Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
File:                     Wu3LM00555eBfi60dwPAGLTcSdU.mft (raw, json)
Hash identifier:          4+ULEOBpAtz36W8y4dYO5voixFAnmwwXRmqt+S+lEVY=
Subject key identifier:   2A:56:3C:D4:F1:FC:35:8C:CB:47:A9:A0:C7:73:5B:F9:B3:B4:D4:6B
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Certificate issuer:       /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial:       019D97E1970233C8D9D2F05E209267F103D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
Manifest number:          0EB1
Signing time:             Thu 16 Apr 2026 20:00:37 +0000
Manifest this update:     Thu 16 Apr 2026 20:00:37 +0000
Manifest next update:     Fri 17 Apr 2026 20:00:37 +0000
Files and hashes:         1: KIeo57i2HPTMf-OuTIV1Im2isnI.roa (hash: byqGa6PqgQ91x46Mr1No6b2uTARtOfxk40SvehiN5a8=)
                          2: Wu3LM00555eBfi60dwPAGLTcSdU.crl (hash: RBWD1wkVwa/S6J+09T8VWm/qMsc/dNAwUWecpXd0cVs=)
                          3: _W4_iaAJUrh_Vnaa8mSw0PciE2s.roa (hash: SVFe66gEpvdA3NAdAmfrhM3pCUnnYwItgIhQH3BtnqY=)
                          4: wyoCt06Eo_R0qzKcYPe6aXY_srE.roa (hash: 8s5wlbYJtB2DZf+cPPMnF/3KTnpk7C/prhkNohBv6jU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:97:02:33:c8:d9:d2:f0:5e:20:92:67:f1:03:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
        Validity
            Not Before: Apr 16 20:00:37 2026 GMT
            Not After : Apr 17 20:00:37 2026 GMT
        Subject: CN=2a563cd4f1fc358ccb47a9a0c7735bf9b3b4d46b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f2:5a:89:19:a8:cb:37:61:54:86:c5:2b:3a:
                    9d:be:8d:16:eb:df:07:ef:c4:c7:88:b9:2d:c6:fd:
                    ce:2f:62:3a:6a:05:93:5e:32:2c:ed:31:72:4a:25:
                    1f:08:4b:c6:21:41:b5:9c:fa:16:d5:5a:b5:0b:77:
                    59:08:b4:09:67:a5:34:d7:eb:dd:6f:ce:13:ea:f9:
                    c5:fb:55:69:43:e2:89:45:1d:e5:f5:c1:1e:2e:cf:
                    bc:7d:92:ba:07:9e:ca:9b:d9:f6:b8:b1:e4:26:d8:
                    2e:c5:d9:bf:48:21:ac:f5:d8:81:66:77:2d:94:ed:
                    36:b0:c5:36:56:65:95:6a:84:62:52:c5:47:69:95:
                    13:27:86:96:11:e7:3a:79:05:ea:b9:98:01:d3:68:
                    8f:44:6f:d1:1e:5b:26:5f:64:bb:ec:71:c5:a6:96:
                    c9:35:ac:1a:11:88:94:37:5d:18:29:2f:48:59:53:
                    07:13:b1:78:b5:14:dd:c9:bd:2b:50:16:83:3f:93:
                    9e:79:b7:15:10:5c:54:b3:37:74:71:db:96:d2:5f:
                    2c:64:c8:6c:ed:5a:54:a1:74:28:f1:b0:1e:1b:74:
                    cb:9f:02:67:2c:b0:e9:22:2c:fc:22:91:fe:04:f2:
                    2f:d3:25:a6:c2:ea:03:4c:f9:bb:0d:de:89:ae:c6:
                    81:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:56:3C:D4:F1:FC:35:8C:CB:47:A9:A0:C7:73:5B:F9:B3:B4:D4:6B
            X509v3 Authority Key Identifier:
                keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:2d:ad:bf:b9:d7:a4:c7:55:78:39:92:72:ab:9f:0c:0e:
         3e:5a:46:80:53:07:3d:a8:11:13:bc:9a:5f:fa:f1:61:61:3e:
         20:57:28:69:52:58:cf:0c:c2:03:c2:dd:5a:ff:94:1d:be:fd:
         7b:5d:03:35:25:70:a1:9e:d0:5d:28:3f:30:68:06:ba:e9:0d:
         89:e2:94:0e:13:6e:be:07:21:55:c6:8c:77:f8:1c:ef:28:c4:
         0c:8b:98:f8:2b:77:4a:f9:5d:4d:45:52:31:07:62:57:70:be:
         4b:3a:3c:1c:ec:85:af:c4:60:76:73:68:7a:a1:2b:d3:c9:7f:
         96:f5:89:45:df:ae:29:d7:21:07:8e:e0:55:20:01:4e:31:a0:
         73:2c:7f:21:16:31:1d:81:06:4a:13:99:06:1d:ac:12:7e:cb:
         5e:d7:3d:ae:c9:51:10:db:53:a5:f9:e9:40:9c:a6:54:93:c4:
         ee:be:70:42:12:98:4e:01:29:b1:a4:63:4b:40:41:9b:84:b6:
         fc:1e:51:50:38:7b:a5:d3:c8:0f:20:b1:bc:d8:ee:d0:45:b3:
         66:91:c7:75:35:38:ed:b3:9f:86:c0:c6:31:3c:09:03:22:79:
         dd:90:14:06:30:5a:19:4f:19:6c:b9:cb:8a:44:c8:30:32:e5:
         24:80:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:21:48 2026 by rpki-client