Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
File:                     wolzr_qpk205FGqhNvvLBRua-Z8.mft (raw, json)
Hash identifier:          /WVy/MXAlc281PrAu3ByvVAOOuJHn00bgbaU/ArspIQ=
Subject key identifier:   BC:16:05:D4:61:F2:95:59:12:CA:95:15:67:37:E3:30:35:1C:F7:05
Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F
Certificate issuer:       /CN=c28973affaa9936d39146aa136fbcb051b9af99f
Certificate serial:       019D9850C2B6EA8C1DE7E56DECF201C1104E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
Manifest number:          0A2D
Signing time:             Thu 16 Apr 2026 22:02:02 +0000
Manifest this update:     Thu 16 Apr 2026 22:02:02 +0000
Manifest next update:     Fri 17 Apr 2026 22:02:02 +0000
Files and hashes:         1: 23n3GD7-18kUBRmqMFSss5sO8WU.roa (hash: q0BeEg3LVHGPx8X+vAOt4h7S1H5ho2VM4UMd50qBBcw=)
                          2: 2yeC3W-Fi_cJyOdyjgkwSAt1PJI.roa (hash: fQiBkVAigRPmp2gF+hCN3OOwj85mhJYIJxVW4GHbJ0k=)
                          3: DGuCXa6lrSYXgwhvns20-tHLhqk.roa (hash: ysRjZeAj8qhT0K0/6eiCPl0jGORZGsD95dNReYDDZBA=)
                          4: EqAh_11DL2TI1_FfkN_y27t6S1c.roa (hash: ZNAfSFNbRdghry8RJ6jnskPON8ekbE8YuRLsmfHCrBg=)
                          5: IsC3uva8jWlgjc72daZAGFoG7Kg.roa (hash: CmWRTCNhOVhtKAI/pDXD0dms6IVroSYmESui0UxPimQ=)
                          6: JUCo4Exam4PNRTU5sCWbfHwS54s.roa (hash: +CVnDhXiceqm+9Z71JNdn8epL48e8dAV3xOBv82sADY=)
                          7: Jw--HlTP7Hg1Cz9lCICcQLdMm4Y.roa (hash: mD8DwQb8VCzHqAz1/iXJZrxkINTD03oKF/WvOyQ25ek=)
                          8: UQrqNbc5imWgeJVi0JPwqjod80A.roa (hash: F1Dk9GHIxQPhvPLJJZyNRt2aYhzJMpLZeuLIvrJtz0o=)
                          9: Xyhzu1ZalXxQm1cgPMu_9Bo2HGU.roa (hash: zJOPciXMS/VpK0LQJb6/mNd6CgHu6MtAs/q1HA7p8zk=)
                          10: dEGOlqVsKgQaCH1VxJ9CAArc06o.roa (hash: 4QNQJHvNTBP/TpqbVI9/mB+7TEbOGPGQviIZYoErhd0=)
                          11: k_OhzQ9IKtoX5MHU0uv3ErlmoGA.roa (hash: 2MHirBNy5PUbj7VzbihwSdz/DftkwZWPxx3lzZRCc9U=)
                          12: nzuqF07FEJEwrQsi7bO5TmAKTgs.roa (hash: Rb8+fjExMETfqr5QiklAN6QZmGeP8LvBEiZ6DU19auk=)
                          13: pf5ZfCxpiTzjBd2ADxzhPYE-eMk.roa (hash: XL9drH/BbnMv+HkuzEZvAtq1EYIDfm5AVCdFDeA1zjo=)
                          14: qj3GkG4awxwWvGN-Nomqu1HYVow.roa (hash: 7dIn9OQWH93pTbqaPWhbBFGnFlDPa98znaszIRzgIoM=)
                          15: tQKgmXF9CyuyfkEoEKej9sF-IQw.roa (hash: w5TXKQG1wFLLsJp1eZug/c15bd7Q4D7WiCkwfvdeclQ=)
                          16: uAD2g6ulRnzzwXo1ud2gJof55r4.roa (hash: 8iWkX6ZXIprpapxn9IiLdHyeWxuohW1fPpFrPSq6PUc=)
                          17: uOzpjBk7slHfeOzi3MJqnwEN7YQ.roa (hash: tW3kdkE5KJTm4Mv1vVZwbhHutmtQd9MezaPIS3SJUW8=)
