Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
File:                     WC4hcKe8vsMQFU8rzpmDP-woAfs.mft (raw, json)
Hash identifier:          Rzhkii4NNDL5N+a5FWLksPy/kek7gxUpAO8AIEmfukk=
Subject key identifier:   A5:E3:88:E5:07:2B:43:66:76:9D:65:7C:75:08:80:83:F1:E7:02:4F
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Certificate issuer:       /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial:       019D98F4A8CDB65BC8ED8107420D83584699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
Manifest number:          0AB5
Signing time:             Fri 17 Apr 2026 01:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:03 +0000
Files and hashes:         1: 6mj9wjIYkwPsA3c5MxWWRMkBmSY.roa (hash: E1XVoQk2psLjeVe0+NkJREdlEcbwRYRghSTnYcJUsio=)
                          2: WC4hcKe8vsMQFU8rzpmDP-woAfs.crl (hash: k1hj8WOi04ujDf0e1AtjS3A6Tsigl6/s7LQ2OYdJ/eQ=)
                          3: eieZOr9FHJILQ01WF-oyQAME0-4.roa (hash: ahdbiO7qmkWYgXQ04GmEQrp4ceapMkzBgwSwQKptvJI=)
                          4: sJMlQlmuU4_t9JLTWEOG32Cq6MQ.roa (hash: E7O6wd0Zjg99STe3wUKf7d1f1MzUTLb1rAZKDrFTMV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:a8:cd:b6:5b:c8:ed:81:07:42:0d:83:58:46:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
        Validity
            Not Before: Apr 17 01:01:03 2026 GMT
            Not After : Apr 18 01:01:03 2026 GMT
        Subject: CN=a5e388e5072b4366769d657c75088083f1e7024f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:93:8b:e3:83:f4:a5:b3:d3:77:7e:77:32:
                    38:5a:8f:12:05:f5:80:32:97:e6:24:59:f4:79:5e:
                    d8:58:a3:ec:6f:b8:5e:1b:d8:64:9e:28:cd:65:7f:
                    d5:50:fa:51:de:80:9c:78:09:54:b7:f2:ac:b3:7a:
                    99:0a:3e:67:ea:e1:75:58:e5:d9:87:b8:5f:95:c5:
                    d3:97:16:6a:3f:1c:72:7c:e1:38:80:95:38:00:b0:
                    70:56:15:bd:aa:3f:52:ed:74:1c:bd:6e:4a:59:c0:
                    40:ae:ea:92:e3:c9:39:6a:bf:b6:19:dc:e6:46:03:
                    9c:16:71:cf:ee:1f:97:4b:bf:73:b4:e8:d3:72:cc:
                    77:3b:a6:6a:da:38:6a:3b:37:5f:6d:b5:dd:65:e6:
                    4e:00:6d:94:ed:01:55:be:89:a0:cf:af:fd:c3:5b:
                    6d:0b:61:ce:22:07:d6:98:ce:29:7b:a8:58:49:31:
                    7e:9b:25:f7:e4:43:a5:59:80:55:57:bb:40:1f:44:
                    84:8b:90:d0:5c:5c:46:02:38:6d:fa:c8:da:37:7a:
                    2d:bb:24:e9:d3:10:fe:13:0a:a5:99:ec:ab:68:e6:
                    a2:1f:b9:3a:5f:54:94:33:45:3a:5c:a9:e9:55:12:
                    e6:c9:e1:da:4f:fe:d6:01:0d:b6:a8:4f:a8:28:ab:
                    83:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E3:88:E5:07:2B:43:66:76:9D:65:7C:75:08:80:83:F1:E7:02:4F
            X509v3 Authority Key Identifier:
                keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:cf:b5:5c:0f:ae:71:7a:6c:31:41:b6:18:2b:af:d0:f5:4f:
         ab:f9:0a:fd:5d:23:99:5d:23:b7:58:a3:fa:28:bf:2c:31:c9:
         ad:b7:60:e8:de:84:21:66:5e:4b:4d:36:71:b3:0b:0d:b9:35:
         c6:d3:be:51:53:1c:f9:f0:ee:de:a5:7b:10:45:cd:66:ac:b2:
         bb:df:fc:8a:0c:2e:95:2d:0c:9b:2e:2e:53:ac:20:fe:7c:4c:
         f0:80:ce:50:9e:e6:97:d4:d2:3a:b5:63:80:44:db:a0:f9:3c:
         fa:6d:cb:5f:92:5d:34:33:bf:86:fb:90:dd:4d:b6:a3:0d:15:
         9b:ab:f3:0c:cb:29:21:01:69:2c:1e:14:0b:6d:df:fb:ae:2e:
         0d:37:06:0d:21:18:de:b1:10:e8:e8:45:e1:c1:e6:64:64:16:
         a2:20:23:5b:1c:fc:c8:b0:e4:f6:c2:9b:b6:50:04:65:84:bb:
         fd:a0:54:c2:79:53:25:44:72:5b:91:d1:9f:37:b0:5c:94:29:
         24:bd:d3:69:d3:e2:c1:21:e2:b3:26:e2:5c:01:f6:23:7b:a4:
         ba:af:60:59:40:32:5b:2c:cf:eb:e4:f7:34:5c:97:28:8c:25:
         e9:90:4a:c6:86:d3:ef:85:a1:af:4f:53:23:9a:b5:14:3c:42:
         f7:e8:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:19:12 2026 by rpki-client