Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
File:                     Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json)
Hash identifier:          c5BHvsMMY4hEs/wI+qOKlhz/5UwpqXfE6Gr5rTxDBf0=
Subject key identifier:   41:80:9F:89:EC:7F:EB:45:2D:CF:1E:31:7F:20:3C:39:39:B3:6D:CF
Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55
Certificate issuer:       /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
Certificate serial:       019D9A06FD49DFBA44E43C1C8F918EC0DE27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
Manifest number:          18C3
Signing time:             Fri 17 Apr 2026 06:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:42 +0000
Files and hashes:         1: MC5PSzUtzRQLOMEVXjL8dSomLZ8.roa (hash: zde/7UrTAADTl5AjksUxuIY8cO6qAQg0t4ksuzJo5dU=)
                          2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: znvFGNftkrtXbxN0nNjtJWSIX8vIYCHjY6SU3AGGeoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:fd:49:df:ba:44:e4:3c:1c:8f:91:8e:c0:de:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855
        Validity
            Not Before: Apr 17 06:00:42 2026 GMT
            Not After : Apr 18 06:00:42 2026 GMT
        Subject: CN=41809f89ec7feb452dcf1e317f203c3939b36dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bd:b4:a4:d0:8a:56:3c:20:33:ac:df:4c:41:
                    76:b1:20:f9:58:50:51:15:59:bc:61:49:29:5a:72:
                    fd:ef:d6:ff:ed:b8:d8:9a:bb:73:be:5b:66:bf:5b:
                    f3:55:96:01:68:9e:1f:dc:b6:b5:11:10:c3:31:0a:
                    5d:fa:1d:f9:27:6f:fe:cf:0e:5f:67:8f:81:cb:15:
                    41:fd:96:6d:bc:78:5a:01:22:00:6d:42:f8:18:18:
                    39:d8:1d:6d:d6:16:7e:3f:91:bf:56:08:25:c6:33:
                    7a:01:ca:01:56:e2:53:b4:7e:3d:e2:a2:31:0e:7c:
                    3b:2d:f7:1c:b6:25:bf:2b:ba:b9:9b:05:fe:57:62:
                    7c:6e:89:28:ee:f6:49:19:e3:02:31:3f:5f:36:71:
                    95:9e:5e:dc:9a:0e:35:e5:a3:8c:29:d6:55:a0:6a:
                    45:c2:cb:e9:bc:49:53:68:09:77:b7:b5:95:93:ee:
                    a4:f6:a7:9d:df:85:3a:f5:a7:8d:82:16:cf:8f:42:
                    a5:18:c5:32:2c:fe:c1:cb:3c:1f:50:0e:94:52:77:
                    22:a9:17:14:72:37:b1:fa:6d:bc:68:d3:8d:c7:90:
                    f2:c6:6e:1f:08:1a:82:14:f2:13:57:26:88:01:ea:
                    16:f9:3e:68:c2:2b:d4:84:cc:80:d9:87:cd:cf:9f:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:80:9F:89:EC:7F:EB:45:2D:CF:1E:31:7F:20:3C:39:39:B3:6D:CF
            X509v3 Authority Key Identifier:
                keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ef:5d:e7:2c:b7:51:10:df:71:29:37:11:d7:2b:f9:ea:a0:
         57:d4:11:0c:cb:03:2a:48:52:71:cc:0e:82:c6:33:5c:7d:64:
         44:7c:01:ac:48:d7:45:00:e5:25:5d:f9:47:06:14:1f:6e:d3:
         cc:57:10:88:8c:fd:73:b0:97:34:41:35:57:fa:05:ee:30:64:
         9c:be:af:05:91:5a:2a:d6:db:c7:fc:d6:d8:f9:2d:59:1b:1a:
         9c:fb:e1:b0:bb:84:36:df:39:8a:b5:31:2c:1a:78:79:22:b6:
         e6:27:0c:54:22:83:6e:f7:4c:1a:05:05:bb:9f:d5:ac:7e:cb:
         89:d8:78:d2:e0:c2:e7:fb:0c:f5:fc:77:de:bc:c1:31:70:0c:
         8f:23:7b:c5:80:47:d3:d1:2f:b7:15:d8:d3:f4:3b:73:b4:b8:
         3a:7e:0f:0e:57:54:58:71:0b:eb:27:d1:63:11:92:59:13:bf:
         e4:11:80:a6:e0:80:d3:cc:a4:56:e9:8a:c0:b8:ae:29:5a:10:
         aa:0e:af:06:a4:e6:23:fe:fd:36:b2:a6:d4:a0:9e:0d:a8:a0:
         e8:6b:c0:86:56:a9:a4:40:4d:42:fb:7a:5a:4c:23:1f:b4:04:
         20:51:75:61:3c:ce:3c:93:7c:bb:d5:ed:91:3f:1b:ab:ab:9d:
         ab:1b:bc:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aBv1J37pE5Dwcj5GOwN4nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMWEyY2YyZjEzNzQ1ZWUxYmJmN2YwYTc0YmVhZDNjZTUw
NzQ4NTUwHhcNMjYwNDE3MDYwMDQyWhcNMjYwNDE4MDYwMDQyWjAzMTEwLwYDVQQD
Eyg0MTgwOWY4OWVjN2ZlYjQ1MmRjZjFlMzE3ZjIwM2MzOTM5YjM2ZGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi720pNCKVjwgM6zfTEF2sSD5WFBR
FVm8YUkpWnL979b/7bjYmrtzvltmv1vzVZYBaJ4f3La1ERDDMQpd+h35J2/+zw5f
Z4+ByxVB/ZZtvHhaASIAbUL4GBg52B1t1hZ+P5G/VgglxjN6AcoBVuJTtH494qIx
Dnw7LfcctiW/K7q5mwX+V2J8boko7vZJGeMCMT9fNnGVnl7cmg415aOMKdZVoGpF
wsvpvElTaAl3t7WVk+6k9qed34U69aeNghbPj0KlGMUyLP7ByzwfUA6UUnciqRcU
cjex+m28aNONx5Dyxm4fCBqCFPITVyaIAeoW+T5owivUhMyA2YfNz5+/KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGAn4nsf+tFLc8eMX8gPDk5s23PMB8GA1UdIwQY
MBaAFFsaLPLxN0XuG79/CnS+rTzlB0hVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yNGYwMmQtYjIzYS00YzgxLTkxZjAt
N2Y5MDI1ZTUzMTA5LzEvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yNGYwMmQtYjIzYS00YzgxLTkxZjAtN2Y5MDI1ZTUzMTA5
LzEvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo+9d5yy3
URDfcSk3Edcr+eqgV9QRDMsDKkhSccwOgsYzXH1kRHwBrEjXRQDlJV35RwYUH27T
zFcQiIz9c7CXNEE1V/oF7jBknL6vBZFaKtbbx/zW2PktWRsanPvhsLuENt85irUx
LBp4eSK25icMVCKDbvdMGgUFu5/VrH7Lidh40uDC5/sM9fx33rzBMXAMjyN7xYBH
09EvtxXY0/Q7c7S4On4PDldUWHEL6yfRYxGSWRO/5BGApuCA08ykVumKwLiuKVoQ
qg6vBqTmI/79NrKm1KCeDaig6GvAhlappEBNQvt6WkwjH7QEIFF1YTzOPJN8u9Xt
kT8bq6udqxu8HQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:08:00 2026 by rpki-client