Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          c8hBdseyPBJSlGu2HuYz4IGxlfMJhvaai2HrkLo8Cmg=
Subject key identifier:   0B:2E:60:D7:04:65:44:F7:CB:DE:C2:5A:CC:A3:48:41:73:2F:44:59
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       019DCC069485ED6E668039A82A8F9CAF706C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          18E2
Signing time:             Sun 26 Apr 2026 23:01:16 +0000
Manifest this update:     Sun 26 Apr 2026 23:01:16 +0000
Manifest next update:     Mon 27 Apr 2026 23:01:16 +0000
Files and hashes:         1: CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa (hash: 62NrbZ3F0XaxVmb0wIiq4eSU0cht7XOifDXoDw7smqk=)
                          2: Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa (hash: idu2KS48f2h5e79Q1R66rhjvET6BFhf6C4kPWcByyac=)
                          3: NyFZ2eW1WSoY97If0z5zbstqwOc.roa (hash: tzK5PMS/xleldxj4Om3hBpSiQl1y+6+WsVVnD8xC2Jk=)
                          4: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: hLOAh2mZiBN6x3K7S14/e+6dVKJp5FWReqG/a55Wpc4=)
                          5: ebzad07NZYcwcy_R1eapuxHVLc8.roa (hash: npZjo0OeCdQvVEsvxdLKnv7xOn/66fNjn6RzPB16PNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:06:94:85:ed:6e:66:80:39:a8:2a:8f:9c:af:70:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Apr 26 23:01:16 2026 GMT
            Not After : Apr 27 23:01:16 2026 GMT
        Subject: CN=0b2e60d7046544f7cbdec25acca34841732f4459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:72:8b:02:a1:41:ca:ae:a7:15:5a:0a:d2:ae:
                    c4:23:8a:79:35:f0:7a:58:3f:80:b6:07:3d:97:12:
                    6f:9d:6b:54:1b:19:23:c8:2d:e1:64:5a:12:1f:64:
                    4f:6f:3c:5e:b5:98:85:ff:e1:f9:a8:5f:72:f1:c1:
                    d9:dc:0c:14:2f:ae:40:e8:62:1c:1b:29:87:0d:b1:
                    24:21:b5:57:7f:6a:d6:38:3b:d2:96:6f:2d:b5:a3:
                    fe:6e:c4:19:0e:e4:7f:a3:d4:50:3a:7a:d9:93:3d:
                    a7:c3:3e:d0:6b:86:bd:76:17:33:13:21:43:4d:c0:
                    e3:59:96:7d:2d:df:3e:03:e9:cd:fd:ee:17:e7:ed:
                    8e:fb:a8:ac:44:f0:ba:ef:c4:47:19:56:1e:7d:a9:
                    a1:3f:63:df:3a:39:fd:44:23:c1:77:5d:21:06:d3:
                    eb:38:0b:51:bf:fe:45:49:38:11:6e:2a:b4:0a:8d:
                    a9:09:b9:9c:96:d0:23:7a:d6:de:a2:3a:96:6a:62:
                    48:74:eb:d4:f9:5e:1b:27:39:4f:27:c3:dd:2e:fb:
                    2d:ec:71:74:54:aa:88:f8:55:d9:dd:00:84:24:9e:
                    16:c4:45:e2:bb:d1:7a:8b:b0:a3:d8:46:63:d5:6f:
