Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          gFP3sIi0nNM/avNIYksRA+PWAuRwNVMRdR//D5qTDyI=
Subject key identifier:   1E:81:2E:45:12:97:5B:B3:B8:5C:CC:0E:EE:3D:22:E3:F3:D3:16:1A
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       019DA3787B6E691309532F8FF442C6D90065
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          0880
Signing time:             Sun 19 Apr 2026 02:01:15 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:15 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:15 +0000
Files and hashes:         1: QjOXLGjz8ds-7sCauorJ8W8aVN4.roa (hash: BmFWBCryjEjKWhVriCT0YrDHfiFmLKZXY1G064wUhCw=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: TWDzaUQAAgIakEJdBdUmViAskGeiOEG5AEEC/qEZLgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:78:7b:6e:69:13:09:53:2f:8f:f4:42:c6:d9:00:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Apr 19 02:01:15 2026 GMT
            Not After : Apr 20 02:01:15 2026 GMT
        Subject: CN=1e812e4512975bb3b85ccc0eee3d22e3f3d3161a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:61:5d:91:0a:b5:e5:b3:bc:2d:db:1b:86:
                    71:91:5f:b6:56:0f:98:9c:94:92:84:ee:4f:92:82:
                    e1:60:0a:af:47:52:d5:d0:97:3f:c4:ef:65:95:90:
                    4a:d7:21:7c:a8:76:58:ca:77:79:76:87:46:8a:09:
                    17:88:19:9a:f5:b4:0a:70:47:1e:0f:e4:1e:e9:26:
                    8e:93:9d:32:ee:48:84:2c:ea:0f:12:b1:5b:70:72:
                    5b:76:7c:5b:60:a0:b5:d1:92:e0:2d:70:3d:3a:3a:
                    94:8e:08:10:33:1f:5d:b4:30:97:01:fd:b4:50:49:
                    e7:db:99:35:70:9f:b1:f7:b3:86:56:f5:40:83:90:
                    91:b9:dc:26:03:13:a2:cc:dc:47:1b:5d:a7:34:24:
                    e2:79:eb:da:e5:f1:1f:9d:87:d6:df:a7:7d:1a:da:
                    6e:70:41:80:41:58:e5:6d:db:8a:11:42:c6:6c:53:
                    a3:92:86:19:92:09:47:9f:ac:32:32:a9:9e:15:a2:
                    ab:e9:da:a8:d4:7a:0a:b3:d7:f9:72:40:e9:f4:3d:
                    fd:4f:d3:56:d7:de:94:e6:70:6f:f1:fc:1f:77:b4:
                    84:96:bc:9a:3f:8f:37:d6:0a:55:6e:55:8f:11:9e:
                    6e:b9:9a:df:b4:74:20:f1:1c:17:f6:d1:39:cb:a0:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:81:2E:45:12:97:5B:B3:B8:5C:CC:0E:EE:3D:22:E3:F3:D3:16:1A
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:2e:33:18:6f:71:86:b7:84:9b:ec:d0:10:ff:ed:ad:ca:
         e1:21:9f:a7:c4:02:0c:e0:33:8e:01:70:cc:35:2f:50:bc:ad:
         75:23:b0:3f:a5:6f:bb:9b:07:fa:83:e8:eb:6d:4e:3d:41:a6:
         f7:75:e9:8e:1c:92:80:9d:2c:c6:a9:10:b4:5c:0a:64:9d:1e:
         36:56:17:0b:ea:5a:eb:56:b6:4a:e5:e2:e6:2c:2b:99:01:31:
         11:c1:0e:37:ee:6d:86:e4:a3:98:c0:0b:28:1f:b5:13:1f:66:
         77:56:f9:db:41:5a:b8:05:89:2b:cf:d1:02:cf:62:4f:bc:e2:
         36:46:d2:85:c1:70:50:16:51:c9:2e:e0:e7:d2:95:e0:86:01:
         01:da:8b:dc:f1:ae:39:ca:c8:10:08:98:22:71:aa:63:8a:ce:
         93:2c:b3:2e:33:4e:b3:de:90:99:b2:bc:8e:b8:5b:05:52:86:
         d2:23:e6:60:3f:d3:b8:5c:ca:22:d7:71:45:b1:4d:04:32:89:
         fd:5c:61:fc:dc:76:4f:8f:c8:d9:3a:be:b6:f7:75:fc:eb:86:
         c6:fb:a4:34:70:83:ca:7e:8b:52:d8:23:9b:3e:46:25:f4:ab:
         c0:c1:77:6c:53:3e:ff:f6:58:17:79:77:48:9d:9a:f1:fe:4b:
         b1:3c:3a:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeHtuaRMJUy+P9ELG2QBlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGIwNDFhZmFiZmQ4YzExZjBiMTBiNTIzNzk5YjY1Y2Zk
ZTM5MDgwHhcNMjYwNDE5MDIwMTE1WhcNMjYwNDIwMDIwMTE1WjAzMTEwLwYDVQQD
EygxZTgxMmU0NTEyOTc1YmIzYjg1Y2NjMGVlZTNkMjJlM2YzZDMxNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6lhXZEKteWzvC3bG4ZxkV+2Vg+Y
nJSShO5PkoLhYAqvR1LV0Jc/xO9llZBK1yF8qHZYynd5dodGigkXiBma9bQKcEce
D+Qe6SaOk50y7kiELOoPErFbcHJbdnxbYKC10ZLgLXA9OjqUjggQMx9dtDCXAf20
UEnn25k1cJ+x97OGVvVAg5CRudwmAxOizNxHG12nNCTieeva5fEfnYfW36d9Gtpu
cEGAQVjlbduKEULGbFOjkoYZkglHn6wyMqmeFaKr6dqo1HoKs9f5ckDp9D39T9NW
196U5nBv8fwfd7SElryaP4831gpVblWPEZ5uuZrftHQg8RwX9tE5y6C8KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6BLkUSl1uzuFzMDu49IuPz0xYaMB8GA1UdIwQY
MBaAFMHbBBr6v9jBHwsQtSN5m2XP3jkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAt
MmZiMDk0NGI1MTk0LzEvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAtMmZiMDk0NGI1MTk0
LzEvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVMuMxhv
cYa3hJvs0BD/7a3K4SGfp8QCDOAzjgFwzDUvULytdSOwP6Vvu5sH+oPo621OPUGm
93XpjhySgJ0sxqkQtFwKZJ0eNlYXC+pa61a2SuXi5iwrmQExEcEON+5thuSjmMAL
KB+1Ex9md1b520FauAWJK8/RAs9iT7ziNkbShcFwUBZRyS7g59KV4IYBAdqL3PGu
OcrIEAiYInGqY4rOkyyzLjNOs96QmbK8jrhbBVKG0iPmYD/TuFzKItdxRbFNBDKJ
/Vxh/Nx2T4/I2Tq+tvd1/OuGxvukNHCDyn6LUtgjmz5GJfSrwMF3bFM+//ZYF3l3
SJ2a8f5LsTw6BQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:32 2026 by rpki-client