Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File:                     wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier:          ITsMwx3/yCfHsvbV/+ZaGwp8i/3iB4E8aenvhpRmBuI=
Subject key identifier:   EE:D1:7E:0D:FD:DC:3D:69:A3:0B:F7:2C:D9:53:0B:D0:43:DB:C6:B8
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       019DCF7512348EED99FC02C2F734DF56E4F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number:          18EF
Signing time:             Mon 27 Apr 2026 15:00:49 +0000
Manifest this update:     Mon 27 Apr 2026 15:00:49 +0000
Manifest next update:     Tue 28 Apr 2026 15:00:49 +0000
Files and hashes:         1: 560muZF2ZFoUXzFHeehOMiu7TxY.roa (hash: a+kp1sRnHb+zyHfy5p6Tvl2ORdufjMmgMTLJNwAskEk=)
                          2: Jn0foO2nylOIzwPP_aMaHGiC2GY.roa (hash: ohSovumWWLhKdZhk5RrKtQ4CFLps70d/0Yn1l3fVxq8=)
                          3: VM0pLapdGx8fvQVDV102YwMpG_8.roa (hash: e7Glou5sCvTIjF7UOrM+pI35ruz4p3l8J2z8cZZnKCs=)
                          4: VmoSUZB_YwVO3RGWmDSF29nsGPs.roa (hash: aKDz3hszk2w0c4ThUwFprKtq7QSsO1nVkwJ3BeHiXA0=)
                          5: YJL1m4i4QHQXRNcDuKgXsonBGnU.roa (hash: mgdo2Tbf5EfthnmO/tzLkoHo1GPFwSNtM7tNPXp8qfk=)
                          6: atgm8CikLFGKzSou5jxPcfk50tg.roa (hash: AgRzREISSacFqjOC+wdNdpKstnMCeNBfZ8DphTvb7fs=)
                          7: bSNghNsXj0O_UpWy8HNgSqgK06c.roa (hash: 0NGKAdWwCE4N9xElDNPG0dRrl6HPJhaQ5Fv72afvE6E=)
                          8: p1THCo5uM8Pbdp5XB79Oi3ovbQg.roa (hash: ssTfln5EUyqHJxTZeKtRr4dmZA8VXk7SK0Av2d5HPsA=)
                          9: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: YpjQhFQITQmyUt0+/VxEbzy71n+fEUBw8KdbMDCCCJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 14:27:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:75:12:34:8e:ed:99:fc:02:c2:f7:34:df:56:e4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Apr 27 15:00:49 2026 GMT
            Not After : Apr 28 15:00:49 2026 GMT
        Subject: CN=eed17e0dfddc3d69a30bf72cd9530bd043dbc6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:d2:1e:69:aa:8b:d6:a8:da:9a:d0:2a:1d:
                    9e:e2:9d:3c:22:1d:24:be:26:cc:99:7f:1d:6d:dc:
                    53:c2:f4:16:74:d3:d3:9a:fd:ff:19:28:11:f8:ef:
                    b7:88:2d:14:bb:b2:76:da:62:0b:02:6c:9c:ba:70:
                    3d:18:e5:f1:9c:34:3d:ad:40:70:31:ec:34:48:a3:
                    2f:5a:b1:fa:cd:00:21:6a:71:27:51:e9:37:13:79:
                    46:a7:a2:af:44:6d:9d:25:bf:3d:1f:a5:2d:81:39:
                    c2:c0:97:ca:49:83:37:9c:81:51:56:14:bd:fc:d9:
                    3f:60:88:08:85:06:5c:a2:66:3f:bc:94:9a:22:8f:
                    34:af:62:79:8b:d8:33:d0:b0:0c:07:df:22:d7:e2:
                    c0:ec:ce:3f:75:d5:a4:fd:19:d2:be:4c:67:ad:aa:
                    d1:17:f8:11:7d:01:a2:73:36:0f:ad:b6:9b:57:cf:
                    86:cc:d7:75:7d:6e:c8:24:77:bc:9d:94:12:0d:fa:
                    a5:83:55:34:2d:aa:39:dc:af:e3:fc:5f:0d:4b:7f:
                    6b:16:14:e5:78:c2:f1:e7:df:e3:63:91:7e:7c:43:
                    9c:ac:c4:7e:7b:6f:dc:13:42:f4:85:b6:64:c8:5e:
                    f1:d5:3e:2b:72:ff:fc:0f:43:75:a2:38:54:a7:f3:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:7E:0D:FD:DC:3D:69:A3:0B:F7:2C:D9:53:0B:D0:43:DB:C6:B8
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:de:5b:92:e4:bf:01:dc:b8:d6:ef:bc:1f:aa:ac:a6:86:
         57:b0:52:40:21:17:91:c0:e2:7f:da:01:dc:e3:ce:44:e5:37:
         d4:10:4f:12:8b:8d:85:6b:24:34:29:6e:77:23:01:4c:1c:b5:
         1f:67:dc:86:71:95:23:d1:91:2b:91:0d:99:b4:31:e5:a0:d3:
         18:fa:67:49:57:a9:ab:0e:01:07:7a:24:c5:67:15:4f:32:ab:
         16:50:24:7c:65:7d:09:a7:34:c3:89:a8:e1:d4:ef:9f:6d:c4:
         cf:0c:50:07:5b:5f:7b:b6:3b:02:8f:d8:f2:e8:26:49:7a:f1:
         4a:06:12:83:b5:f7:d6:40:49:df:11:70:9d:2b:b0:5d:5a:93:
         91:d2:01:27:59:a9:16:ac:49:5f:d5:8d:13:be:a4:27:30:6c:
         64:78:65:cc:79:9f:75:41:1f:80:98:ba:0f:f6:3f:b2:aa:f0:
         b9:c0:96:6c:eb:dc:39:62:f0:b8:07:d9:83:ee:da:0f:f0:0a:
         e5:f3:96:3c:95:fb:1d:11:a4:d6:d7:85:dc:72:fc:ea:9f:be:
         c6:72:26:23:d7:b8:40:13:18:27:7b:5f:09:c8:cb:81:eb:ee:
         07:19:2f:e3:10:1e:ec:e5:28:27:84:40:72:c0:6c:5e:34:7b:
         1f:de:a0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:35:26 2026 by rpki-client