Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          /IX9gBx4+sJhtzSBm6aCOwtv+/dLdTv+wt9yj5TLcC4=
Subject key identifier:   DC:80:95:AE:1E:72:C0:FC:54:7A:B6:87:57:ED:5D:89:2A:A8:EA:CA
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       01A0C96ACA81138E7986D21CA0F261EB45CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          133B
Signing time:             Tue 22 Sep 2026 14:00:14 +0000
Manifest this update:     Tue 22 Sep 2026 14:00:14 +0000
Manifest next update:     Wed 23 Sep 2026 14:00:14 +0000
Files and hashes:         1: 4nK7xMejEGysuibSYJIso6RlQpI.roa (hash: WFo/Wgq0Q0zz5SgRWVK30WfT98xnLcIsGWqhNlQwY78=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: lqBeXZZUzDk2nbNAWDdI83WMxxozUABOuz7ov+xeX2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:6a:ca:81:13:8e:79:86:d2:1c:a0:f2:61:eb:45:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Sep 22 14:00:14 2026 GMT
            Not After : Sep 23 14:00:14 2026 GMT
        Subject: CN=dc8095ae1e72c0fc547ab68757ed5d892aa8eaca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:5e:6f:a9:50:be:af:83:08:39:1e:1d:d0:
                    5b:55:34:86:96:a1:7f:a8:0b:1a:6c:3f:2b:e8:a1:
                    b5:0d:b3:62:4f:5f:bc:91:21:ae:8e:20:94:37:12:
                    f4:d2:25:8f:00:1a:8e:79:0a:2b:14:e6:11:6f:4a:
                    e9:ec:6c:45:d5:92:1c:60:62:1c:1f:ce:fc:4f:a0:
                    96:57:bd:f9:87:81:9f:84:3f:c1:c9:21:08:a3:73:
                    89:e8:08:3d:52:61:24:9f:fe:83:dc:88:d5:64:e0:
                    9b:47:f0:30:31:6f:b4:af:02:aa:31:f7:4a:21:90:
                    ff:42:d5:7a:71:90:de:29:df:32:a2:a9:59:24:03:
                    ca:0e:04:f5:ab:2d:01:59:a9:e3:43:b7:92:73:bf:
                    7e:cf:66:ac:e1:08:e1:c7:7d:c3:1f:9e:a4:08:e1:
                    db:51:5b:f0:af:8c:73:28:7e:e0:29:5b:3d:b0:20:
                    ff:13:e7:95:36:fa:2b:f0:ff:d5:75:40:8d:ec:e7:
                    ae:87:fa:a4:df:9b:37:fe:b2:a7:0c:97:38:43:55:
                    b0:ce:2a:11:d6:9d:d2:82:98:d7:06:ba:c4:e4:d3:
                    fb:cc:82:1c:2a:12:37:8c:5b:86:28:97:25:52:65:
                    ed:ab:c4:ba:72:83:9a:72:24:b0:14:b3:c5:ad:5f:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:80:95:AE:1E:72:C0:FC:54:7A:B6:87:57:ED:5D:89:2A:A8:EA:CA
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:20:3a:1d:ea:92:7f:13:c1:bf:8a:2a:31:66:c6:be:14:26:
         c3:cd:7b:b9:bb:8f:59:43:53:58:a5:7a:97:f2:6f:28:d2:1b:
         e9:d0:b9:75:56:96:b0:1c:71:14:40:4a:4a:38:a9:c8:32:44:
         7b:ff:2d:a7:04:16:4b:9e:98:ab:f3:db:63:23:f5:e0:56:b6:
         f2:65:ce:0e:fe:68:b3:b6:10:27:97:ca:17:8a:4c:31:0f:40:
         c6:08:b6:06:95:80:bb:58:23:ff:59:6f:51:1d:a9:38:ae:03:
         df:92:f0:d6:68:cc:a7:a5:9c:c0:ab:e5:4a:65:23:21:6c:cb:
         08:a9:e8:fd:96:6f:02:8b:b1:c5:92:e6:d1:a0:45:1a:97:a5:
         a1:94:57:3b:f8:62:58:e3:14:66:fe:9f:57:3a:9a:b6:29:55:
         08:41:34:b5:b3:bd:09:6a:60:03:62:29:e9:f0:22:3f:9a:d0:
         fa:df:7f:b0:e1:9c:be:a3:56:71:8e:65:99:f1:91:31:bc:48:
         40:ee:84:b1:5a:e2:ae:12:cc:4c:49:23:e4:cd:8b:4d:67:da:
         83:b3:a6:62:b3:5c:00:4a:b2:8c:fd:55:26:10:b5:e1:52:f5:
         62:01:bc:85:dd:2d:83:e9:61:c6:8d:10:92:a2:27:b3:5f:f4:
         8b:a8:df:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJasqBE455htIcoPJh60XOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGQ2M2QzOTcwN2Q0NWE4YzY4M2NiNTJlNDcxNzFkMTM2
Y2U1MDgwHhcNMjYwOTIyMTQwMDE0WhcNMjYwOTIzMTQwMDE0WjAzMTEwLwYDVQQD
EyhkYzgwOTVhZTFlNzJjMGZjNTQ3YWI2ODc1N2VkNWQ4OTJhYThlYWNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOteb6lQvq+DCDkeHdBbVTSGlqF/
qAsabD8r6KG1DbNiT1+8kSGujiCUNxL00iWPABqOeQorFOYRb0rp7GxF1ZIcYGIc
H878T6CWV735h4GfhD/BySEIo3OJ6Ag9UmEkn/6D3IjVZOCbR/AwMW+0rwKqMfdK
IZD/QtV6cZDeKd8yoqlZJAPKDgT1qy0BWanjQ7eSc79+z2as4Qjhx33DH56kCOHb
UVvwr4xzKH7gKVs9sCD/E+eVNvor8P/VdUCN7Oeuh/qk35s3/rKnDJc4Q1WwzioR
1p3SgpjXBrrE5NP7zIIcKhI3jFuGKJclUmXtq8S6coOaciSwFLPFrV+XCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyAla4ecsD8VHq2h1ftXYkqqOrKMB8GA1UdIwQY
MBaAFMFNY9OXB9RajGg8tS5HFx0TbOUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODIt
NWExZGFhOTRkZTQyLzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODItNWExZGFhOTRkZTQy
LzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyA6HeqS
fxPBv4oqMWbGvhQmw817ubuPWUNTWKV6l/JvKNIb6dC5dVaWsBxxFEBKSjipyDJE
e/8tpwQWS56Yq/PbYyP14Fa28mXODv5os7YQJ5fKF4pMMQ9Axgi2BpWAu1gj/1lv
UR2pOK4D35Lw1mjMp6WcwKvlSmUjIWzLCKno/ZZvAouxxZLm0aBFGpeloZRXO/hi
WOMUZv6fVzqatilVCEE0tbO9CWpgA2Ip6fAiP5rQ+t9/sOGcvqNWcY5lmfGRMbxI
QO6EsVrirhLMTEkj5M2LTWfag7OmYrNcAEqyjP1VJhC14VL1YgG8hd0tg+lhxo0Q
kqIns1/0i6jfAg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:38:56 2026 by rpki-client