Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
File:                     WDMpShzcE1ivxDnApyczsGWob4s.mft (raw, json)
Hash identifier:          XuH3X9xLMyiYv+ceMtnX+igbJtgl9ssUt8//b41l3rI=
Subject key identifier:   31:E3:0C:DA:4C:9E:2D:5F:14:BB:FC:5D:09:FA:CA:31:12:FD:A8:C8
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Certificate issuer:       /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial:       019DD7D41142ED1B3CA3B1D34056084B595D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
Manifest number:          1647
Signing time:             Wed 29 Apr 2026 06:01:32 +0000
Manifest this update:     Wed 29 Apr 2026 06:01:32 +0000
Manifest next update:     Thu 30 Apr 2026 06:01:32 +0000
Files and hashes:         1: LE-mWIFEaw_P2vdW__MBRwtK_Dk.roa (hash: Vzf9BsyT6wUuoymZACJaMGemmUDOWotnRVOQ6nohqtk=)
                          2: WDMpShzcE1ivxDnApyczsGWob4s.crl (hash: DrDInUuXxKK/UF/6kfLFSsmiGX/yqTWW7jxyUPH4l3Y=)
                          3: WjTFV_vkw2RluZfzr_tOVqRjj-w.roa (hash: YJ6SM71rDrIoVYHl9P05G0LuNuKEMPjdz3ZQbSRBc0o=)
                          4: aAMBxABuNWLMiDFEaZfaORcJfCc.roa (hash: OsAfZ4nItSdNeg7Pa91VVHU6gTtzsTtVrhEZpgCzWwc=)
                          5: ejwbFPhATqylSwO48MC87csxibE.roa (hash: RaSUYk9rFkC5b/EdXmZf9la1zC9aeBsb5R7RgPQgXfo=)
                          6: xzWZwX5dFxrjNrqyC87RwCdeYwI.roa (hash: 6Pa9VX5amyqk8NFVQLYL7l7qsZQa9+9iDgCKM+czywk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Apr 2026 06:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:d7:d4:11:42:ed:1b:3c:a3:b1:d3:40:56:08:4b:59:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
        Validity
            Not Before: Apr 29 06:01:32 2026 GMT
            Not After : Apr 30 06:01:32 2026 GMT
        Subject: CN=31e30cda4c9e2d5f14bbfc5d09faca3112fda8c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:56:a3:ee:16:7c:84:5a:37:d8:8d:b8:30:e8:
                    96:4e:53:19:5e:0f:ea:95:aa:9d:07:a8:76:61:b9:
                    98:07:34:45:a7:2f:14:50:47:a9:67:d7:5f:e0:4a:
                    df:39:b3:e8:16:49:c0:af:04:d5:a0:60:19:da:66:
                    bd:8d:48:1d:3a:71:85:79:4b:00:36:ab:78:95:ef:
                    86:1d:eb:83:ad:18:44:1c:83:59:d5:cb:31:09:53:
                    26:f1:d3:3f:ba:a2:80:9b:92:c4:c5:87:78:8b:8b:
                    bd:73:3e:8e:2f:c3:5a:a7:a8:ab:e7:59:d9:bd:78:
                    92:5c:20:ea:16:d4:38:a8:39:8a:4e:50:34:be:16:
                    6d:bf:ba:40:a9:5d:23:58:d8:23:e2:fa:45:9b:76:
                    bc:74:43:3c:27:34:fd:b0:99:30:7f:76:c2:f6:ec:
                    cc:72:d5:e0:a0:5e:f6:35:22:77:6c:95:4b:41:7b:
                    e9:2a:d8:71:d2:4a:a6:9a:b8:47:1a:d9:fe:bb:e6:
                    6f:ec:98:3c:18:d0:90:dd:e5:cf:04:3a:71:b6:4e:
                    5b:56:12:89:0b:00:99:58:70:d9:a1:fb:ec:56:66:
                    b1:74:73:30:a2:5a:67:f4:b1:90:39:d0:35:cb:32:
                    6d:79:66:05:d1:9e:30:d4:2a:01:f8:01:48:d0:18:
                    a3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E3:0C:DA:4C:9E:2D:5F:14:BB:FC:5D:09:FA:CA:31:12:FD:A8:C8
            X509v3 Authority Key Identifier:
                keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:0c:b9:25:57:ff:8c:19:23:6f:07:cf:ed:5b:dd:22:0a:d4:
         82:be:a9:50:29:8a:ea:c0:50:c4:6f:d4:a4:14:b6:13:34:88:
         9a:0e:c1:01:a5:69:a6:b1:8e:e6:7d:26:9b:81:4e:64:66:be:
         ea:ad:a9:97:15:01:1e:4a:06:b9:bf:52:46:93:4a:eb:06:32:
         a2:b2:f6:8b:a1:04:bc:4f:6b:73:76:c3:52:7b:cb:6a:eb:a5:
         28:b7:a9:9d:49:3d:dc:94:96:cc:c5:37:7e:84:96:5d:ad:8e:
         fb:79:d6:6e:a0:a5:48:34:1a:ab:fb:02:64:fb:51:77:ec:0b:
         e3:90:30:07:79:ea:b8:39:da:9a:fc:46:f3:44:a4:19:a2:33:
         72:a7:8d:3e:43:38:af:0d:a5:51:c7:5a:88:25:8c:e9:40:5d:
         77:4f:3a:b1:05:4a:36:d8:26:1a:75:87:5c:1e:1c:19:c5:0e:
         23:7c:53:40:17:33:64:1a:a4:36:86:9b:79:a2:16:80:25:84:
         7c:e6:e4:5f:a3:2c:51:9a:6c:21:11:ae:2a:a7:1b:16:1b:f0:
         1b:9a:15:32:21:15:65:3d:81:a0:ce:4e:e1:0a:1d:b3:fa:e5:
         f5:0d:85:2a:02:26:f3:b6:ed:59:24:ac:69:a3:b3:66:e0:5d:
         ac:22:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:05:11 2026 by rpki-client