                    69:31:f9:fd:65:7d:b6:93:fe:29:a9:9d:1c:48:fc:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2E:60:D7:04:65:44:F7:CB:DE:C2:5A:CC:A3:48:41:73:2F:44:59
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:65:0c:92:eb:6b:dc:56:2f:66:de:63:b6:4b:5e:e7:a8:d2:
         c0:93:4d:d9:82:da:b4:bb:0e:88:03:22:da:0e:46:f3:fc:4e:
         14:53:44:f0:e9:7d:41:45:ae:39:84:5c:0f:26:9c:4d:22:c4:
         ae:03:29:5d:2e:c9:69:e8:a4:a5:d7:02:e6:7a:7b:5e:c8:8e:
         0d:9d:02:9d:00:4b:0f:0b:5c:f1:05:66:de:c1:e5:ef:1f:0e:
         d9:b9:d4:25:45:50:92:ee:ba:88:89:ab:d0:33:17:62:cd:9e:
         60:f0:3d:08:62:d1:83:2f:7d:ff:a0:d3:e1:47:c0:09:b9:b5:
         0d:27:d5:82:e9:09:45:eb:e0:70:a3:44:a6:a9:af:7b:79:b6:
         07:b8:5f:16:13:9e:0c:4c:ab:95:f2:0a:8f:fc:08:1e:b6:d8:
         54:be:e4:9b:2c:78:c7:2d:ba:98:c4:d4:89:69:01:2e:d5:1f:
         f8:d0:4f:be:87:30:aa:74:8a:5b:92:14:cf:8b:26:cc:74:77:
         03:e0:23:64:02:9d:26:a4:68:bf:82:ff:f0:44:b1:63:1e:3e:
         a0:88:a9:5a:ce:67:8f:18:3a:ca:84:e9:07:d7:a3:93:2c:22:
         97:04:12:40:88:32:2b:76:20:34:a9:8d:88:c1:32:1e:a5:d4:
         f3:2c:69:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3MBpSF7W5mgDmoKo+cr3BsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OGZhNDIwMTM0NGQ0MTA3Zjc5MmVlZTI1NjZjNjJkNjU3
MTRlMmQwHhcNMjYwNDI2MjMwMTE2WhcNMjYwNDI3MjMwMTE2WjAzMTEwLwYDVQQD
EygwYjJlNjBkNzA0NjU0NGY3Y2JkZWMyNWFjY2EzNDg0MTczMmY0NDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnKLAqFByq6nFVoK0q7EI4p5NfB6
WD+Atgc9lxJvnWtUGxkjyC3hZFoSH2RPbzxetZiF/+H5qF9y8cHZ3AwUL65A6GIc
GymHDbEkIbVXf2rWODvSlm8ttaP+bsQZDuR/o9RQOnrZkz2nwz7Qa4a9dhczEyFD
TcDjWZZ9Ld8+A+nN/e4X5+2O+6isRPC678RHGVYefamhP2PfOjn9RCPBd10hBtPr
OAtRv/5FSTgRbiq0Co2pCbmcltAjetbeojqWamJIdOvU+V4bJzlPJ8PdLvst7HF0
VKqI+FXZ3QCEJJ4WxEXiu9F6i7Cj2EZj1W9pMfn9ZX22k/4pqZ0cSPyx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAsuYNcEZUT3y97CWsyjSEFzL0RZMB8GA1UdIwQY
MBaAFFmPpCATRNQQf3ku7iVmxi1lcU4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2It
NjY0YjhmMDNkMTgwLzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84MzhlZjEtNzM5My00ZmJkLWI2N2ItNjY0YjhmMDNkMTgw
LzEvV1kta0lCTkUxQkJfZVM3dUpXYkdMV1Z4VGkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGUMkutr
3FYvZt5jtkte56jSwJNN2YLatLsOiAMi2g5G8/xOFFNE8Ol9QUWuOYRcDyacTSLE
rgMpXS7JaeikpdcC5np7XsiODZ0CnQBLDwtc8QVm3sHl7x8O2bnUJUVQku66iImr
0DMXYs2eYPA9CGLRgy99/6DT4UfACbm1DSfVgukJRevgcKNEpqmve3m2B7hfFhOe
DEyrlfIKj/wIHrbYVL7kmyx4xy26mMTUiWkBLtUf+NBPvocwqnSKW5IUz4smzHR3
A+AjZAKdJqRov4L/8ESxYx4+oIipWs5njxg6yoTpB9ejkywilwQSQIgyK3YgNKmN
iMEyHqXU8yxpoQ==
-----END CERTIFICATE-----
Generated at Mon Apr 27 04:32:30 2026 by rpki-client