Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
File:                     WvZis_PcgxKxtryRfwrwBiJ3U1U.mft (raw, json)
Hash identifier:          IfpZn7nAjYPCYYwN7cpDJRnrZv1I7sEQW2J/QdBzEC0=
Subject key identifier:   97:E4:47:B9:B5:0C:94:CD:0F:1C:4D:BC:2A:D8:65:6D:49:18:AE:B7
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Certificate issuer:       /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial:       019D98F4B497BF498AA92514B45742803F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
Manifest number:          18C2
Signing time:             Fri 17 Apr 2026 01:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:06 +0000
Files and hashes:         1: WvZis_PcgxKxtryRfwrwBiJ3U1U.crl (hash: Zp0rYDFng+yMCt15g5EYV1KF4f7+wdwXc5SlXpS+aHU=)
                          2: dK7xGJjbLEsHT0KEKRHp-XbxNno.roa (hash: kk3iHGhDC1qD/7txqS7460auTjZEQbYGHvF5VGLfJdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:b4:97:bf:49:8a:a9:25:14:b4:57:42:80:3f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
        Validity
            Not Before: Apr 17 01:01:06 2026 GMT
            Not After : Apr 18 01:01:06 2026 GMT
        Subject: CN=97e447b9b50c94cd0f1c4dbc2ad8656d4918aeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e4:02:71:bf:e8:32:93:5a:75:31:1f:35:8e:
                    aa:89:a3:da:8a:08:8d:60:93:03:92:8f:c0:b9:42:
                    e7:82:9c:cb:e5:ee:a9:ef:51:78:52:d4:e2:57:8b:
                    b4:08:ba:8e:6c:59:21:05:8a:c0:68:1f:8e:78:14:
                    57:d5:c4:18:ec:d4:1c:ff:96:ec:3b:41:71:6d:45:
                    ac:1e:91:66:ec:99:aa:7c:b2:e3:69:9a:dc:cc:44:
                    fd:3d:8f:f4:bb:e1:0e:78:fa:7b:28:49:1b:45:d5:
                    1c:e4:d2:8d:1c:52:1e:d8:fa:03:e0:49:93:e5:9a:
                    8f:ad:e1:fa:a1:e7:72:6c:d5:99:e9:cb:5c:a3:99:
                    a8:81:40:ea:38:c9:64:a1:0f:14:5a:0b:18:91:2d:
                    73:d0:a7:2d:ed:b5:3e:b9:02:95:fb:32:3e:5c:5c:
                    49:54:23:05:34:da:8c:86:6f:fd:80:35:29:2c:3f:
                    43:f6:d2:bf:6d:7b:2f:19:3b:81:2a:0f:d5:a3:65:
                    b0:22:6b:bb:c0:c4:02:c2:01:fd:59:ed:8a:1d:6f:
                    a2:b7:51:3a:02:fd:be:fa:0a:f4:de:0b:8b:56:2b:
                    b9:86:ff:c1:24:d8:b0:9b:02:57:73:ed:5c:25:9c:
                    8c:db:5f:ec:b1:b2:79:1c:62:9d:27:c2:4d:a6:9b:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E4:47:B9:B5:0C:94:CD:0F:1C:4D:BC:2A:D8:65:6D:49:18:AE:B7
            X509v3 Authority Key Identifier:
                keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:fe:c0:39:39:5b:02:0e:83:09:93:ee:89:91:7d:04:89:99:
         40:d9:b7:df:bd:86:1f:f4:9b:bd:b8:34:a3:2e:4c:86:f8:e9:
         ef:92:c5:61:da:6e:6d:fe:6c:6a:ff:85:c9:5f:2f:d6:25:40:
         97:75:38:13:a8:eb:61:ac:b4:d3:3f:f1:5d:b3:b7:c4:14:d9:
         c4:a4:7a:6a:09:3e:bb:62:01:2d:f5:f3:b3:5c:38:bb:cb:74:
         6f:52:a2:e0:09:78:17:e5:f6:bc:1b:0e:c7:ef:36:ed:1b:ba:
         e7:f9:ef:f9:a2:ce:00:87:d0:d3:9e:89:2a:4d:3f:cc:66:72:
         7d:79:2e:ad:7b:7b:81:38:2b:02:0f:c4:82:43:8e:47:17:b7:
         0d:89:a6:c9:bb:63:7a:13:71:2a:93:46:b7:23:61:6b:7c:04:
         79:ec:98:dc:0a:56:35:f6:45:55:a5:dc:be:9a:6b:f3:db:f7:
         57:b9:3f:2a:cb:c6:03:ca:cf:0e:d7:8b:c0:95:82:66:ac:1d:
         cc:38:bd:b3:74:5b:5f:44:8f:c1:d0:b0:0f:f6:cc:79:18:f9:
         0d:08:c9:e3:77:2e:b2:26:10:28:fb:ed:c2:36:82:cf:5a:2a:
         58:f9:44:da:25:17:2b:fe:10:47:37:4b:fe:bf:29:97:c6:a1:
         62:1c:32:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:38 2026 by rpki-client