Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File:                     DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier:          iujhVM1tP5lKNO7v/r9WMWC3fOuRNpHoC62IQTGLp+0=
Subject key identifier:   A2:C5:E1:8D:6B:F4:BC:EE:B0:A3:D8:F4:C1:B2:B9:8D:D8:F9:E0:19
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer:       /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial:       019DA41CA09DDC200FFB848BDBEA92DC272A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number:          0EB1
Signing time:             Sun 19 Apr 2026 05:00:32 +0000
Manifest this update:     Sun 19 Apr 2026 05:00:32 +0000
Manifest next update:     Mon 20 Apr 2026 05:00:32 +0000
Files and hashes:         1: 06cgoU7GyJzMyJR7nF3NCVCDDU0.roa (hash: kN3R1rOeDYfzsBK/+cPskIhYJ/5X5cYwuNm8G34vSmk=)
                          2: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: yVSaQiIshLg8QXw9lZYXf2qjF2Oc00LXnnnn6iaAZWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1c:a0:9d:dc:20:0f:fb:84:8b:db:ea:92:dc:27:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
        Validity
            Not Before: Apr 19 05:00:32 2026 GMT
            Not After : Apr 20 05:00:32 2026 GMT
        Subject: CN=a2c5e18d6bf4bceeb0a3d8f4c1b2b98dd8f9e019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:bd:ff:59:7a:da:a5:27:9f:71:59:79:f7:
                    2f:6c:9a:01:1a:29:d7:8f:3b:f2:c4:d0:30:54:7f:
                    a0:57:2b:0a:95:97:53:c0:5c:c5:e0:7d:70:81:de:
                    95:e5:e8:8a:b6:6e:ad:0f:6b:9b:bf:51:3c:50:a1:
                    ba:f2:32:b7:e6:f0:fd:4e:ae:ad:55:eb:15:27:aa:
                    97:8a:2e:8a:d8:fe:9d:c6:6a:77:42:cb:01:14:2a:
                    5c:74:4c:54:63:99:ee:45:ab:14:ea:81:b6:06:48:
                    8f:56:ed:34:f4:99:17:1d:4e:ae:9f:1d:8b:d2:92:
                    7b:4d:c6:87:70:88:88:09:1c:38:5a:7a:a3:4a:e8:
                    7d:84:f6:bc:c2:4e:31:02:b5:71:18:80:ee:64:56:
                    27:0f:ae:2c:95:8f:d0:ce:87:e1:d4:b3:48:5a:c6:
                    02:28:00:4d:04:c5:ff:5c:3d:24:c8:60:db:63:6b:
                    92:b3:42:19:d9:5c:f0:3f:bd:d5:6d:47:4a:d3:7e:
                    75:ff:5e:b0:ed:18:b0:4f:32:91:c0:78:fd:88:33:
                    bb:34:7b:0f:bf:fd:39:b0:31:d9:fe:ce:56:16:b0:
                    ac:1b:95:46:3f:b0:36:78:86:1b:35:df:8a:42:89:
                    22:04:17:4d:30:5a:a8:c0:48:49:5e:55:b2:30:7a:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C5:E1:8D:6B:F4:BC:EE:B0:A3:D8:F4:C1:B2:B9:8D:D8:F9:E0:19
            X509v3 Authority Key Identifier:
                keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b2:bf:21:8c:92:ea:c9:48:1b:29:e1:a2:c3:2f:b3:dc:c6:
         9e:12:46:0c:23:f7:8b:a2:29:f1:f1:70:be:84:2d:a7:87:4b:
         0f:44:8a:78:16:1c:74:81:ff:9d:8b:ca:0a:99:52:b1:fa:48:
         c5:90:c8:bc:f2:08:d9:b0:c5:36:3d:36:b9:9f:31:75:6a:f6:
         22:05:01:c9:b3:48:0b:c7:ea:15:e1:f8:a2:a4:09:bf:ba:dd:
         1d:b9:5f:95:b7:32:85:7d:77:87:c4:40:9b:ca:c4:20:d4:c5:
         47:7d:af:9b:2d:7c:a2:c6:2e:d9:99:46:6d:7a:3c:1b:10:4b:
         38:5c:73:04:6c:2b:d4:59:cc:3a:08:3a:73:3d:02:17:c3:ed:
         31:db:6e:19:a4:59:45:5d:cb:57:5b:54:60:bd:aa:35:ff:b6:
         fe:c8:4e:1f:af:26:52:79:51:ba:49:5c:4f:97:aa:89:ef:bd:
         0f:57:68:f5:08:d0:b5:f9:7c:67:7c:a2:78:6a:6b:f9:dd:cf:
         c0:15:f1:b5:95:ec:3f:b2:88:e1:6f:b8:bc:b7:86:26:75:4b:
         be:2f:0f:e7:9f:33:52:96:cc:ed:a7:b2:34:1f:80:87:78:7c:
         11:dc:00:75:55:8f:35:46:f8:4a:b2:f7:f9:62:81:4d:a9:c1:
         dc:db:08:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHKCd3CAP+4SL2+qS3CcqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNmY5MWE1MjE2NDA0OTQyMjM5ZTY5NmU2NWNmMmQzNzIx
NGU0YWYwHhcNMjYwNDE5MDUwMDMyWhcNMjYwNDIwMDUwMDMyWjAzMTEwLwYDVQQD
EyhhMmM1ZTE4ZDZiZjRiY2VlYjBhM2Q4ZjRjMWIyYjk4ZGQ4ZjllMDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOW9/1l62qUnn3FZefcvbJoBGinX
jzvyxNAwVH+gVysKlZdTwFzF4H1wgd6V5eiKtm6tD2ubv1E8UKG68jK35vD9Tq6t
VesVJ6qXii6K2P6dxmp3QssBFCpcdExUY5nuRasU6oG2BkiPVu009JkXHU6unx2L
0pJ7TcaHcIiICRw4WnqjSuh9hPa8wk4xArVxGIDuZFYnD64slY/Qzofh1LNIWsYC
KABNBMX/XD0kyGDbY2uSs0IZ2VzwP73VbUdK0351/16w7RiwTzKRwHj9iDO7NHsP
v/05sDHZ/s5WFrCsG5VGP7A2eIYbNd+KQokiBBdNMFqowEhJXlWyMHqp3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLF4Y1r9LzusKPY9MGyuY3Y+eAZMB8GA1UdIwQY
MBaAFA1vkaUhZASUIjnmluZc8tNyFOSvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUt
YzQ3ZWFiMTdlOTNhLzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jMTI2OTUtODllMS00NDgyLTk0ZTUtYzQ3ZWFiMTdlOTNh
LzEvRFctUnBTRmtCSlFpT2VhVzVsenkwM0lVNUs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLK/IYyS
6slIGynhosMvs9zGnhJGDCP3i6Ip8fFwvoQtp4dLD0SKeBYcdIH/nYvKCplSsfpI
xZDIvPII2bDFNj02uZ8xdWr2IgUBybNIC8fqFeH4oqQJv7rdHblflbcyhX13h8RA
m8rEINTFR32vmy18osYu2ZlGbXo8GxBLOFxzBGwr1FnMOgg6cz0CF8PtMdtuGaRZ
RV3LV1tUYL2qNf+2/shOH68mUnlRuklcT5eqie+9D1do9QjQtfl8Z3yieGpr+d3P
wBXxtZXsP7KI4W+4vLeGJnVLvi8P558zUpbM7aeyNB+Ah3h8EdwAdVWPNUb4SrL3
+WKBTanB3NsI5A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:40:01 2026 by rpki-client