Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          0/+LBAt87UPSwl0xCNbGIPcEPR2Pwyq610BXZAW+ul8=
Subject key identifier:   A8:CB:D9:A4:F6:B8:9F:20:B4:0B:68:62:56:26:4E:9A:EA:4A:86:4A
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       019D99992899E3ACC4634A6B2890AD4BFB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 04:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:44 +0000
Files and hashes:         1: EAHkC7o9VL-S2-gmEhIR8E0Rx9o.roa (hash: OdYtd2ANkkqc8l4EyXlFU9oU1QIesxnnDbHz973YpsU=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: tiRPPDnv/N87TxWMA5Fn3+iof4Zg14r7uEmknKIWHiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:28:99:e3:ac:c4:63:4a:6b:28:90:ad:4b:fb:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: Apr 17 04:00:44 2026 GMT
            Not After : Apr 18 04:00:44 2026 GMT
        Subject: CN=a8cbd9a4f6b89f20b40b686256264e9aea4a864a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:84:57:c3:05:a5:5e:c3:c0:91:d9:5a:cd:
                    da:f3:3a:a7:22:bb:7d:21:9c:6b:6c:1b:1c:66:84:
                    fa:d6:73:0f:fb:8c:51:c8:5e:da:59:28:bc:a0:0e:
                    53:c9:c9:b2:e6:76:5b:b8:60:f0:98:2e:ef:48:de:
                    c5:d8:c2:d6:70:8c:cd:d0:9a:a5:59:da:53:68:4b:
                    6f:04:b3:b9:22:39:18:53:01:fc:81:39:55:67:1a:
                    8a:51:42:45:70:3d:07:c6:f0:a1:4a:d3:37:3b:67:
                    a1:50:95:8a:9f:3f:7d:e8:7a:67:33:40:cc:cf:9e:
                    9a:28:fd:3c:3c:d6:1e:07:0d:4b:f6:57:a1:9b:4e:
                    7e:de:b2:52:70:fb:77:7d:c8:d5:4c:7e:60:8b:de:
                    d8:44:0c:a3:58:96:53:c1:20:11:c0:eb:ef:52:e9:
                    57:5e:64:e5:e8:12:55:46:1f:76:ee:f3:0f:a9:f8:
                    75:f7:39:2a:13:b8:b5:45:65:73:24:76:4d:58:d4:
                    9f:ee:40:8d:49:f0:d3:7c:ff:dd:37:49:a9:66:e5:
                    cb:cf:5d:c1:1a:ea:db:b3:df:06:de:44:61:bf:0a:
                    b3:d4:f6:75:5a:81:55:13:3f:ba:43:d4:cb:ff:14:
                    dc:23:b4:03:c3:9b:02:ce:4e:d1:f2:16:34:09:1e:
                    76:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CB:D9:A4:F6:B8:9F:20:B4:0B:68:62:56:26:4E:9A:EA:4A:86:4A
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:09:6d:a6:fd:80:b4:d6:80:58:1d:f5:84:7f:84:e8:02:3f:
         11:f9:ab:de:da:eb:1e:b4:e0:f0:cc:57:51:8a:25:fe:2e:ee:
         a2:79:d4:15:58:f0:27:23:6f:f3:ab:13:e0:b8:28:37:23:5c:
         79:b3:8b:18:75:7d:95:9a:ff:31:05:d2:ee:37:69:f6:18:d7:
         1c:c4:a5:02:02:21:69:84:a5:49:6b:a9:07:79:da:e2:9b:84:
         6e:ee:f3:93:35:32:87:96:c0:bf:f7:d8:4c:2f:54:31:1c:ce:
         2e:d5:1e:ae:04:69:90:30:98:63:d6:96:19:1d:40:36:c8:a3:
         0d:a7:b9:5c:b6:db:ca:a5:a6:37:2b:84:a8:a9:b8:7f:6f:2c:
         c9:93:c6:10:14:4c:a8:06:e2:a0:7a:07:dd:e8:25:e2:80:e1:
         17:af:c5:09:a6:f7:97:40:33:ec:35:f8:39:28:59:03:8e:f9:
         ba:89:92:b4:48:7e:13:55:22:e9:0f:3b:f0:9b:27:4d:c1:6c:
         de:5f:34:58:ce:f4:6c:05:a8:b7:67:be:6a:43:24:5a:9a:21:
         e6:fc:43:27:ec:3c:fb:e8:99:e7:55:41:71:6c:97:a0:82:35:
         0e:00:75:7d:9d:f4:e9:fc:72:d0:9c:90:ba:46:f6:da:bf:da:
         d6:72:b0:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmSiZ46zEY0prKJCtS/twMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NjBlNmNkMWIxYjAwNjNiMTg5MGY3ODA3NDVjMjQ1NjA2
ZGNmNzMwHhcNMjYwNDE3MDQwMDQ0WhcNMjYwNDE4MDQwMDQ0WjAzMTEwLwYDVQQD
EyhhOGNiZDlhNGY2Yjg5ZjIwYjQwYjY4NjI1NjI2NGU5YWVhNGE4NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW2EV8MFpV7DwJHZWs3a8zqnIrt9
IZxrbBscZoT61nMP+4xRyF7aWSi8oA5Tycmy5nZbuGDwmC7vSN7F2MLWcIzN0Jql
WdpTaEtvBLO5IjkYUwH8gTlVZxqKUUJFcD0HxvChStM3O2ehUJWKnz996HpnM0DM
z56aKP08PNYeBw1L9lehm05+3rJScPt3fcjVTH5gi97YRAyjWJZTwSARwOvvUulX
XmTl6BJVRh927vMPqfh19zkqE7i1RWVzJHZNWNSf7kCNSfDTfP/dN0mpZuXLz13B
Gurbs98G3kRhvwqz1PZ1WoFVEz+6Q9TL/xTcI7QDw5sCzk7R8hY0CR521wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjL2aT2uJ8gtAtoYlYmTprqSoZKMB8GA1UdIwQY
MBaAFFlg5s0bGwBjsYkPeAdFwkVgbc9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQt
MGE4MzBkMDFhZmQxLzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQtMGE4MzBkMDFhZmQx
LzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgltpv2A
tNaAWB31hH+E6AI/Efmr3trrHrTg8MxXUYol/i7uonnUFVjwJyNv86sT4LgoNyNc
ebOLGHV9lZr/MQXS7jdp9hjXHMSlAgIhaYSlSWupB3na4puEbu7zkzUyh5bAv/fY
TC9UMRzOLtUergRpkDCYY9aWGR1ANsijDae5XLbbyqWmNyuEqKm4f28syZPGEBRM
qAbioHoH3egl4oDhF6/FCab3l0Az7DX4OShZA475uomStEh+E1Ui6Q878JsnTcFs
3l80WM70bAWot2e+akMkWpoh5vxDJ+w8++iZ51VBcWyXoII1DgB1fZ306fxy0JyQ
ukb22r/a1nKwmA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:42:20 2026 by rpki-client