Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
File:                     WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json)
Hash identifier:          wLQ9r9g2Rh59mGD/b7KIH7mB3erYuNQPJdqwRJg870s=
Subject key identifier:   C5:83:A7:A8:9C:AF:5E:E7:8C:57:A5:18:86:40:97:28:08:D9:DC:46
Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1
Certificate issuer:       /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
Certificate serial:       019D992B4B465C5AE0AC9D7E6EABEE370F3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
Manifest number:          07FF
Signing time:             Fri 17 Apr 2026 02:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:44 +0000
Files and hashes:         1: 1-GG8B-VDO40CVaafxmqAljIc04E.roa (hash: MK2xq5J/qKJHdlB6HMEKgb9e5EAqsRBw1ujAHfdY1XM=)
                          2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: lwYnJexywwkZofsHAo4hOWGLOBIFKGBjfKigr+0HWxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:4b:46:5c:5a:e0:ac:9d:7e:6e:ab:ee:37:0f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1
        Validity
            Not Before: Apr 17 02:00:44 2026 GMT
            Not After : Apr 18 02:00:44 2026 GMT
        Subject: CN=c583a7a89caf5ee78c57a5188640972808d9dc46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:4a:63:4e:f8:45:dd:ae:21:95:d0:96:07:
                    6e:ff:9f:72:30:f4:9b:52:50:f8:89:43:68:fb:c2:
                    0a:1b:f3:3d:ed:57:14:07:0e:48:9a:ad:83:cc:e7:
                    36:af:6a:a5:f3:6f:76:cc:e4:1c:ef:29:91:3c:a9:
                    62:7f:f6:1d:cd:9f:f6:10:ee:c1:cf:90:10:cf:e3:
                    91:a4:63:4b:53:24:a7:d1:55:96:4e:79:2f:65:1c:
                    c0:80:31:da:f9:83:b3:9c:6f:5d:3e:97:91:35:e6:
                    30:11:32:38:dc:94:0c:ed:10:c7:98:a6:86:12:7c:
                    32:21:5a:6b:c2:d9:76:2c:72:4d:40:b0:21:02:68:
                    0c:7f:26:3c:05:51:f3:70:50:53:e9:62:48:06:b2:
                    b8:09:7f:2b:13:5e:c1:70:01:89:ab:f0:04:4c:91:
                    a5:b6:85:5b:4e:32:4f:9a:be:25:68:c8:ed:ff:4c:
                    72:aa:b9:e7:b7:00:ef:f2:1a:48:fa:b8:4f:dd:6e:
                    b0:d7:3c:71:ab:f6:d4:4f:f1:2f:8f:d2:f7:e1:68:
                    f0:5a:a2:61:2a:3a:51:df:6c:69:08:87:b1:d0:b9:
                    4d:ff:5c:b2:a1:47:ec:c3:b7:97:97:01:76:b5:f2:
                    74:a9:6d:b5:30:f1:0c:c4:53:f0:b9:bd:2d:29:41:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:83:A7:A8:9C:AF:5E:E7:8C:57:A5:18:86:40:97:28:08:D9:DC:46
            X509v3 Authority Key Identifier:
                keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:56:96:a7:3b:92:b9:4c:46:ff:2b:69:e2:67:b0:a4:b4:c8:
         a5:97:3a:c6:e7:9f:0e:22:78:4e:6e:26:4d:13:03:f5:11:06:
         32:55:d7:42:a0:2e:76:4b:cb:37:99:95:ea:e4:9f:9a:1d:16:
         3c:4f:d5:c2:3b:cc:03:60:ef:26:06:ce:b6:a1:3a:bb:c4:e0:
         d5:1b:3a:e3:10:1f:44:68:0c:14:ab:d5:a8:1d:2b:d4:ed:4f:
         7f:d5:17:ba:a0:7c:a0:c8:7e:71:33:d4:ef:bf:f8:75:6d:de:
         74:1f:b5:99:ff:d6:d8:38:5f:1d:95:b0:70:d0:84:f5:ca:73:
         b8:93:43:a1:67:59:f2:66:96:06:b3:0c:bc:90:41:49:11:3a:
         ac:3e:dd:bf:52:86:1c:0c:5e:08:c0:7a:60:33:8f:73:83:f2:
         40:11:81:13:90:fd:15:67:31:81:c7:91:6c:54:a4:05:fd:63:
         5e:a9:67:c1:ad:9f:77:94:b5:a2:b4:94:0a:4b:9c:cb:b5:5a:
         d7:e4:52:93:bc:ad:62:60:5a:84:36:7c:b4:83:71:4c:cd:0d:
         03:5a:2a:fd:06:1c:18:97:1c:0a:f2:2a:08:50:76:48:e7:3c:
         fb:6d:2c:e6:76:67:dd:f7:11:14:ce:90:41:9b:90:55:dc:96:
         66:d8:0d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:37 2026 by rpki-client