:ad:36:15:7d:b6:43:03:a5:a4:0d:
         53:d4:d5:64:c7:75:db:26:70:a3:45:cf:50:24:7b:ce:8f:ea:
         06:5b:16:78:95:79:1c:26:1a:34:92:ac:c5:d0:fc:2a:7f:98:
         7a:4e:a2:21:49:58:84:9a:ef:e8:18:a1:87:90:90:87:28:f2:
         a8:37:2b:d6:55:53:93:fc:9c:f7:91:4d:dc:8e:b8:34:36:76:
         11:db:4b:a1:a7:1c:0e:ed:19:fb:5e:2a:21:12:73:98:46:85:
         2c:42:db:39:11:17:0b:85:e0:0a:54:c6:af:67:43:86:ad:a1:
         0d:6e:da:21:a8:b2:86:e2:fd:46:0b:b4:5e:d8:fc:66:23:24:
         d2:4c:64:38:b0:b3:aa:d8:f0:68:82:de:20:6a:c2:18:b5:aa:
         78:00:c6:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:06 2026 by rpki-client