Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
File:                     WTtT-5MGNG8nJJSSjXeDnLr53cc.mft (raw, json)
Hash identifier:          c3aALobxbW99410O/RaXC05YB1w4qDnyJCa0H0AmHGU=
Subject key identifier:   AA:C5:AE:1A:88:FB:4A:40:CB:2D:CC:A6:13:4F:50:CE:2E:14:D9:1C
Authority key identifier: 59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7
Certificate issuer:       /CN=593b53fb9306346f272494928d77839cbaf9ddc7
Certificate serial:       019DCFE40482D788C831082723FBD825D316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
Manifest number:          18E3
Signing time:             Mon 27 Apr 2026 17:02:00 +0000
Manifest this update:     Mon 27 Apr 2026 17:02:00 +0000
Manifest next update:     Tue 28 Apr 2026 17:02:00 +0000
Files and hashes:         1: 5yWEOKzu4tvzVdJCuXKUJQcFoxU.roa (hash: em9VKbtVpINCVHChhYDyWfr7R23ZC9iQu/37D7dlUFw=)
                          2: WTtT-5MGNG8nJJSSjXeDnLr53cc.crl (hash: +6K1Llq4P7IFjUquLn6tBDqHl4e8o9AHOsk7Rwe7MNI=)
                          3: geQd8_VLJjb5G63zcYOl_5mIh_M.roa (hash: v6gFvhJOa+aQXgxxSKtJY1qv746y7xf2F3e0EqgA+wk=)
                          4: sI_BcImvqhW1VB2jGwFKlyR2UJw.roa (hash: rZhI4UUGBH6D1Xl5jMVJTIkzsORgEFhu4vJQGMva6aU=)
                          5: y8Erf7oDqsDbiw7iSwdN4CNhd_I.roa (hash: rypvlKQBui/mc1XY3OqD0s710e5y1IdgbvnR6X8SWA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 17:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:e4:04:82:d7:88:c8:31:08:27:23:fb:d8:25:d3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593b53fb9306346f272494928d77839cbaf9ddc7
        Validity
            Not Before: Apr 27 17:02:00 2026 GMT
            Not After : Apr 28 17:02:00 2026 GMT
        Subject: CN=aac5ae1a88fb4a40cb2dcca6134f50ce2e14d91c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:4c:14:55:07:34:41:e6:f1:29:d4:57:12:
                    91:29:c0:d1:e2:11:74:28:11:fa:5b:44:e9:44:00:
                    8a:94:76:ce:c3:96:73:12:e5:eb:d7:fd:91:c6:eb:
                    c0:bb:6c:01:3a:65:69:5b:fb:26:b9:d2:d6:a4:8b:
                    4d:b7:d7:3c:fc:0b:76:f4:33:75:7b:3d:11:72:b4:
                    39:81:8d:31:00:38:76:72:6d:77:25:6e:67:0c:86:
                    a3:d5:6f:1b:bd:45:ff:e6:70:f9:69:8a:d7:e2:27:
                    ed:ab:3b:f8:0d:80:e6:a4:42:43:2b:9b:0e:86:73:
                    d4:ed:ad:7e:ba:38:29:32:85:0f:7b:81:11:ee:ab:
                    57:03:72:f2:3c:35:f5:e6:56:05:c7:6c:8f:60:a1:
                    85:be:d5:47:99:55:4c:ef:7e:8c:ee:3d:34:7b:9c:
                    87:05:d5:8e:b5:88:e5:fd:cd:41:11:c8:68:38:ad:
                    27:c6:2f:ee:80:ef:87:5e:65:44:20:0e:59:98:e4:
                    27:7f:fb:cb:44:46:3a:cc:07:96:1a:e5:8c:87:c2:
                    d5:57:63:0a:e0:4a:6c:92:9d:0f:6c:ce:75:9e:bf:
                    fd:b0:a0:eb:35:43:21:67:3c:18:e6:62:cd:2b:9f:
                    07:c9:3b:45:8f:db:35:57:7d:54:e8:e2:92:8c:a5:
                    9e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C5:AE:1A:88:FB:4A:40:CB:2D:CC:A6:13:4F:50:CE:2E:14:D9:1C
            X509v3 Authority Key Identifier:
                keyid:59:3B:53:FB:93:06:34:6F:27:24:94:92:8D:77:83:9C:BA:F9:DD:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTtT-5MGNG8nJJSSjXeDnLr53cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/12fc9e-ea3b-41c0-950e-4475a9bf250e/1/WTtT-5MGNG8nJJSSjXeDnLr53cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:e0:e5:a6:5b:a2:a4:16:73:57:6b:a6:cc:32:ee:cb:01:
         33:37:1b:07:b1:a3:2a:e0:46:44:2b:40:5f:c3:01:b0:88:bf:
         08:62:0d:87:09:5d:b4:a5:a3:10:78:dd:74:bd:77:a3:98:62:
         cd:c1:83:1b:16:18:54:f1:ea:19:c2:33:73:bd:a6:41:78:9e:
         02:70:db:cd:40:5a:c8:b9:20:b9:59:83:3a:4f:c9:82:7c:fd:
         2d:0b:73:b2:a5:49:fe:a8:06:0e:e2:ac:05:54:2b:ba:72:26:
         9b:b7:ab:13:ea:70:59:fe:62:46:c7:20:3d:c7:c6:b4:25:7b:
         a5:68:a1:29:0c:34:2d:e2:fa:e5:02:35:23:1e:22:d7:52:c0:
         de:f7:54:23:39:11:ec:3d:a2:da:97:04:e4:fc:7c:eb:19:b5:
         9f:1f:c7:ab:95:be:c8:16:70:67:bd:2f:ad:3b:9b:48:97:b8:
         be:82:6a:c8:59:a4:ae:85:77:83:a2:b3:02:fb:d5:fc:3e:6e:
         89:26:3e:39:9a:b0:f7:21:87:28:c6:28:7f:93:ee:3c:dd:3c:
         f0:d5:99:7c:92:c2:e9:f0:e9:23:70:89:40:9f:1e:08:eb:c8:
         d2:89:78:6c:67:7a:47:08:f9:c6:cc:42:ca:18:e0:46:dd:52:
         10:fc:0e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:29:57 2026 by rpki-client