Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier:          BcKSHL89cmoLVX6PPNny7/0vciiFE/LnCFrI2pVsNFE=
Subject key identifier:   4F:08:4A:31:6D:77:F0:D9:E3:75:B1:BA:AB:12:F5:A1:77:82:CD:D8
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       019DA3E68FA3FC5DB0CE8AC41ADFC0AD665B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number:          182E
Signing time:             Sun 19 Apr 2026 04:01:29 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:29 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:29 +0000
Files and hashes:         1: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: h31blvmZZE9Mk7vfOKsSEiHOYLCBHNKzjisEEGtmZoc=)
                          2: uXS0bdbFdOHb6Fis6v93sRggyKI.roa (hash: 5dDzWf7HGqV8pXI0aYhhoLgb4jJbNqsLqa/M4syFKfo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:8f:a3:fc:5d:b0:ce:8a:c4:1a:df:c0:ad:66:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: Apr 19 04:01:29 2026 GMT
            Not After : Apr 20 04:01:29 2026 GMT
        Subject: CN=4f084a316d77f0d9e375b1baab12f5a17782cdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:19:6a:f5:f0:31:ff:9b:4a:90:cc:5b:7f:a0:
                    9a:fb:8c:4d:73:94:42:95:04:1b:52:d6:2e:64:d7:
                    81:02:7f:ad:6c:21:09:eb:03:fc:ad:3c:99:80:f8:
                    68:9b:06:a1:9e:b8:cf:e8:cf:70:ce:28:50:b1:e9:
                    92:84:0d:94:13:e7:f4:d5:bd:6a:e3:c9:5b:1f:1c:
                    15:d3:60:6d:d6:24:81:52:d8:e1:b6:fd:b2:5c:90:
                    26:bf:a1:68:9e:00:15:3a:2c:3d:f0:50:2e:66:b3:
                    cb:66:2c:1f:fb:2f:a1:59:bd:30:48:87:b2:20:50:
                    e1:68:0d:b5:d2:99:d7:da:7d:e4:de:a1:fd:e8:10:
                    3d:a1:bd:d1:fa:7a:66:d7:5e:58:87:e0:bd:c6:88:
                    9b:b7:44:e7:48:6e:bd:2c:83:af:27:16:c6:5f:8d:
                    d3:d9:e2:cc:d0:d8:02:7d:6d:ac:48:17:a4:8b:c6:
                    f1:97:6c:9b:b3:cf:b7:8c:78:f3:72:12:08:3a:7a:
                    43:8a:70:3c:55:ef:64:fd:e1:bb:24:18:4e:bd:57:
                    8f:3f:c7:c3:78:7f:50:62:58:da:b0:86:e1:85:8b:
                    45:34:10:bf:5e:76:dd:f1:51:1b:39:bd:eb:38:fe:
                    78:89:0c:d3:ca:60:8d:1d:63:d9:9b:3e:aa:9d:51:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:08:4A:31:6D:77:F0:D9:E3:75:B1:BA:AB:12:F5:A1:77:82:CD:D8
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:be:9b:b2:14:d4:f7:a5:a6:2c:59:d5:64:01:9b:ca:4e:33:
         d2:0d:0d:1a:51:f6:07:21:55:d5:e9:18:c9:49:85:52:72:c7:
         09:10:6a:46:9e:f1:1c:29:38:2f:c5:b2:b7:c2:c8:e5:8e:cf:
         70:67:1a:8d:b0:8a:45:28:f6:7c:55:78:24:01:9d:d5:88:b8:
         17:52:dc:91:aa:c2:f8:67:40:cb:01:88:1f:b7:b4:5f:aa:56:
         a1:b9:87:7c:0d:d9:fa:c0:4c:f5:8d:98:2e:74:ea:f6:34:97:
         85:88:c1:f1:8a:3b:38:02:6c:5c:66:91:96:46:95:d9:ee:dd:
         2b:24:29:b7:3c:a3:ce:d5:0e:df:ec:70:2e:1f:ac:15:aa:a3:
         9d:d8:b1:9c:b2:b0:cc:4e:ac:a6:eb:ee:94:8a:3b:c9:c8:5f:
         15:4b:92:f8:ff:e6:59:90:a7:93:d4:de:38:2a:3d:a2:69:8a:
         e1:cb:d8:f6:cf:1b:51:48:19:38:12:f9:15:f1:b7:81:22:34:
         05:ad:55:26:67:60:f8:36:5c:b6:89:38:11:7c:99:11:7a:d5:
         a4:fc:f9:41:1b:11:60:58:4d:eb:16:39:50:51:0a:5f:bf:d1:
         aa:c3:be:03:02:e4:4a:d6:66:ac:0b:64:68:9e:4d:94:bd:06:
         62:fc:33:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:21 2026 by rpki-client