Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
File:                     wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json)
Hash identifier:          ysQOPgOh190sYrBJgKRETJ+Oj6yY1GEuPDVn3cOU6EY=
Subject key identifier:   E2:4C:83:7C:A5:97:0F:41:B7:C2:59:C0:52:C1:42:37:F1:FE:CD:ED
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Certificate issuer:       /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial:       019D992B32ACFAF8B4491F217D5562AEE86D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
Manifest number:          18C1
Signing time:             Fri 17 Apr 2026 02:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:38 +0000
Files and hashes:         1: fkjKY1GubqopgVMFItI3Dks0F0s.roa (hash: XHHriZ3RedEv637kMieJw9uopGlbC5EMU7/X4VulIbY=)
                          2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: w5Gid4GVqs0UlsLJHYxhjFIIxGA2MNiw+Hu16Mw6NKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:32:ac:fa:f8:b4:49:1f:21:7d:55:62:ae:e8:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
        Validity
            Not Before: Apr 17 02:00:38 2026 GMT
            Not After : Apr 18 02:00:38 2026 GMT
        Subject: CN=e24c837ca5970f41b7c259c052c14237f1fecded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:43:92:01:92:9a:dc:27:a0:1c:6b:ec:ec:0e:
                    40:6f:2c:1d:b0:f0:1f:61:d8:a0:7f:ed:26:fb:75:
                    3c:17:bd:0f:85:5c:05:56:8a:bf:1a:96:11:e1:cd:
                    de:24:0e:0b:66:09:72:88:16:13:8f:5d:32:e7:fc:
                    bd:83:fe:0d:7d:ae:52:8c:21:ba:45:da:48:48:8b:
                    be:ba:90:3b:8f:70:89:c3:33:ef:b9:66:93:88:e7:
                    0f:78:02:a0:b1:dd:61:13:0a:a0:d7:5c:e2:ba:4f:
                    f3:40:ad:5a:5c:6e:ef:a3:fb:66:18:7e:e9:e5:85:
                    d9:0d:2d:f1:45:0c:15:8b:39:8c:29:71:76:ea:30:
                    28:8d:42:00:7d:22:26:08:0d:1e:e7:05:6e:cf:58:
                    fe:d8:d0:85:6a:2b:95:8d:dd:cd:db:05:fc:84:39:
                    9f:59:32:01:39:e6:cf:b8:2f:ea:f9:88:ca:8e:94:
                    32:f0:d7:22:f7:b4:e3:4c:9d:f2:c4:37:ff:d8:55:
                    af:00:ec:4f:a8:e2:35:c8:80:45:c2:d8:ae:ff:6c:
                    c5:3f:d8:e7:1a:aa:9c:ac:1c:d8:c9:1a:5c:92:e9:
                    32:47:d1:fe:cb:a1:50:bb:db:b6:e3:3e:d8:27:e1:
                    90:d2:4a:a3:f7:26:65:56:58:85:c5:fa:40:19:c7:
                    24:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4C:83:7C:A5:97:0F:41:B7:C2:59:C0:52:C1:42:37:F1:FE:CD:ED
            X509v3 Authority Key Identifier:
                keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:db:0a:9a:1d:f4:72:2e:c4:53:92:86:7b:1d:f7:b8:36:35:
         ce:bb:dd:0b:c1:fa:70:27:a8:9d:99:37:bf:96:1a:f6:6d:07:
         d1:35:7c:ad:14:12:55:72:e2:78:1c:a9:45:af:0c:96:a0:f2:
         dc:f6:b0:15:08:0a:fb:a8:10:07:87:d1:7e:f2:3c:af:52:48:
         5b:21:da:2b:5d:0b:b5:0b:bd:5a:a0:15:3d:5a:3c:79:3a:6d:
         ca:10:07:96:53:31:6e:59:62:25:b6:3e:ea:e8:75:70:4c:5c:
         92:5c:ef:f2:84:66:77:fc:51:9f:50:a7:f8:0a:bb:5d:4c:bc:
         46:05:aa:20:d9:01:42:24:af:07:d0:c7:da:09:b7:cd:f4:30:
         ba:16:ad:94:09:0b:0f:35:96:b6:67:3c:1e:c4:c8:6a:01:5a:
         d8:0f:28:55:3b:b6:73:e3:7f:f3:3d:71:9a:7d:d4:48:88:2e:
         95:bc:eb:5f:c9:23:fd:74:e5:99:08:44:ee:8c:a2:fc:cd:a9:
         1f:77:40:3d:c2:58:d3:17:a1:24:be:2e:73:1a:54:bf:83:1e:
         1f:f4:38:95:f7:b3:7e:d7:7d:8f:91:0a:bd:4c:4e:d9:09:c2:
         96:4f:db:53:c7:f7:7e:58:8f:8f:59:d3:b9:9d:3b:6e:a2:48:
         5d:7c:80:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:08:55 2026 by rpki-client