Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File:                     w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier:          7RstkENiU/ffxyv+waBnNQdRQaGK8Bb8OjWSANeszME=
Subject key identifier:   C5:06:5D:CD:BF:7D:20:5D:40:61:8C:1C:48:17:15:02:17:C6:4B:3D
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer:       /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial:       019D9AABE0BA79E32DE752044245CF2949A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number:          0447
Signing time:             Fri 17 Apr 2026 09:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 09:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 09:00:48 +0000
Files and hashes:         1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
                          2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: Bodadk6xO4AB6fN7YQxLRRwPcKHFrisQaRmYqzWXXjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ab:e0:ba:79:e3:2d:e7:52:04:42:45:cf:29:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
        Validity
            Not Before: Apr 17 09:00:48 2026 GMT
            Not After : Apr 18 09:00:48 2026 GMT
        Subject: CN=c5065dcdbf7d205d40618c1c4817150217c64b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:78:32:a8:65:66:72:28:0b:e9:3e:39:30:2b:
                    52:00:c5:a3:52:38:ed:09:f5:9e:7c:05:2c:76:d3:
                    f0:03:c8:1a:c2:22:b4:4c:af:63:eb:ff:af:45:48:
                    01:cf:93:bf:34:2e:c3:31:15:a2:26:64:61:ce:8d:
                    dc:ef:fd:96:e6:e5:eb:62:fe:a1:7b:bf:eb:1d:b9:
                    a4:11:1b:31:92:c0:ed:8f:de:1a:7f:4c:59:54:b3:
                    0e:3f:77:28:a4:b3:88:6d:82:ae:b0:94:2b:65:1c:
                    26:5b:fc:73:9f:e5:57:91:4a:38:24:62:15:9e:46:
                    25:12:82:7b:10:2d:da:9c:e4:0b:27:a9:71:4a:bd:
                    d8:3b:3b:3e:9f:be:ac:f7:8c:08:75:b3:c2:ee:61:
                    92:e3:b3:40:c5:99:db:b1:8f:59:5a:77:e9:45:95:
                    7a:51:b4:1a:d2:21:03:8a:e1:8d:d0:5c:7e:dc:c9:
                    f1:c7:9c:c7:69:3e:5c:3b:6d:e3:83:fc:bd:9e:2e:
                    c6:e0:c8:3d:fd:9c:f7:63:3e:ad:6e:53:75:c8:d7:
                    8c:ee:2a:1f:1a:9b:e3:f6:a2:82:f1:46:d9:5c:a3:
                    44:99:8d:97:4b:2c:8d:89:3b:3e:8b:c6:d0:eb:85:
                    b4:f7:bd:88:1d:42:4b:31:cf:ba:3a:ce:02:70:09:
                    d2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:5D:CD:BF:7D:20:5D:40:61:8C:1C:48:17:15:02:17:C6:4B:3D
            X509v3 Authority Key Identifier:
                keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a1:29:c5:9b:4e:a4:5a:55:79:cb:18:7f:17:f0:c7:23:35:
         68:f2:6e:57:76:59:6c:6e:d5:56:7d:5d:2b:52:bd:e8:54:ad:
         00:11:a2:fe:9b:99:3b:ac:5f:d9:25:27:52:71:2c:56:55:56:
         3b:1c:62:fa:79:d4:9d:a2:cb:9b:df:d2:cf:6c:78:ae:d3:bc:
         d7:9c:22:56:04:30:ee:e5:d4:f5:9f:36:6d:3f:64:25:ca:4a:
         c5:11:7e:e2:86:fb:08:c2:ca:a8:1f:27:e9:f1:ab:1d:98:2d:
         95:5b:cf:1a:ca:38:7a:5f:49:9b:ee:3d:70:81:a5:f0:75:bc:
         cf:ed:be:31:88:07:ac:b0:d3:41:96:68:fd:30:bb:aa:f1:54:
         2e:34:ed:f1:a1:01:05:5c:a7:8d:7c:80:e6:0f:e3:52:7d:0e:
         1a:80:93:30:ca:d7:70:7a:05:1a:6c:9d:f4:2a:34:35:a4:8f:
         fb:ea:58:47:80:08:bb:6a:99:8d:97:9f:76:fc:6a:19:1d:61:
         0f:ba:ad:39:18:f1:2c:2d:f3:3a:e3:47:19:51:28:81:ab:e7:
         a2:06:33:aa:7e:fb:c7:01:9e:9a:e6:47:03:a2:2a:01:9d:4c:
         ce:5e:d7:d6:ef:6d:cf:00:4d:aa:76:1f:3e:97:c0:7c:f0:11:
         9d:59:2b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq+C6eeMt51IEQkXPKUmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTg4YmU1YzBhZmFiM2QxZGJlMTJkYzc5MzEwYzQ0OTll
MTI3YWQwHhcNMjYwNDE3MDkwMDQ4WhcNMjYwNDE4MDkwMDQ4WjAzMTEwLwYDVQQD
EyhjNTA2NWRjZGJmN2QyMDVkNDA2MThjMWM0ODE3MTUwMjE3YzY0YjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XgyqGVmcigL6T45MCtSAMWjUjjt
CfWefAUsdtPwA8gawiK0TK9j6/+vRUgBz5O/NC7DMRWiJmRhzo3c7/2W5uXrYv6h
e7/rHbmkERsxksDtj94af0xZVLMOP3copLOIbYKusJQrZRwmW/xzn+VXkUo4JGIV
nkYlEoJ7EC3anOQLJ6lxSr3YOzs+n76s94wIdbPC7mGS47NAxZnbsY9ZWnfpRZV6
UbQa0iEDiuGN0Fx+3Mnxx5zHaT5cO23jg/y9ni7G4Mg9/Zz3Yz6tblN1yNeM7iof
Gpvj9qKC8UbZXKNEmY2XSyyNiTs+i8bQ64W0972IHUJLMc+6Os4CcAnS1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUGXc2/fSBdQGGMHEgXFQIXxks9MB8GA1UdIwQY
MBaAFMPoi+XAr6s9Hb4S3HkxDESZ4SetMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1pTDVjQ3ZxejBkdmhMY2VURU1SSm5oSjYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYTQ0OTctMDk1Mi00NjE4LTkzNzIt
ZjQyY2Q0NmQwNGVjLzEvdy1pTDVjQ3ZxejBkdmhMY2VURU1SSm5oSjYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9hYTQ0OTctMDk1Mi00NjE4LTkzNzItZjQyY2Q0NmQwNGVj
LzEvdy1pTDVjQ3ZxejBkdmhMY2VURU1SSm5oSjYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaEpxZtO
pFpVecsYfxfwxyM1aPJuV3ZZbG7VVn1dK1K96FStABGi/puZO6xf2SUnUnEsVlVW
Oxxi+nnUnaLLm9/Sz2x4rtO815wiVgQw7uXU9Z82bT9kJcpKxRF+4ob7CMLKqB8n
6fGrHZgtlVvPGso4el9Jm+49cIGl8HW8z+2+MYgHrLDTQZZo/TC7qvFULjTt8aEB
BVynjXyA5g/jUn0OGoCTMMrXcHoFGmyd9Co0NaSP++pYR4AIu2qZjZefdvxqGR1h
D7qtORjxLC3zOuNHGVEogavnogYzqn77xwGemuZHA6IqAZ1Mzl7X1u9tzwBNqnYf
PpfAfPARnVkrCw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:02:30 2026 by rpki-client