Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
File:                     WA7nOx5qibTvUVvGfcmBcpak2Ks.mft (raw, json)
Hash identifier:          BSnLfxoh1fMjB9HEty+nP1QGQo6jcu3GvlzTPQ8H444=
Subject key identifier:   18:83:04:BB:72:93:86:EA:67:2A:0D:DA:90:9D:F6:85:76:1D:73:D6
Authority key identifier: 58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB
Certificate issuer:       /CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
Certificate serial:       019DBEF01E1F7A16D449A050230A087DFD16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
Manifest number:          0103
Signing time:             Fri 24 Apr 2026 10:01:40 +0000
Manifest this update:     Fri 24 Apr 2026 10:01:40 +0000
Manifest next update:     Sat 25 Apr 2026 10:01:40 +0000
Files and hashes:         1: 1-ZawBE2KVwZ6ch5n-kjcqmULc08.roa (hash: avI9enOgnl+yynJNmVDI/bPieULR/2YL8z47OvnAoGM=)
                          2: UA7MZYc-czHZyAm_jTZP6uIdkoc.roa (hash: y/+93xNILFZI2eCu1XR1bZH6lI5t/EYB1r4ioe1Vzp8=)
                          3: WA7nOx5qibTvUVvGfcmBcpak2Ks.crl (hash: FEsL+0fJma8jj97HHb95a0QXXONK6vLqOJW8eCnQoQk=)
                          4: mJY88gnCtE0_lJEMctYDc3XreZc.roa (hash: dILiJ64ptgJlU6ZR8SsCAYYl2fBgysDyRuWNcNNxdXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Apr 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:be:f0:1e:1f:7a:16:d4:49:a0:50:23:0a:08:7d:fd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580ee73b1e6a89b4ef515bc67dc9817296a4d8ab
        Validity
            Not Before: Apr 24 10:01:40 2026 GMT
            Not After : Apr 25 10:01:40 2026 GMT
        Subject: CN=188304bb729386ea672a0dda909df685761d73d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:91:38:0f:c0:f5:f3:58:4c:cb:2c:ff:4e:
                    eb:66:35:64:b9:7f:4c:2a:17:5b:3f:95:79:10:11:
                    79:a6:16:d2:98:22:58:7d:1a:92:c1:00:db:08:08:
                    c4:ab:7c:6a:f2:a2:88:3d:07:dc:0c:ed:f6:2d:f8:
                    64:13:5d:a8:19:3c:0a:a0:80:5f:bd:25:d3:04:36:
                    f9:de:fd:a9:c4:74:96:9b:1c:da:d0:11:93:52:69:
                    f5:82:cc:e3:4b:5b:0a:9d:c7:a8:6a:4c:d4:dd:19:
                    da:6a:39:dd:5e:86:f6:a9:42:85:0e:58:c3:86:1f:
                    54:bd:dd:13:f8:06:9c:85:45:4e:d3:49:8a:44:7e:
                    ca:57:e4:6f:84:28:72:26:4f:f0:62:91:f0:c8:0a:
                    ca:84:4c:d7:98:23:f1:55:eb:3c:17:be:6b:70:7a:
                    4f:61:64:4e:c4:a7:b0:ea:ad:8f:43:d7:6f:18:22:
                    6f:dc:a6:41:f6:cc:8c:d0:dc:ce:a3:73:2c:5e:0e:
                    f1:27:d6:f7:55:3f:a4:fa:ef:5c:30:5c:3e:95:91:
                    2a:fe:b6:a7:6a:d9:88:60:0d:61:38:9b:0e:33:01:
                    cf:1b:e8:e9:29:70:3d:b0:62:1a:44:5d:48:74:c9:
                    dc:de:c3:10:5f:86:02:e2:9c:0f:45:f7:9a:7c:f8:
                    c1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:83:04:BB:72:93:86:EA:67:2A:0D:DA:90:9D:F6:85:76:1D:73:D6
            X509v3 Authority Key Identifier:
                keyid:58:0E:E7:3B:1E:6A:89:B4:EF:51:5B:C6:7D:C9:81:72:96:A4:D8:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA7nOx5qibTvUVvGfcmBcpak2Ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/144c18-9e9e-4e81-9bbb-fa6a1875b947/1/WA7nOx5qibTvUVvGfcmBcpak2Ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:db:8c:c5:97:a2:68:cc:d0:bd:1e:23:a6:33:98:6a:0b:
         56:47:9b:f6:88:fc:3e:98:dc:43:4f:63:b7:6c:2f:49:d3:31:
         26:35:6f:83:05:14:30:88:fd:5a:f4:da:9b:78:80:c3:b2:a9:
         f6:b2:cd:bc:0c:fe:8f:55:29:68:86:91:76:22:66:27:0e:44:
         d4:32:67:6b:ae:66:76:96:30:0d:f1:a2:26:b6:58:84:99:7e:
         fb:0d:a5:67:1d:ba:5b:96:8b:41:bf:8b:7c:7f:4e:95:f9:61:
         8d:60:06:e0:24:4a:c9:00:04:c3:5c:97:8b:e9:2f:6d:44:16:
         3d:4c:2d:7c:e4:43:07:36:c6:4e:a1:81:dd:0a:35:ce:31:4d:
         10:49:8b:d7:08:46:e6:0e:ad:e3:a8:45:e4:32:ba:ee:8b:14:
         88:fd:c8:94:7c:14:03:6f:dc:a6:91:e2:8b:d2:0a:bc:b7:d4:
         3b:ab:92:07:bf:d3:25:19:29:6b:fc:18:80:1d:d7:bd:51:8f:
         63:a8:05:41:8e:d8:3f:1f:53:53:4a:0b:e2:16:9a:b2:0c:a4:
         e6:9d:60:7a:3e:bd:b9:8f:e0:ca:e9:00:b2:92:2e:86:e3:0d:
         8d:a7:75:9a:93:d2:5f:73:c6:23:73:f0:f7:7e:41:1b:eb:85:
         40:7a:21:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 15:50:50 2026 by rpki-client