Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File:                     W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier:          x1iH+9FV4U2Qu5dbLhdVn83RK63roHFT6K/vD7EnTfo=
Subject key identifier:   18:12:82:67:DD:15:E9:17:43:59:58:BC:4D:C1:C7:D4:30:45:DA:C3
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer:       /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial:       019DCFE3AFFCA694F430C3647D8F63FB351B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number:          1729
Signing time:             Mon 27 Apr 2026 17:01:38 +0000
Manifest this update:     Mon 27 Apr 2026 17:01:38 +0000
Manifest next update:     Tue 28 Apr 2026 17:01:38 +0000
Files and hashes:         1: FrTYd2n1mPMmnQqlw_GA42S0gns.roa (hash: 4LYehQSenwwS3QpKE9QMEjIzFleWyGwk4ZhWD2c4154=)
                          2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: xON8PP/8XiALMlGXOdCXUrPWk0yf52vmvlEBdYWjXlA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e3:af:fc:a6:94:f4:30:c3:64:7d:8f:63:fb:35:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
        Validity
            Not Before: Apr 27 17:01:38 2026 GMT
            Not After : Apr 28 17:01:38 2026 GMT
        Subject: CN=18128267dd15e917435958bc4dc1c7d43045dac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:d2:0d:36:a4:cb:ce:c5:2e:f9:c2:48:03:
                    5a:a6:2c:e6:c9:08:dc:a9:bb:ac:88:ba:a4:2d:3a:
                    2f:7c:a2:a5:54:44:68:9f:57:54:cd:56:cc:08:9a:
                    7c:fe:18:81:7c:06:24:b1:66:88:cd:70:04:bb:57:
                    d0:86:0a:62:38:78:d6:6d:01:6a:b4:3b:62:ef:a3:
                    49:60:fe:94:f1:e4:43:61:00:28:32:51:04:b0:d6:
                    93:d7:0e:b3:a4:f4:a5:8d:a1:fe:2d:1c:ea:b2:86:
                    88:1d:85:07:85:72:b1:b7:eb:ba:ca:d1:db:a9:89:
                    e7:5a:5b:f7:ef:96:ef:2a:b9:d7:6a:c3:01:43:f2:
                    76:42:28:02:4f:77:18:22:d9:3c:21:77:22:4f:31:
                    94:ff:6b:4b:18:ad:48:89:06:8e:e0:bb:79:08:70:
                    fc:07:f8:29:41:c2:1a:fe:04:ed:bb:cd:21:8b:32:
                    62:a1:bd:7b:a8:4f:5d:30:25:b7:f3:95:bc:57:0c:
                    3e:79:d4:07:6a:6f:f4:28:4a:73:47:2d:f8:f9:f3:
                    b2:72:f8:c3:36:43:2c:b8:c0:71:24:34:d3:95:18:
                    18:3e:d0:8e:91:5c:30:c6:68:04:7d:0e:30:07:8c:
                    74:89:3a:ca:9e:ef:17:25:ae:2f:52:6c:87:30:ee:
                    1c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:12:82:67:DD:15:E9:17:43:59:58:BC:4D:C1:C7:D4:30:45:DA:C3
            X509v3 Authority Key Identifier:
                keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:cc:a3:f7:ef:c7:dc:71:bc:f6:66:f8:40:32:c8:59:ee:21:
         5d:3a:d9:5c:08:7c:e9:40:d7:25:dd:4c:48:c8:a8:1d:9e:f5:
         89:6d:8a:08:de:21:7c:df:85:30:2e:f5:2b:3d:0f:38:9d:4e:
         57:7a:e2:de:13:d1:db:f1:03:19:1a:00:34:66:50:52:be:29:
         c8:17:51:ee:de:e1:9d:4a:4c:e8:30:20:58:35:d7:20:81:95:
         3c:dc:b1:8b:26:1d:d5:6a:96:ef:15:c6:44:4f:84:dc:37:35:
         54:2e:97:2a:c2:a0:9f:16:6b:20:46:e7:7f:d6:1a:c6:f4:34:
         35:97:f5:72:d7:fb:e1:c8:26:e6:18:98:ba:43:ae:8a:60:b6:
         79:fe:a3:64:bb:ad:25:1c:55:0a:9a:23:ed:60:24:c9:d1:12:
         bc:fb:be:ba:19:fa:c6:3c:42:41:8b:d5:a1:33:fb:bf:78:42:
         d6:63:85:3c:97:f7:7d:66:37:21:50:d6:a2:ca:86:f5:cd:9a:
         fd:8a:b8:e9:df:81:ec:cc:42:41:d3:a9:df:89:e6:e2:3a:6d:
         a9:34:2c:2c:93:67:1f:0b:ad:b6:7f:27:73:45:10:50:f6:ae:
         30:ab:8d:71:31:f9:4e:0e:d6:43:99:9d:d0:97:a5:04:74:91:
         4e:77:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 23:44:53 2026 by rpki-client