Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
File:                     Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json)
Hash identifier:          92fnR1f2IDDVqCoaxgRoMJOui7q3Nw6AE/uVgTY/isg=
Subject key identifier:   14:9A:34:C3:3C:C7:96:8E:4A:45:E9:16:0D:F6:71:B9:46:F3:71:B5
Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55
Certificate issuer:       /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
Certificate serial:       019DCE2BAC50C0D0BC0FD351F01454B24C18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
Manifest number:          18DE
Signing time:             Mon 27 Apr 2026 09:01:01 +0000
Manifest this update:     Mon 27 Apr 2026 09:01:01 +0000
Manifest next update:     Tue 28 Apr 2026 09:01:01 +0000
Files and hashes:         1: MC5PSzUtzRQLOMEVXjL8dSomLZ8.roa (hash: zde/7UrTAADTl5AjksUxuIY8cO6qAQg0t4ksuzJo5dU=)
                          2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: VprIKP5iN/ufGQ9LU69AS4QmG5y/9PK1bDNAki0bcF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:2b:ac:50:c0:d0:bc:0f:d3:51:f0:14:54:b2:4c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
        Validity
            Not Before: Apr 27 09:01:01 2026 GMT
            Not After : Apr 28 09:01:01 2026 GMT
        Subject: CN=149a34c33cc7968e4a45e9160df671b946f371b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6a:9b:a0:b2:d5:fa:9d:c3:2d:30:58:a5:2d:
                    9f:36:d6:18:70:40:75:39:5b:96:f8:8b:93:4f:81:
                    35:49:64:a0:8b:d5:49:01:4c:48:96:42:dc:a6:35:
                    42:04:12:6f:77:e9:31:64:55:38:4a:a9:91:da:cb:
                    12:1f:ba:3a:72:ff:e3:a2:28:b4:a3:86:5e:43:a6:
                    ed:ad:05:d7:6a:90:0d:07:4d:e4:37:5f:e7:35:b4:
                    ae:f6:c1:0d:8c:06:99:f2:8c:c0:7e:15:30:06:58:
                    4d:fb:e7:28:48:0e:78:08:86:19:31:0e:d3:78:13:
                    d3:f9:db:81:9b:e7:d7:2e:2a:b0:77:98:01:86:84:
                    42:db:e8:3d:5d:b3:e4:25:95:92:7a:2b:94:a7:ed:
                    32:fc:6c:ba:97:3f:51:de:67:bc:94:a6:22:34:93:
                    e0:a7:91:a0:7a:0a:8c:e4:b6:bd:12:79:76:6d:d7:
                    ac:7f:59:cd:25:ae:b0:06:95:40:e2:ae:c5:e9:f4:
                    a9:14:f6:1d:44:f6:f0:a8:a5:69:6e:ba:71:5c:99:
                    e2:69:15:24:8a:ba:91:6e:0a:63:7b:a9:36:79:a6:
                    fc:e2:23:fa:dc:92:b0:c2:f3:5f:33:8a:a8:e8:66:
                    fb:60:5f:8a:60:fd:6a:bb:15:db:b1:79:fd:38:47:
                    81:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9A:34:C3:3C:C7:96:8E:4A:45:E9:16:0D:F6:71:B9:46:F3:71:B5
            X509v3 Authority Key Identifier:
                keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f8:a1:0e:b0:7a:96:e9:13:11:96:16:99:29:fb:66:5f:7b:
         3d:a0:f7:60:99:5a:86:03:13:8e:85:35:82:b8:89:49:bc:c6:
         09:ce:37:21:d0:fe:36:26:de:9f:1b:25:1d:0b:e6:8f:82:e8:
         ea:32:4e:eb:6f:54:f0:be:d4:ea:34:cb:c6:dd:7c:5a:cc:42:
         28:56:c9:dd:9a:d3:a9:ad:41:1a:84:ba:ec:08:27:9a:92:75:
         86:fc:44:f5:27:d4:7d:57:43:00:1f:e3:38:53:77:d8:0c:e1:
         00:13:70:aa:f1:f1:3a:67:06:a3:aa:84:e9:94:94:c0:69:56:
         90:01:31:b8:21:3c:00:1c:1f:e0:7d:37:0a:5b:6b:d1:25:86:
         e6:1b:08:2e:0b:f8:74:a0:c5:07:62:26:45:28:08:4a:a2:bf:
         db:89:dc:21:f6:5f:71:2b:06:cf:d6:93:0e:95:02:e0:4a:47:
         1e:ae:e2:be:97:89:cb:06:4f:e0:22:fb:9e:01:a2:c2:fb:6d:
         2d:6e:ff:e2:8c:c8:d2:0b:10:a1:8c:7c:b7:ec:c3:84:8d:e1:
         2a:b1:fa:6d:5d:13:fa:f5:ac:0e:e2:5a:cd:c2:71:32:e7:62:
         75:fd:e6:fd:54:42:85:30:bf:77:24:0f:49:d7:86:d3:26:67:
         b9:e3:08:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OK6xQwNC8D9NR8BRUskwYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWEyY2YyZjEzNzQ1ZWUxYmJmN2YwYTc0YmVhZDNjZTUw
NzQ4NTUwHhcNMjYwNDI3MDkwMTAxWhcNMjYwNDI4MDkwMTAxWjAzMTEwLwYDVQQD
EygxNDlhMzRjMzNjYzc5NjhlNGE0NWU5MTYwZGY2NzFiOTQ2ZjM3MWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mqboLLV+p3DLTBYpS2fNtYYcEB1
OVuW+IuTT4E1SWSgi9VJAUxIlkLcpjVCBBJvd+kxZFU4SqmR2ssSH7o6cv/joii0
o4ZeQ6btrQXXapANB03kN1/nNbSu9sENjAaZ8ozAfhUwBlhN++coSA54CIYZMQ7T
eBPT+duBm+fXLiqwd5gBhoRC2+g9XbPkJZWSeiuUp+0y/Gy6lz9R3me8lKYiNJPg
p5GgegqM5La9Enl2bdesf1nNJa6wBpVA4q7F6fSpFPYdRPbwqKVpbrpxXJniaRUk
irqRbgpje6k2eab84iP63JKwwvNfM4qo6Gb7YF+KYP1quxXbsXn9OEeBxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSaNMM8x5aOSkXpFg32cblG83G1MB8GA1UdIwQY
MBaAFFsaLPLxN0XuG79/CnS+rTzlB0hVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yNGYwMmQtYjIzYS00YzgxLTkxZjAt
N2Y5MDI1ZTUzMTA5LzEvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yNGYwMmQtYjIzYS00YzgxLTkxZjAtN2Y5MDI1ZTUzMTA5
LzEvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffihDrB6
lukTEZYWmSn7Zl97PaD3YJlahgMTjoU1griJSbzGCc43IdD+NibenxslHQvmj4Lo
6jJO629U8L7U6jTLxt18WsxCKFbJ3ZrTqa1BGoS67AgnmpJ1hvxE9SfUfVdDAB/j
OFN32AzhABNwqvHxOmcGo6qE6ZSUwGlWkAExuCE8ABwf4H03Cltr0SWG5hsILgv4
dKDFB2ImRSgISqK/24ncIfZfcSsGz9aTDpUC4EpHHq7ivpeJywZP4CL7ngGiwvtt
LW7/4ozI0gsQoYx8t+zDhI3hKrH6bV0T+vWsDuJazcJxMudidf3m/VRChTC/dyQP
SdeG0yZnueMIRg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:31:31 2026 by rpki-client