Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
File:                     Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json)
Hash identifier:          CqCGM7ca9uLaI08OztJfFJEv3ENMroFJT4GscbfpqZs=
Subject key identifier:   E4:23:09:8C:5B:7C:DE:36:A5:10:86:77:9C:C2:70:EF:39:95:AF:B5
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Certificate issuer:       /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial:       019D996220A685CD0E6D01B3C769EAAEBBEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
Manifest number:          0686
Signing time:             Fri 17 Apr 2026 03:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:38 +0000
Files and hashes:         1: J37URkCTs05jiz-Rj5fYxPu7CXc.roa (hash: jYLrc7tKRBPyUDOWTkYxDyN6WhDwfRNStduazvGrF2M=)
                          2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: e6CwZnrkA+EPoQfhcZPBghYNVxdQjEJ8rd/6S+vMArA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:20:a6:85:cd:0e:6d:01:b3:c7:69:ea:ae:bb:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
        Validity
            Not Before: Apr 17 03:00:38 2026 GMT
            Not After : Apr 18 03:00:38 2026 GMT
        Subject: CN=e423098c5b7cde36a51086779cc270ef3995afb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a4:e3:36:99:e5:5e:b1:47:41:cb:9a:9a:0f:
                    f2:a9:4a:08:f4:d3:6c:b2:69:3e:66:c1:73:74:10:
                    eb:9c:8d:7d:9b:24:5b:49:b2:d0:ff:c2:f7:a9:22:
                    6f:95:aa:a4:df:3f:a3:75:8a:a2:86:f1:a3:0b:7a:
                    04:94:92:c9:c2:86:67:8f:b0:09:71:7d:54:0e:45:
                    b2:d2:fa:fe:99:ee:51:2f:75:3b:a5:0e:31:fd:b3:
                    7c:7a:da:8a:a0:d8:c5:c7:3e:42:bc:19:a5:1b:8f:
                    35:55:81:3d:1a:d2:4f:a0:7c:97:ae:8a:1e:8d:57:
                    b2:23:7f:ee:86:cf:cf:75:a2:9b:8d:5c:ae:3b:c3:
                    96:55:8e:2f:5a:ff:72:8a:91:f9:e3:15:e5:95:dd:
                    ea:16:ee:03:e2:53:dd:3b:0d:4e:1b:34:c0:5c:ff:
                    9f:59:c6:70:79:68:a9:fd:9b:b3:c9:4c:7f:97:2f:
                    32:6f:42:1a:33:9b:1d:f8:73:86:54:42:19:53:3e:
                    a8:88:66:7e:ef:57:17:a1:54:a6:10:07:7e:9d:de:
                    a8:2b:00:5a:56:07:e0:0f:a6:c4:59:36:1e:0e:02:
                    4a:5f:9c:ee:dd:c7:a4:ca:4a:f5:2e:02:65:a5:32:
                    f0:fb:07:bd:da:39:fd:cb:9a:7d:ed:f7:28:0e:b0:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:23:09:8C:5B:7C:DE:36:A5:10:86:77:9C:C2:70:EF:39:95:AF:B5
            X509v3 Authority Key Identifier:
                keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3d:12:13:4c:1d:ec:b4:dd:b6:b2:89:0d:f0:e6:30:d7:19:
         61:ce:58:47:eb:d5:d7:67:ab:9c:e6:2c:bc:fd:bb:4e:b9:05:
         31:2d:37:22:20:72:4a:5b:e1:e3:ef:7a:ea:44:2f:a9:9a:86:
         08:38:46:84:25:63:8f:42:3a:66:67:88:17:2c:ae:75:aa:41:
         7f:15:bf:63:69:44:26:8a:f2:13:bc:58:35:60:88:00:59:97:
         a5:8a:11:e9:49:5b:21:6d:6e:1c:10:cd:83:4e:9b:06:99:2d:
         62:85:89:ff:28:ac:fd:00:d4:be:ad:d2:34:a0:ef:83:75:8f:
         67:9d:09:a0:85:ac:5a:d4:20:e0:d9:c0:ac:9c:28:3a:d8:b1:
         fb:8d:72:36:e8:76:d6:13:3c:8e:d4:07:87:dd:cb:92:43:46:
         65:31:4a:17:94:1e:98:4a:a6:08:6b:72:59:c9:43:90:06:db:
         3b:28:16:e0:35:38:18:2e:9a:26:19:fd:b5:86:98:3b:ad:6f:
         be:65:15:2e:f4:88:c7:c4:84:3b:f7:44:79:62:76:e6:fe:ce:
         64:25:f3:63:b4:31:ab:03:27:ad:b2:86:84:74:73:2a:22:90:
         17:0e:ee:ee:c7:1d:b2:0b:cf:71:10:a4:11:97:60:d0:a9:aa:
         a3:0e:a5:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:22:15 2026 by rpki-client