Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          iMen9SdK2l356eeq1bmKARliR5JQrcfpPXbThNEJSjs=
Subject key identifier:   3D:DF:22:41:1F:61:08:22:AA:2B:76:1E:1E:C3:10:E3:CC:3E:F4:65
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       019D9886314D0792737BCE6D19B81C3B594D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          134A
Signing time:             Thu 16 Apr 2026 23:00:24 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:24 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:24 +0000
Files and hashes:         1: IYD48FobX2QtW7l4Nlux0f3C9cQ.roa (hash: HnyhMFK+hrRQqY1dmM0kJ8BUc9CaYhp0OvPZ/NcZJXc=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: orIbGDiuakXZHIW1CRH/GMxavfA2O1EPpmU+o0JjZVo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:31:4d:07:92:73:7b:ce:6d:19:b8:1c:3b:59:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Apr 16 23:00:24 2026 GMT
            Not After : Apr 17 23:00:24 2026 GMT
        Subject: CN=3ddf22411f610822aa2b761e1ec310e3cc3ef465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6f:57:d8:19:d6:a0:6d:05:4c:02:3f:6b:65:
                    0d:1e:b7:a2:fb:03:fa:9c:77:d9:f5:3a:19:cf:75:
                    a0:f6:b3:c0:5c:53:1e:29:40:bb:d1:15:c2:3e:a9:
                    fb:33:27:ea:6e:8e:c9:56:7d:1e:af:5d:53:a2:97:
                    96:b6:36:c6:fb:7a:dc:6f:3f:e9:91:01:99:45:84:
                    be:c1:d6:01:9f:74:b5:bd:c4:22:dc:ed:f7:23:81:
                    90:b4:9d:af:24:f9:22:92:4f:6c:fa:cf:33:f9:49:
                    30:c5:46:bd:8b:4b:f5:0d:83:dc:28:03:9b:ac:f7:
                    a9:fa:74:6d:b1:10:26:b7:9a:57:ca:07:cb:7a:04:
                    1b:d9:20:32:8b:10:78:9e:97:b3:e4:9c:8b:42:16:
                    d5:71:5b:42:c4:18:0d:ba:d9:8e:e0:cd:c5:00:49:
                    8c:ca:e2:fa:8f:31:9b:66:a7:a6:95:d5:26:2b:3a:
                    f1:7c:a8:8b:37:42:58:64:ac:28:be:cf:71:4a:f7:
                    7b:de:8e:f5:e6:48:fd:a2:ba:4e:fe:8b:a9:1f:e8:
                    d8:26:e3:78:4d:5f:ac:57:ad:9d:95:6b:0b:d4:e7:
                    43:8e:07:b8:95:bd:4b:b8:f6:65:99:77:ee:9d:03:
                    7f:a1:9f:76:37:3a:8d:76:d7:a4:37:aa:54:30:32:
                    39:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DF:22:41:1F:61:08:22:AA:2B:76:1E:1E:C3:10:E3:CC:3E:F4:65
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:e3:38:0d:c0:a3:1e:bf:c7:15:44:f6:69:5e:fb:fb:cf:51:
         42:10:6d:92:e8:be:bc:e4:14:21:0b:a7:7b:1b:68:b6:49:4c:
         18:c4:2d:d6:c1:87:18:a0:db:68:c3:b2:10:a3:19:67:e7:f2:
         29:09:23:56:12:85:f4:77:60:80:71:4d:71:28:ea:28:7b:fc:
         3c:0c:88:c8:61:53:03:59:dc:18:7d:80:cf:2e:4a:e6:0b:15:
         bf:5c:e3:a2:88:dc:d2:a6:16:15:d9:b6:18:5c:aa:ce:17:c1:
         df:db:84:65:28:2f:ce:5a:ef:d2:0f:0c:60:0a:63:dc:da:18:
         a5:dc:5a:3d:ee:97:9f:2f:e0:de:ab:b3:d1:5f:c3:2c:be:11:
         e1:8d:44:1d:41:da:0e:c4:72:f6:93:9c:cf:46:36:ed:8c:e6:
         cb:1b:f7:4b:c9:d3:26:51:15:7f:dd:8a:5a:f5:8f:f4:f2:a9:
         5b:49:1f:55:fb:f4:1b:fe:4f:bb:e9:bf:32:c3:a8:9d:19:46:
         f3:f5:12:1e:67:e8:ea:b3:ab:01:ed:fe:ce:2d:43:22:b4:6b:
         63:7f:45:27:e3:1c:2a:73:b5:31:73:ea:84:10:03:76:f7:15:
         af:e8:56:2c:e5:80:42:02:07:19:60:1e:39:d8:1e:94:4e:15:
         e2:71:e1:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YhjFNB5Jze85tGbgcO1lNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGFjNDU1ZWMwZWRlMjkzMGVhNTgxMDU3ZWUxZmY1OWY1
YmY2YzcwHhcNMjYwNDE2MjMwMDI0WhcNMjYwNDE3MjMwMDI0WjAzMTEwLwYDVQQD
EygzZGRmMjI0MTFmNjEwODIyYWEyYjc2MWUxZWMzMTBlM2NjM2VmNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl29X2BnWoG0FTAI/a2UNHrei+wP6
nHfZ9ToZz3Wg9rPAXFMeKUC70RXCPqn7Myfqbo7JVn0er11TopeWtjbG+3rcbz/p
kQGZRYS+wdYBn3S1vcQi3O33I4GQtJ2vJPkikk9s+s8z+UkwxUa9i0v1DYPcKAOb
rPep+nRtsRAmt5pXygfLegQb2SAyixB4npez5JyLQhbVcVtCxBgNutmO4M3FAEmM
yuL6jzGbZqemldUmKzrxfKiLN0JYZKwovs9xSvd73o715kj9orpO/oupH+jYJuN4
TV+sV62dlWsL1OdDjge4lb1LuPZlmXfunQN/oZ92NzqNdtekN6pUMDI5KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3fIkEfYQgiqit2Hh7DEOPMPvRlMB8GA1UdIwQY
MBaAFMAKxFXsDt4pMOpYEFfuH/WfW/bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQt
MDJjZjZiMGRiNjNiLzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQtMDJjZjZiMGRiNjNi
LzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+M4DcCj
Hr/HFUT2aV77+89RQhBtkui+vOQUIQunextotklMGMQt1sGHGKDbaMOyEKMZZ+fy
KQkjVhKF9HdggHFNcSjqKHv8PAyIyGFTA1ncGH2Azy5K5gsVv1zjoojc0qYWFdm2
GFyqzhfB39uEZSgvzlrv0g8MYApj3NoYpdxaPe6Xny/g3quz0V/DLL4R4Y1EHUHa
DsRy9pOcz0Y27Yzmyxv3S8nTJlEVf92KWvWP9PKpW0kfVfv0G/5Pu+m/MsOonRlG
8/USHmfo6rOrAe3+zi1DIrRrY39FJ+McKnO1MXPqhBADdvcVr+hWLOWAQgIHGWAe
OdgelE4V4nHhHA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:54:35 2026 by rpki-client