Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
File:                     WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json)
Hash identifier:          QTNime8bHYiwlot3Cy5iniuvrXeyR9Mf1Ja/JLrHPew=
Subject key identifier:   A0:10:8C:1C:B2:27:7A:25:5D:80:74:48:06:A7:38:17:3F:D2:AF:BB
Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD
Certificate issuer:       /CN=585d968f5be1ce671e20d5831c170001f372d3dd
Certificate serial:       019E1F7EC880984EEDEA4237E3C3ECF8929B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
Manifest number:          18B6
Signing time:             Wed 13 May 2026 04:01:02 +0000
Manifest this update:     Wed 13 May 2026 04:01:02 +0000
Manifest next update:     Thu 14 May 2026 04:01:02 +0000
Files and hashes:         1: TqCJ8DGIsYRUqwvjpLpaEq5Smdw.roa (hash: uq4vQs4ODd9sCXDYk4Ut6c6LpnPmQWEBmYs07mf3VWY=)
                          2: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: CmRXm4K/zLGxHmHzw3Yp8ATAG58eIib7FrJVPn0Fmqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:c8:80:98:4e:ed:ea:42:37:e3:c3:ec:f8:92:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd
        Validity
            Not Before: May 13 04:01:02 2026 GMT
            Not After : May 14 04:01:02 2026 GMT
        Subject: CN=a0108c1cb2277a255d80744806a738173fd2afbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:70:0e:5d:4e:05:c4:c5:86:58:95:33:9b:3a:
                    0d:82:2e:ff:64:e4:62:4c:28:06:1e:b5:7f:9d:d7:
                    42:09:d0:a4:c1:d9:4e:f4:79:66:db:ea:0d:8c:bb:
                    32:0d:76:5c:4c:df:ad:f8:fb:ea:76:f5:4e:a4:40:
                    ca:67:88:cf:e7:a0:fe:95:89:3b:1f:7b:04:30:d6:
                    13:56:1e:2b:5a:c5:36:ae:17:eb:80:6f:ba:84:5a:
                    b2:f1:61:32:2e:b5:7f:5d:92:fe:30:96:42:3b:65:
                    3f:a4:5d:e1:84:00:1b:86:56:b2:d4:ad:7a:cc:5f:
                    cc:54:7b:3f:30:b0:8f:49:11:cb:5a:ec:ca:3c:32:
                    6b:0a:8a:2e:51:f0:80:c4:79:4a:e0:50:a4:48:77:
                    47:33:09:ef:00:49:ea:6b:21:fd:c2:b2:e6:72:d9:
                    42:ef:f5:d6:63:bb:2e:c9:37:37:3f:1b:68:73:ed:
                    71:50:c1:ab:b8:d1:4b:84:6a:1b:80:a0:38:53:a7:
                    d4:53:3c:0a:76:20:6c:fd:43:fc:9f:13:d2:2f:b0:
                    ec:42:4d:f5:4d:a6:74:f9:db:0e:73:6d:07:46:61:
                    57:21:e1:9d:e5:30:05:a1:c1:5d:1d:9f:d4:14:71:
                    08:a7:71:f2:a0:74:e3:25:51:c8:88:8c:23:b6:7e:
                    d4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:10:8C:1C:B2:27:7A:25:5D:80:74:48:06:A7:38:17:3F:D2:AF:BB
            X509v3 Authority Key Identifier:
                keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:fc:32:47:63:1c:34:59:3e:fa:d9:80:e4:b8:bc:80:18:c9:
         b4:c5:a7:dc:6a:c1:71:33:9a:cf:d3:8d:a7:b7:0d:b8:aa:b6:
         49:4e:5e:c0:93:35:e9:ca:54:28:17:de:52:6a:39:8d:db:73:
         89:82:2c:2f:09:76:f1:32:87:b2:a7:9f:77:41:f6:d6:53:eb:
         51:00:86:12:58:ff:42:57:8e:c9:f4:25:64:fc:95:ed:ff:06:
         f8:f5:7e:ad:e4:78:14:98:91:1c:33:0a:e1:ea:f7:d5:0f:9d:
         58:00:5f:7c:22:1d:ce:db:f4:ec:af:10:00:56:a3:5a:f1:51:
         27:a0:40:ed:25:89:00:0d:f9:cd:f3:4d:01:79:fc:ea:4f:71:
         a7:94:de:0d:bd:4f:2e:49:b2:07:b9:03:03:12:62:26:d4:97:
         aa:0d:fd:e3:cf:b9:61:83:5d:2c:1f:b3:d5:69:7f:b2:09:e6:
         71:3d:cb:60:0f:d3:5c:84:3c:53:da:e0:ea:40:b2:d4:db:c2:
         6c:4b:db:f5:e3:d0:1d:a4:3d:a5:1f:77:2c:1d:e8:24:c9:47:
         3f:b2:2a:6a:65:ca:82:d3:59:d1:d1:51:af:10:1c:6a:d6:a6:
         a0:f4:9f:6a:61:a5:8d:92:9e:b1:1a:16:2c:9f:46:ca:b5:6d:
         8c:41:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:01 2026 by rpki-client