Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
File:                     wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json)
Hash identifier:          Us2IKPeSWX5KcJ6id5UoKvAS0OEhBr7iK2sfql/k+Og=
Subject key identifier:   A0:38:40:A6:E2:BA:E4:A3:DE:B6:5A:4E:6B:08:3A:BC:98:0C:8A:F9
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Certificate issuer:       /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial:       019D98BD62F9CC50AEC0A65FA2AC5D975E57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
Manifest number:          0CAD
Signing time:             Fri 17 Apr 2026 00:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:41 +0000
Files and hashes:         1: 7r4lRPQc-QTSmeOcUsrSRcjkV4c.roa (hash: OocvrP+x2oNsYStihaud30OWGNdq9vGwzjAJqLEWJFg=)
                          2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: 6c85dR1r5XkQp0YEudN++99qAoyvxPkyK0f1ilCC/3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:62:f9:cc:50:ae:c0:a6:5f:a2:ac:5d:97:5e:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
        Validity
            Not Before: Apr 17 00:00:41 2026 GMT
            Not After : Apr 18 00:00:41 2026 GMT
        Subject: CN=a03840a6e2bae4a3deb65a4e6b083abc980c8af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:45:73:a2:88:08:68:2c:93:b7:f3:c8:12:
                    80:0c:7c:c9:1e:f6:bd:0c:a8:9d:1c:ce:be:4a:aa:
                    c6:e6:80:a1:b9:96:04:b8:14:10:2c:31:65:90:76:
                    c6:a5:dc:ac:f4:01:0a:31:91:44:a0:67:6e:8b:52:
                    3d:7e:7f:a1:d8:a2:bd:88:51:f6:6c:e2:ee:91:71:
                    50:eb:be:2f:27:67:13:9a:34:b6:a9:93:f1:f8:9e:
                    74:4e:ac:5c:fb:80:c8:64:93:ac:0e:f2:54:00:6e:
                    a6:6b:86:e7:06:4b:4b:99:1b:98:78:15:a7:ad:7a:
                    72:ea:de:65:9b:9a:6b:86:2a:9f:c4:00:6c:47:67:
                    50:31:11:10:cc:e8:80:ba:0a:36:04:24:b2:9d:95:
                    13:84:16:61:df:52:98:9b:e3:c5:85:22:83:f6:36:
                    48:fe:27:64:39:16:ed:dc:43:69:7a:82:22:52:2d:
                    01:0a:46:80:26:a6:f8:9d:01:86:a8:98:75:91:36:
                    f4:57:6b:3f:3d:7b:c9:12:07:b7:f5:ad:2b:25:9a:
                    da:b6:18:df:f6:27:a2:da:0a:ac:ea:51:7e:bf:b2:
                    e6:03:ba:37:07:17:c6:be:af:b8:7d:7a:0e:12:e7:
                    5c:b6:0c:62:3b:ac:14:a4:d0:55:17:ba:5b:de:54:
                    71:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:38:40:A6:E2:BA:E4:A3:DE:B6:5A:4E:6B:08:3A:BC:98:0C:8A:F9
            X509v3 Authority Key Identifier:
                keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:5e:2e:50:62:ff:7e:bb:69:14:d7:ad:35:7c:3f:9b:f9:
         c5:a3:0d:cc:72:4d:73:f8:17:2d:18:62:5f:a5:92:c0:43:ef:
         f4:89:1e:5f:e4:c9:7e:59:42:4e:f1:87:60:15:36:77:57:8e:
         9a:5b:0b:3b:fe:20:5b:e8:28:a9:bc:68:d4:73:fb:9e:6b:02:
         8e:0d:21:0d:84:03:4c:38:c4:51:e9:a5:2a:2f:ec:d5:c8:52:
         e0:b1:06:b0:ef:e8:b1:fb:a4:2e:76:c3:78:1b:e6:31:ed:25:
         31:af:cf:04:71:fb:21:43:a4:7d:50:4d:ec:89:d1:08:d0:9c:
         05:00:d4:70:8d:21:cb:7b:a9:98:9e:ad:11:63:2f:d1:c4:18:
         90:ba:8c:f7:b7:ec:d8:c5:e7:3a:05:db:bc:8a:ed:44:60:26:
         0f:e5:af:e2:25:d0:89:34:b4:23:f1:86:1f:6c:f7:e4:42:f6:
         f1:4c:e8:09:a8:e4:74:4b:14:68:1f:ef:5b:df:2d:01:97:1b:
         7e:ad:bb:6e:9a:36:c1:fa:4a:c1:7d:ff:eb:53:81:de:15:03:
         21:df:5f:59:94:91:39:5d:4b:59:c9:9c:48:3e:d7:f0:de:51:
         13:f7:a3:92:56:5e:78:27:c5:e8:c6:2f:0d:8f:bf:d8:3b:29:
         61:b7:c5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:32:44 2026 by rpki-client