Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          Z0n5hPORvUCeuB15wzN08UVIchPZ7qqI06ydwb01dMY=
Subject key identifier:   AF:E0:EE:C7:92:14:CE:B3:3C:A6:7E:E7:30:32:0F:37:2E:FF:53:1A
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       019D9C2C6F77B9597A15D271CC566DE12A13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          18C8
Signing time:             Fri 17 Apr 2026 16:00:50 +0000
Manifest this update:     Fri 17 Apr 2026 16:00:50 +0000
Manifest next update:     Sat 18 Apr 2026 16:00:50 +0000
Files and hashes:         1: NZ202JDARGMozqemjOm18XWqeB4.roa (hash: EMsYlcYoxjdRaOpIk5ySMPKn2gsFMeYDx9Ik13Whe1E=)
                          2: VizEqnthMjQ52TLR8h7x9BYDAIM.roa (hash: 41b89AhKzVApaqcIg1s1Z2VRJk8VnvLCBhm/gL3LlSM=)
                          3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: WwoPog8N09SRg6JWpkLZ4HNjS3d13zBcQWQbRJKHpmM=)
                          4: jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa (hash: CUYbXow71FwfWTHYT6HzHF7ERdH4KcdRAJs9h9PrlE4=)
                          5: loP1-9Yxdj4AbH_rrSqa5GcHgiQ.roa (hash: M03ifXkLsZpfGj/FUbAJuSvBmjEYd8yCYHsKRiZZ6dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:6f:77:b9:59:7a:15:d2:71:cc:56:6d:e1:2a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Apr 17 16:00:50 2026 GMT
            Not After : Apr 18 16:00:50 2026 GMT
        Subject: CN=afe0eec79214ceb33ca67ee730320f372eff531a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:85:81:57:4c:1d:ba:c6:15:97:c4:9c:c9:1b:
                    5f:06:73:0c:30:f3:97:41:a2:38:13:ca:ad:5c:2e:
                    ff:9a:bb:45:ad:13:6a:79:f6:79:51:92:5b:e0:ed:
                    ca:7d:62:9d:0b:74:a2:16:eb:eb:a0:de:bf:b2:2b:
                    ae:06:bb:35:0d:12:71:74:e2:16:c2:e3:06:1a:ab:
                    be:a0:78:cf:cf:ef:4a:42:3a:c8:97:28:10:4e:29:
                    31:64:ec:91:55:4c:b8:94:f7:9c:f5:7b:63:1c:d5:
                    45:e3:92:70:23:06:a7:19:c4:7e:0f:d4:93:bf:46:
                    c6:94:be:82:f1:81:c6:c7:78:4e:ff:a9:23:c5:46:
                    a7:e3:26:e4:ef:96:8d:1c:46:92:26:9a:cf:4d:a2:
                    f1:2e:c2:f2:85:0d:52:70:eb:22:5e:ee:8e:f2:50:
                    d3:2f:8a:68:52:47:da:a3:4b:02:90:d4:86:82:ef:
                    87:00:65:ef:eb:8e:94:d3:ee:c5:78:5d:8d:f2:3b:
                    97:e5:4a:91:17:2b:43:c9:8f:19:3c:78:94:b7:e1:
                    cb:b2:4c:b0:48:1d:02:19:46:cc:74:d7:7c:d4:31:
                    e2:ef:55:ea:ba:63:03:0d:86:79:ac:ba:ea:f0:82:
                    ca:a9:7b:62:0b:3a:30:42:99:dd:80:32:a9:73:60:
                    77:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E0:EE:C7:92:14:CE:B3:3C:A6:7E:E7:30:32:0F:37:2E:FF:53:1A
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f3:09:09:be:38:3c:f1:53:6c:6a:93:49:88:95:4c:11:b9:
         80:3e:fc:44:f2:5a:7f:7f:e8:0c:95:e7:27:b8:0a:5c:fb:3c:
         e6:b4:eb:4f:1a:c5:d9:50:f2:28:73:97:4b:41:59:62:84:1c:
         3d:86:e3:03:1c:52:0f:71:7f:43:67:01:65:29:74:56:a8:24:
         60:80:15:f0:7b:84:32:cd:c6:8b:a8:71:27:4f:e8:e1:7d:87:
         db:78:36:d0:b3:37:79:ef:2c:bf:54:78:e5:d7:a7:c2:d1:bc:
         93:1e:8d:94:83:ea:86:72:9c:10:0b:87:81:f1:b1:f3:69:dc:
         f2:93:e2:97:22:a1:36:e3:57:86:f3:90:66:a2:50:06:97:8e:
         a4:d0:b6:78:ec:6d:f3:89:26:ec:4b:b2:c6:3c:24:35:ba:87:
         a6:52:00:bc:f7:21:07:04:83:29:a6:e1:b1:59:74:9f:02:49:
         91:92:57:c5:b4:b5:67:b7:f7:98:ae:f8:85:77:0d:9d:9f:29:
         88:8f:91:d1:9c:19:df:7d:86:84:20:db:01:8f:d6:34:9c:ea:
         12:62:f9:39:96:a2:78:88:49:c6:42:96:48:fe:ef:04:ff:31:
         45:93:e8:fe:53:c8:50:4c:59:c9:08:94:da:2b:87:83:c4:16:
         67:3b:75:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLG93uVl6FdJxzFZt4SoTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj
ZWU0ZDgwHhcNMjYwNDE3MTYwMDUwWhcNMjYwNDE4MTYwMDUwWjAzMTEwLwYDVQQD
EyhhZmUwZWVjNzkyMTRjZWIzM2NhNjdlZTczMDMyMGYzNzJlZmY1MzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4WBV0wdusYVl8ScyRtfBnMMMPOX
QaI4E8qtXC7/mrtFrRNqefZ5UZJb4O3KfWKdC3SiFuvroN6/siuuBrs1DRJxdOIW
wuMGGqu+oHjPz+9KQjrIlygQTikxZOyRVUy4lPec9XtjHNVF45JwIwanGcR+D9ST
v0bGlL6C8YHGx3hO/6kjxUan4ybk75aNHEaSJprPTaLxLsLyhQ1ScOsiXu6O8lDT
L4poUkfao0sCkNSGgu+HAGXv646U0+7FeF2N8juX5UqRFytDyY8ZPHiUt+HLskyw
SB0CGUbMdNd81DHi71XqumMDDYZ5rLrq8ILKqXtiCzowQpndgDKpc2B32wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/g7seSFM6zPKZ+5zAyDzcu/1MaMB8GA1UdIwQY
MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt
ZDU5MDMwNjYxOTQ5LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5
LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfMJCb44
PPFTbGqTSYiVTBG5gD78RPJaf3/oDJXnJ7gKXPs85rTrTxrF2VDyKHOXS0FZYoQc
PYbjAxxSD3F/Q2cBZSl0VqgkYIAV8HuEMs3Gi6hxJ0/o4X2H23g20LM3ee8sv1R4
5denwtG8kx6NlIPqhnKcEAuHgfGx82nc8pPilyKhNuNXhvOQZqJQBpeOpNC2eOxt
84km7EuyxjwkNbqHplIAvPchBwSDKabhsVl0nwJJkZJXxbS1Z7f3mK74hXcNnZ8p
iI+R0ZwZ332GhCDbAY/WNJzqEmL5OZaieIhJxkKWSP7vBP8xRZPo/lPIUExZyQiU
2iuHg8QWZzt1Rw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:05 2026 by rpki-client