Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
File:                     wIneL0L89EpNqraoJMEgq7i3Fl0.mft (raw, json)
Hash identifier:          RLv6npxxT5KLmcFWgAgdd+DRb/6Zd+KRI5g9t+Z1CvE=
Subject key identifier:   E9:0E:F5:AE:DE:A8:C3:4D:81:4D:6D:43:2F:7B:41:9B:E0:8A:C0:75
Authority key identifier: C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D
Certificate issuer:       /CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
Certificate serial:       019D9D3FCE5673DAAF0D4179D276C147DC0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
Manifest number:          0272
Signing time:             Fri 17 Apr 2026 21:01:37 +0000
Manifest this update:     Fri 17 Apr 2026 21:01:37 +0000
Manifest next update:     Sat 18 Apr 2026 21:01:37 +0000
Files and hashes:         1: I3Xf9VKD-tJpcuIxLlSODq6ARfU.roa (hash: 7g0Zv7NUV1llXr3xxVw2ZytxF911Q+NrrEu/LVgTpkk=)
                          2: W1e0EWYLXXz7WEE9jIFX4zFwLi8.roa (hash: MBpCLgOals90jJpQV95qSwbxGgxUH35zT0YlklNTg2M=)
                          3: wIneL0L89EpNqraoJMEgq7i3Fl0.crl (hash: fDaGbEuyZ/aup5y0T/VzeRKESWXSpndBbBp9aoAtwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:ce:56:73:da:af:0d:41:79:d2:76:c1:47:dc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c089de2f42fcf44a4daab6a824c120abb8b7165d
        Validity
            Not Before: Apr 17 21:01:37 2026 GMT
            Not After : Apr 18 21:01:37 2026 GMT
        Subject: CN=e90ef5aedea8c34d814d6d432f7b419be08ac075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:51:d5:dd:79:2a:95:38:84:9f:6d:f9:ce:c8:
                    ba:9b:12:ec:e2:3a:ef:20:95:5e:d5:d2:c9:81:47:
                    68:7f:58:b4:08:51:00:65:9a:6a:6f:b6:58:82:37:
                    59:d9:02:ff:13:aa:c2:0b:b5:da:18:ce:ab:b1:93:
                    1b:55:bb:c7:3f:04:2b:08:d7:da:1a:62:e1:15:9b:
                    4b:fd:f7:f4:3c:6e:96:22:dd:f8:62:74:ff:06:4c:
                    2f:b0:e0:ce:a0:83:61:65:ff:b0:3a:2e:f2:04:bc:
                    31:6d:27:b3:21:d7:bb:44:c6:15:54:af:f0:1c:d2:
                    b1:bb:50:9e:d3:cb:5c:05:14:6c:21:d2:57:42:42:
                    3b:e0:37:3e:a2:05:05:d6:db:f9:74:8e:e7:8f:a5:
                    e3:9c:57:5d:a9:f3:c4:02:47:de:19:c9:a6:2f:cd:
                    ee:64:54:d0:b5:94:c0:f1:ba:4d:2b:40:84:ab:65:
                    2c:fb:2f:89:ab:84:7b:8f:26:bb:84:b9:5e:fe:a3:
                    fb:26:6b:07:c6:f1:72:2b:82:7e:4a:62:c4:ac:2b:
                    07:81:33:77:b5:00:92:be:b3:1b:c6:9c:9c:b3:d9:
                    fa:f0:74:73:60:f9:06:fa:8e:01:08:72:f4:06:aa:
                    ce:52:25:95:17:2b:30:f8:ee:b3:29:53:ee:0d:c6:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:0E:F5:AE:DE:A8:C3:4D:81:4D:6D:43:2F:7B:41:9B:E0:8A:C0:75
            X509v3 Authority Key Identifier:
                keyid:C0:89:DE:2F:42:FC:F4:4A:4D:AA:B6:A8:24:C1:20:AB:B8:B7:16:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIneL0L89EpNqraoJMEgq7i3Fl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7bb416-ba8f-49a7-b5aa-ee2dc2860d5b/1/wIneL0L89EpNqraoJMEgq7i3Fl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:96:27:7b:6c:91:cb:04:2d:a4:0b:fb:37:5e:37:b9:04:39:
         f5:e1:41:72:6f:25:77:1e:0c:68:38:f8:21:18:a2:ae:e8:5c:
         80:f9:08:a3:9e:c3:18:ed:34:9f:5c:69:e7:f5:48:aa:47:e2:
         ac:a4:e8:3d:06:cf:13:f9:eb:9a:2b:7b:15:cd:21:40:dd:07:
         7e:1b:17:ec:d4:57:27:da:95:7f:47:3b:d5:7c:46:a0:67:a5:
         98:6a:dc:8b:43:64:7c:50:d6:a4:75:7e:82:01:d7:ca:a4:ef:
         a3:c6:95:c9:c5:e5:a8:e8:0b:15:23:bc:c3:bc:97:80:d9:a1:
         e6:72:5b:dc:03:e7:0f:7f:ed:ff:34:10:0f:18:eb:21:dc:17:
         fc:0e:d0:f9:51:ee:2d:82:8d:25:80:fe:65:e7:25:1a:bc:b5:
         6c:4b:dc:b1:6e:9c:31:8f:98:17:b7:2e:45:42:e5:b3:bb:b6:
         ec:4f:28:d3:9a:0a:b2:05:31:e9:f8:d8:1d:4d:7f:0f:e0:c7:
         89:92:dc:03:1c:53:16:06:34:b1:f8:39:ad:cf:c2:77:4a:72:
         3a:d5:bf:02:8c:b4:22:62:b1:65:0a:d0:08:90:11:6b:9c:77:
         97:05:42:e8:54:54:3b:ff:bb:7d:88:0d:52:8c:2b:b2:39:97:
         5e:1c:16:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:48:36 2026 by rpki-client