Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File:                     wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier:          IfKiLwhR/b2v+1IIELtWTuP2CIm3+SAp9b5AxRYBEss=
Subject key identifier:   F7:BA:F7:F0:19:F1:B4:5C:B9:83:5F:10:52:A7:11:5F:26:87:C4:18
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer:       /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial:       019DD12C80533B8EEA22D26253AEF3818B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number:          18E7
Signing time:             Mon 27 Apr 2026 23:00:47 +0000
Manifest this update:     Mon 27 Apr 2026 23:00:47 +0000
Manifest next update:     Tue 28 Apr 2026 23:00:47 +0000
Files and hashes:         1: FoYyMk5nn_mx43Eqm4w9S-GFiOo.asa (hash: tIjIVbBkyqnMiqD5rmUgC1pkH2WtDxCN/8HGaRwdDA0=)
                          2: GNUScliA15EVg12KS0aiN6LNf4o.roa (hash: jgNE4zzdH3wyJCQBwY43az2dGkMcZm+AtuFzQMGyrHk=)
                          3: UK4Q1ou-4RzyU8ZkqdAW7bZ71v4.roa (hash: Uo9npzMSKoS6/XK/1Kx/5n7ypwDrpKkycXGmZ34WNR0=)
                          4: c0Jzt3bIEhRRa4PKEVY4MtsUsds.asa (hash: gGqMQoDe6c9sXdZ7ZcSzgdriRo31EV4kvGW39wn8ulc=)
                          5: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: 6eWtOldA481o87mPuqx90uKIxXx3DJktqwQYdXuwyzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 23:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d1:2c:80:53:3b:8e:ea:22:d2:62:53:ae:f3:81:8b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
        Validity
            Not Before: Apr 27 23:00:47 2026 GMT
            Not After : Apr 28 23:00:47 2026 GMT
        Subject: CN=f7baf7f019f1b45cb9835f1052a7115f2687c418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5e:67:29:e3:e4:14:30:d5:1c:a7:ed:58:2b:
                    d0:70:4f:e3:a5:c7:a6:84:69:ba:88:a1:83:7f:a2:
                    a4:29:43:96:fe:d2:11:41:8e:ec:d5:bf:09:3d:68:
                    06:09:8d:42:d7:45:7e:7f:74:8f:59:be:27:cb:42:
                    ff:69:7b:1a:53:e8:35:53:4c:72:65:25:73:1d:ad:
                    5e:4b:61:80:50:12:53:e7:ee:06:b2:77:6a:bb:ec:
                    84:f8:df:4f:82:9d:d5:3c:14:a8:e4:35:21:83:bc:
                    85:f9:a1:99:16:b7:05:03:7f:e7:8b:23:3c:c4:e1:
                    7e:7e:28:f5:19:6e:40:4d:eb:97:7e:67:4c:59:50:
                    e7:97:70:fa:24:a4:85:63:db:86:e5:84:b3:f8:93:
                    6d:51:ee:fd:1a:58:fd:b3:fc:38:29:de:8b:30:41:
                    e6:54:c0:96:12:c0:a2:26:23:65:06:b6:24:e2:dc:
                    36:fa:0c:92:30:2a:89:4d:c3:54:a2:e7:dd:53:ae:
                    73:c4:8d:8e:fb:db:2a:f9:0f:3d:f2:d4:00:d2:1d:
                    d3:9b:e2:b9:8b:42:1f:c9:c3:e7:d7:ff:b2:27:7a:
                    ce:ae:e6:04:18:38:b8:98:84:e0:07:5a:da:f1:fa:
                    0d:57:fa:43:92:a0:4f:00:c9:96:c3:1d:3c:81:2f:
                    9c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BA:F7:F0:19:F1:B4:5C:B9:83:5F:10:52:A7:11:5F:26:87:C4:18
            X509v3 Authority Key Identifier:
                keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:f9:84:00:f6:98:07:9a:34:b5:63:1b:bb:fe:7f:e7:85:6c:
         46:df:f2:5e:10:cd:de:a8:41:88:9a:48:07:bf:8d:e9:5f:ef:
         59:81:bd:53:60:59:36:d1:67:d0:f5:7b:c8:3c:2e:6c:2c:d6:
         79:d9:53:a8:30:89:dd:86:a8:35:69:41:09:15:3d:8a:70:ef:
         79:1e:58:f8:fe:26:0e:f6:af:04:c8:87:2e:3f:48:aa:a4:39:
         80:65:d9:53:86:c0:01:8b:9e:8c:07:a2:4b:65:0d:34:53:f3:
         10:3d:d6:24:f5:c3:64:4c:57:cb:7a:00:b5:a2:57:ad:79:cf:
         5c:89:67:8a:19:00:ac:b5:80:f3:f7:a1:97:78:e3:af:8a:b0:
         a1:66:0c:31:d9:8f:9c:a7:9f:c3:a4:ad:7c:18:e6:7f:8f:28:
         a9:16:5d:29:f2:a7:37:45:a4:ab:76:38:83:ab:e4:11:29:b5:
         5f:75:22:08:42:12:47:b3:85:a3:bb:9c:4a:ae:70:d2:ee:95:
         66:d6:54:4a:8e:2d:31:fb:93:af:9a:85:fc:fe:5a:20:83:1d:
         7f:54:95:bc:45:11:ac:b4:02:0a:d2:4a:e8:98:a8:77:de:e8:
         5f:ae:5c:3f:76:89:86:43:75:00:cd:f5:e4:fc:88:c7:d9:de:
         d7:0d:ef:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 04:45:59 2026 by rpki-client