                          18: wolzr_qpk205FGqhNvvLBRua-Z8.crl (hash: jxRujThaSk5PcMrCQwqgve+Di4qAl9xhZGz3f+g9chY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:c2:b6:ea:8c:1d:e7:e5:6d:ec:f2:01:c1:10:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f
        Validity
            Not Before: Apr 16 22:02:02 2026 GMT
            Not After : Apr 17 22:02:02 2026 GMT
        Subject: CN=bc1605d461f2955912ca95156737e330351cf705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3c:5b:7e:e6:3f:20:9f:e9:ce:d0:ed:ea:a1:
                    13:42:4f:70:15:99:27:13:5f:71:60:7d:55:51:fc:
                    37:7f:1e:13:2f:4f:97:3a:b5:44:17:08:a2:69:a8:
                    48:af:3a:b0:b2:46:31:bf:ac:48:31:fd:a6:61:52:
                    ea:8a:b1:e5:75:b7:1d:49:d3:58:21:a6:0b:00:0b:
                    f9:5c:60:d2:3c:8c:f6:cf:ef:82:10:1c:ec:de:6e:
                    70:b0:11:6f:31:01:93:9e:68:6e:36:2a:7e:0f:9d:
                    21:5e:35:ec:47:8f:83:df:70:b1:b7:41:c8:17:5e:
                    31:c3:80:16:e6:af:a0:31:5c:ba:af:8e:68:7a:bf:
                    ce:16:3a:ea:0c:fd:c2:2d:f4:1b:41:f8:bc:73:ce:
                    56:30:96:92:a2:5b:6c:c9:00:47:64:88:b7:45:b2:
                    97:30:40:f0:d6:f2:c3:d6:4b:78:15:24:ec:cd:c0:
                    3b:55:7e:f2:b3:a1:ff:cf:6e:17:5a:54:ef:62:76:
                    a1:ef:d1:82:f2:83:ec:d3:f9:ca:bd:8e:f2:40:35:
                    97:f3:39:cd:d2:0c:8b:35:0f:3b:6a:8e:22:d8:13:
                    91:18:54:be:fe:7b:47:6b:85:82:15:3a:16:73:9d:
                    08:a9:03:5c:77:a8:06:1b:f5:bf:a9:c2:d7:f2:c9:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:16:05:D4:61:F2:95:59:12:CA:95:15:67:37:E3:30:35:1C:F7:05
            X509v3 Authority Key Identifier:
                keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:51:a4:3b:ab:46:17:19:d8:da:ee:ae:f5:87:b5:7b:65:a3:
         2f:96:07:51:f5:3c:71:47:2d:f7:38:1e:e4:06:7e:fa:53:93:
         6f:27:f3:9d:f4:b3:ca:c8:e2:f3:9b:99:78:ae:fe:09:43:a8:
         71:f7:89:7a:46:a6:00:59:a5:1d:f5:24:4d:68:50:7f:b7:b4:
         ca:63:74:cf:12:8c:3b:99:ee:cf:2d:9e:2f:bc:79:ef:8d:c2:
         ff:e1:13:23:3a:5d:79:b7:f9:22:2b:e6:fe:47:13:0d:ae:e8:
         d4:ac:98:27:7c:aa:0b:f7:01:05:8d:a3:4a:b5:14:1a:e3:23:
         57:c3:0e:32:cc:e5:84:54:f2:ca:17:4e:24:fa:22:c0:4e:a7:
         6e:0b:02:03:e4:d4:5d:48:ea:e9:4c:1a:8e:3a:6d:0e:b5:a1:
         6d:42:3f:a7:30:cc:b4:81:a3:74:84:00:76:a6:7c:06:f2:a4:
         b7:21:f7:d8:56:42:c2:19:39:af:59:e9:a4:e0:d9:87:91:3b:
         e8:41:b3:ff:2f:5b:a2:40:a9:5b:cb:aa:64:4a:b1:88:c6:71:
         42:0f:3c:ba:dd:23:81:19:77:88:cb:5d:9a:4b:3e:80:18:80:
         5c:c4:83:47:b1:fb:0c:0c:dc:ac:52:0a:a9:ca:88:63:f3:99:
         55:a6:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:17 2026 by rpki-client