Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File:                     E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier:          pdjeJybvol6SDJAhVR9qWZt8wU0I8mqABak8pj5Ock8=
Subject key identifier:   24:C9:0C:F1:56:31:7A:74:EA:13:EA:A5:04:47:FB:88:1D:15:69:F9
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer:       /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial:       019D9962F2CD7B36DCA2BBE75A09C971EBAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number:          0792
Signing time:             Fri 17 Apr 2026 03:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:31 +0000
Files and hashes:         1: E0bPvqxVf13qVW0K3FOh43rFeAA.roa (hash: L83gXrZ7ml1x6pbEKqasf9zLxkSub+uRzDvUjH/MeVU=)
                          2: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: Y1ci3gDD91/qrAKvg8gEiGZMMvedeKMfC5Aip3co/34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:f2:cd:7b:36:dc:a2:bb:e7:5a:09:c9:71:eb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
        Validity
            Not Before: Apr 17 03:01:31 2026 GMT
            Not After : Apr 18 03:01:31 2026 GMT
        Subject: CN=24c90cf156317a74ea13eaa50447fb881d1569f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:8b:83:ca:5b:7f:34:d9:f0:96:b2:26:12:
                    16:9e:30:4c:ad:cb:e3:f4:c8:98:fc:ef:ce:74:51:
                    0a:e4:1b:95:2f:5c:c9:95:e7:26:a3:61:47:e9:99:
                    6d:f4:dd:63:c7:4e:7e:75:83:70:c6:74:70:7e:f4:
                    60:a4:be:c1:f5:64:0e:ae:6f:07:00:7b:1a:4b:eb:
                    3b:e4:91:1d:de:df:d5:01:1d:bd:d8:fb:b9:f2:c9:
                    3f:0e:c9:4c:d1:f1:54:97:43:42:37:16:23:39:50:
                    b2:7c:2a:a0:0d:54:a9:cd:59:85:ed:33:6c:58:1b:
                    fc:60:83:04:55:ab:43:06:71:14:a7:51:52:a1:ed:
                    40:b9:0a:8a:a2:19:0e:23:8f:52:7b:89:64:9a:59:
                    15:be:4e:61:29:fa:1b:0c:73:a1:74:51:59:2f:39:
                    23:70:f0:1f:de:99:96:b9:46:23:aa:21:7b:78:ef:
                    b2:d5:8d:26:6a:95:15:d6:84:b4:73:a8:ba:ff:42:
                    a9:b9:59:84:7e:c3:b2:29:ea:12:90:7e:f2:a2:4d:
                    21:42:c9:c4:71:56:f0:5b:72:8f:13:0f:56:09:e7:
                    1b:db:93:4c:eb:65:b0:bc:f5:29:cd:6a:2d:83:1d:
                    71:62:64:db:cd:b4:c4:59:34:8e:30:1a:41:2b:43:
                    c8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:0C:F1:56:31:7A:74:EA:13:EA:A5:04:47:FB:88:1D:15:69:F9
            X509v3 Authority Key Identifier:
                keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:12:20:5f:b5:0a:8a:cb:00:76:6b:48:6b:da:21:d6:56:2a:
         b0:7f:87:fa:14:6e:1e:4e:ed:3a:c2:6c:99:9e:f8:a1:76:fc:
         45:7a:8b:33:15:4c:55:e0:21:0c:5d:75:5f:9e:90:e8:36:67:
         45:a0:35:71:88:6d:31:4f:e1:ed:9d:e8:69:e8:e8:24:79:78:
         fc:e2:be:52:2c:5b:51:3f:6b:16:cf:de:a0:09:8b:21:77:19:
         9c:68:96:4c:ae:7c:64:14:13:9b:dd:40:f2:5a:68:e8:58:40:
         33:af:cc:06:ef:1f:84:42:2d:dc:6e:31:da:8a:c1:89:42:87:
         5f:dc:66:55:67:be:eb:02:da:7d:ef:06:ae:25:39:a2:e3:2d:
         13:d8:65:c2:4b:14:a0:82:7c:03:40:b3:c9:72:6f:2e:c2:24:
         25:78:41:2e:2a:1c:5e:6d:89:d0:83:33:d2:81:a0:ab:f5:6a:
         82:f9:96:36:0a:c0:79:d8:27:9c:40:3f:fa:db:65:f5:2f:dc:
         ba:0e:53:62:c5:3f:93:15:07:13:d7:02:80:94:5c:c9:b5:fa:
         f6:5d:a7:d5:e0:38:3e:54:4c:5b:0d:82:ad:98:6e:6c:eb:40:
         6b:72:d4:76:78:03:ee:62:53:96:fe:7d:21:6a:a8:7d:9d:f0:
         16:d1:15:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYvLNezbcorvnWgnJceuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzVhYTVlMzdjNDJmN2RlYjdmM2IwZTk2NzBiZjU5YTJh
Y2E2YjUwHhcNMjYwNDE3MDMwMTMxWhcNMjYwNDE4MDMwMTMxWjAzMTEwLwYDVQQD
EygyNGM5MGNmMTU2MzE3YTc0ZWExM2VhYTUwNDQ3ZmI4ODFkMTU2OWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbOLg8pbfzTZ8JayJhIWnjBMrcvj
9MiY/O/OdFEK5BuVL1zJlecmo2FH6Zlt9N1jx05+dYNwxnRwfvRgpL7B9WQOrm8H
AHsaS+s75JEd3t/VAR292Pu58sk/DslM0fFUl0NCNxYjOVCyfCqgDVSpzVmF7TNs
WBv8YIMEVatDBnEUp1FSoe1AuQqKohkOI49Se4lkmlkVvk5hKfobDHOhdFFZLzkj
cPAf3pmWuUYjqiF7eO+y1Y0mapUV1oS0c6i6/0KpuVmEfsOyKeoSkH7yok0hQsnE
cVbwW3KPEw9WCecb25NM62WwvPUpzWotgx1xYmTbzbTEWTSOMBpBK0PI0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCTJDPFWMXp06hPqpQRH+4gdFWn5MB8GA1UdIwQY
MBaAFBN1ql43xC996387DpZwv1mirKa1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQt
ZDRiNzI1ZDA2NzZjLzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZTk3ZGQtZTcyMS00MTkyLWI4YjQtZDRiNzI1ZDA2NzZj
LzEvRTNXcVhqZkVMMzNyZnpzT2xuQ19XYUtzcHJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBIgX7UK
issAdmtIa9oh1lYqsH+H+hRuHk7tOsJsmZ74oXb8RXqLMxVMVeAhDF11X56Q6DZn
RaA1cYhtMU/h7Z3oaejoJHl4/OK+UixbUT9rFs/eoAmLIXcZnGiWTK58ZBQTm91A
8lpo6FhAM6/MBu8fhEIt3G4x2orBiUKHX9xmVWe+6wLafe8GriU5ouMtE9hlwksU
oIJ8A0CzyXJvLsIkJXhBLiocXm2J0IMz0oGgq/VqgvmWNgrAedgnnEA/+ttl9S/c
ug5TYsU/kxUHE9cCgJRcybX69l2n1eA4PlRMWw2CrZhubOtAa3LUdngD7mJTlv59
IWqofZ3wFtEVGA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:33 2026 by rpki-client