Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
File:                     w7DVNe688o5grJiuSVs0mBtak-w.mft (raw, json)
Hash identifier:          n9zq4xwPvRA8UuHtbweMD54a6N3HZSzgeVjtDIk6Tdw=
Subject key identifier:   97:B3:EE:9D:9F:4D:12:AA:ED:58:4A:17:27:7F:96:94:6A:D3:B0:E3
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Certificate issuer:       /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial:       019DCD4FF7DB9BE2E69E5756F3BBDCEB4896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
Manifest number:          18E2
Signing time:             Mon 27 Apr 2026 05:01:03 +0000
Manifest this update:     Mon 27 Apr 2026 05:01:03 +0000
Manifest next update:     Tue 28 Apr 2026 05:01:03 +0000
Files and hashes:         1: Ds_F00ohq3nXWLzRmi9aEPr67nU.roa (hash: 1EvXZP4sj8Rg0yDZm/YIiaxWg+BbA76mSJSuIRiuH9c=)
                          2: P12XKmajnQzt4TT10Louk6Kjyco.roa (hash: KqnQ+RYQfRbLN2Brq+Uz+gVyYb0l27obpG7KQSdsmEk=)
                          3: fePx0kRYwwPcb_zt9-rrwAjmN1w.roa (hash: 4KZtW3GQm6K/quUvrFVgvmKhOxzcCLWTN+/j8SN4EQI=)
                          4: w7DVNe688o5grJiuSVs0mBtak-w.crl (hash: AmRvxJxBIdMELejl5NIJLQuZsq8Ej9ArbQVu3qhWpNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:4f:f7:db:9b:e2:e6:9e:57:56:f3:bb:dc:eb:48:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Validity
            Not Before: Apr 27 05:01:03 2026 GMT
            Not After : Apr 28 05:01:03 2026 GMT
        Subject: CN=97b3ee9d9f4d12aaed584a17277f96946ad3b0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:54:ef:65:11:c6:84:7f:c2:1e:2d:e5:28:
                    b3:1f:7c:41:dc:22:1c:5d:e8:4c:00:b7:90:47:9f:
                    f5:2c:44:f8:b4:8b:3d:2c:b0:18:c6:fe:1e:d7:1a:
                    6d:98:13:f3:05:ad:c6:45:44:b0:d0:da:d6:43:2f:
                    b9:28:b0:ec:fb:d6:20:43:a7:6b:15:77:dc:38:7c:
                    73:3c:19:53:2a:82:ed:05:d7:ae:b3:65:7d:fd:d2:
                    53:d8:92:58:03:49:f7:4e:c7:e3:b8:49:d1:8a:de:
                    9f:c8:1d:32:8a:ff:b6:82:e3:33:60:08:2e:2f:58:
                    4b:84:90:51:c0:48:2d:e0:b6:bf:52:a4:72:e7:fa:
                    f6:da:7e:75:e9:3d:71:4e:3e:ab:52:f9:d8:8a:5e:
                    7b:a1:84:b7:14:0b:59:46:2d:44:f4:9f:b2:a9:f8:
                    f0:99:89:d1:bb:20:f3:14:a1:e9:3a:33:cb:44:ef:
                    0f:35:53:7f:dc:5e:c4:90:e3:fc:00:f3:b6:d1:44:
                    7f:fc:f8:e4:87:f2:42:5f:86:b4:92:8e:40:18:c8:
                    f4:2e:d6:33:8a:6c:04:55:bd:bd:9a:a1:52:fb:7d:
                    12:24:17:34:ab:73:16:e9:44:3e:04:dd:79:3e:68:
                    0a:2e:ad:05:1c:82:cf:75:31:6f:50:df:9f:a8:46:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B3:EE:9D:9F:4D:12:AA:ED:58:4A:17:27:7F:96:94:6A:D3:B0:E3
            X509v3 Authority Key Identifier:
                keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ee:49:3a:a2:2d:c9:7f:b2:0d:88:22:1e:79:91:9d:28:80:
         3f:23:72:8c:ff:a6:cd:9e:93:24:6c:c6:f4:af:37:ea:79:75:
         7c:59:46:b5:4e:ca:a2:b9:c8:51:f5:a3:8a:d6:c1:16:bd:13:
         75:a8:d0:8b:ba:41:21:55:41:e9:07:b7:b8:83:77:b7:2c:84:
         cf:a9:f9:54:eb:b1:9b:a5:26:6a:e3:5f:f2:a9:52:7e:e2:9d:
         11:6b:11:dc:62:58:14:3c:0a:f8:7e:bd:0f:7c:1d:4d:25:0d:
         84:74:ef:27:aa:a0:ac:ee:00:80:de:f0:a4:18:bb:ba:53:aa:
         2b:dd:20:e0:8b:52:73:b1:9d:51:38:23:2f:0d:f2:2a:7f:38:
         c2:8d:34:fe:5e:58:d8:e2:f3:de:42:4c:d7:a3:ba:13:39:01:
         75:b6:57:ba:af:2e:cc:dc:6b:48:44:20:71:5f:75:91:b2:ac:
         19:be:36:15:18:9f:1a:e1:e5:c7:fe:ba:81:fd:5b:fe:9f:38:
         84:90:7c:d9:f0:fc:5d:a8:fc:26:fd:91:2d:6e:a8:58:84:3d:
         d5:cf:1d:ed:14:48:6e:f4:59:1e:ae:c6:4d:23:19:0a:47:9f:
         2b:08:b6:1e:62:ad:d3:2a:9d:ac:de:91:5a:0f:cb:1e:b3:2c:
         53:1b:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:18:27 2026 by rpki-client