Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
File:                     wZ91slk8orGwpf0MVAFd4wbEfuY.mft (raw, json)
Hash identifier:          cUyCdbO4wEVY3PzK8tCLun2JCfNOSlac9wOjUWpNdts=
Subject key identifier:   9A:3E:BD:43:77:F0:DA:C0:86:9C:C1:34:D1:A7:EB:6B:49:DF:53:FE
Authority key identifier: C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6
Certificate issuer:       /CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
Certificate serial:       019DA2D356179C4084DFA1DEA4C073E8AE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
Manifest number:          18CF
Signing time:             Sat 18 Apr 2026 23:00:52 +0000
Manifest this update:     Sat 18 Apr 2026 23:00:52 +0000
Manifest next update:     Sun 19 Apr 2026 23:00:52 +0000
Files and hashes:         1: FoYyMk5nn_mx43Eqm4w9S-GFiOo.asa (hash: tIjIVbBkyqnMiqD5rmUgC1pkH2WtDxCN/8HGaRwdDA0=)
                          2: GNUScliA15EVg12KS0aiN6LNf4o.roa (hash: jgNE4zzdH3wyJCQBwY43az2dGkMcZm+AtuFzQMGyrHk=)
                          3: UK4Q1ou-4RzyU8ZkqdAW7bZ71v4.roa (hash: Uo9npzMSKoS6/XK/1Kx/5n7ypwDrpKkycXGmZ34WNR0=)
                          4: c0Jzt3bIEhRRa4PKEVY4MtsUsds.asa (hash: gGqMQoDe6c9sXdZ7ZcSzgdriRo31EV4kvGW39wn8ulc=)
                          5: wZ91slk8orGwpf0MVAFd4wbEfuY.crl (hash: JuUuSrS9yaXHaPhpdsdQJbZLgiRtvE3MK300feMmnQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:d3:56:17:9c:40:84:df:a1:de:a4:c0:73:e8:ae:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c19f75b2593ca2b1b0a5fd0c54015de306c47ee6
        Validity
            Not Before: Apr 18 23:00:52 2026 GMT
            Not After : Apr 19 23:00:52 2026 GMT
        Subject: CN=9a3ebd4377f0dac0869cc134d1a7eb6b49df53fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:de:d7:44:97:7d:35:1d:72:bb:d0:fb:81:
                    d7:48:f4:65:08:92:2d:0a:34:86:3e:1b:fa:eb:3d:
                    4f:68:d7:e6:86:fe:e9:ce:e2:6c:0a:4b:37:e2:16:
                    82:bf:4a:5e:36:a8:fb:43:a9:c1:0d:71:1b:e0:18:
                    52:44:e5:2a:7a:1f:f4:a6:40:cc:56:ce:05:cc:91:
                    c8:fa:63:fb:b0:9c:38:ad:e7:27:bc:97:ef:9e:de:
                    ca:35:63:24:51:eb:87:f5:7e:43:fb:21:69:0c:a3:
                    36:f7:ef:52:99:5f:ef:69:1d:bd:8d:b8:70:6d:67:
                    fc:5a:c1:1a:18:a4:6d:cc:38:8d:51:a4:eb:2e:36:
                    00:d8:f8:de:45:c1:3f:c2:8d:1b:6f:2a:2c:9c:d3:
                    a1:65:9c:4e:15:9a:5d:2f:1c:1f:29:b6:33:22:2a:
                    27:7c:84:a0:13:ce:fa:11:45:2f:6d:b0:8b:a5:0b:
                    db:e8:63:28:13:61:30:97:f5:7f:b3:18:c4:da:ac:
                    c9:dc:ca:8e:8e:38:a7:79:8c:51:50:43:93:98:5f:
                    22:f1:de:5e:5c:d8:23:b2:38:60:aa:3b:0a:73:c8:
                    a8:c7:25:5e:dc:4b:64:72:2d:20:4e:b0:2e:4f:6d:
                    e4:a8:47:e9:ee:95:87:e0:f4:15:f6:6f:9f:2a:5d:
                    23:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3E:BD:43:77:F0:DA:C0:86:9C:C1:34:D1:A7:EB:6B:49:DF:53:FE
            X509v3 Authority Key Identifier:
                keyid:C1:9F:75:B2:59:3C:A2:B1:B0:A5:FD:0C:54:01:5D:E3:06:C4:7E:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZ91slk8orGwpf0MVAFd4wbEfuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/37a8d2-3466-4616-bc1c-01240bcfdb42/1/wZ91slk8orGwpf0MVAFd4wbEfuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:e1:46:68:c2:86:b3:5a:00:a8:c0:fe:47:f7:aa:aa:17:88:
         fc:f1:6d:53:05:e6:d8:2d:90:a9:24:ab:6a:cf:e7:c8:bb:5f:
         53:60:42:76:8c:25:0e:49:2c:b7:c8:20:bd:ac:49:d7:64:91:
         7d:ad:e3:fe:ad:76:24:18:c4:12:39:8b:73:f3:6f:8f:96:d5:
         64:3c:52:3f:4b:bd:da:c7:22:f4:1b:f9:24:18:fd:e3:b8:c6:
         45:c6:f5:d4:02:f9:8a:2c:03:e3:80:a3:a3:0b:fd:ca:dc:a5:
         f2:ff:46:c5:74:e4:38:a1:62:de:77:7b:d7:b7:2e:e6:3f:84:
         4e:3c:fb:fe:c8:1d:43:ab:a1:db:3b:25:d1:71:2c:57:d6:93:
         45:95:ab:3e:4b:3a:88:25:6d:ff:4b:50:16:fa:3c:77:84:dc:
         e8:e8:0c:4b:db:e9:4f:2a:59:18:73:a2:a0:54:18:e6:52:fb:
         47:d1:cb:43:62:c2:32:03:ff:95:8c:cb:72:48:f9:8b:9c:1f:
         51:7a:cf:d4:b0:5c:af:cc:d8:7d:b4:09:08:d0:10:4f:48:34:
         b9:7b:ba:e3:33:ef:e7:25:76:7c:db:b4:33:57:d2:73:29:c2:
         c8:ef:59:b1:b2:4f:55:00:df:2d:3e:bd:ef:93:8f:9f:ee:7a:
         3c:5b:3f:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i01YXnECE36HepMBz6K6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOWY3NWIyNTkzY2EyYjFiMGE1ZmQwYzU0MDE1ZGUzMDZj
NDdlZTYwHhcNMjYwNDE4MjMwMDUyWhcNMjYwNDE5MjMwMDUyWjAzMTEwLwYDVQQD
Eyg5YTNlYmQ0Mzc3ZjBkYWMwODY5Y2MxMzRkMWE3ZWI2YjQ5ZGY1M2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqDe10SXfTUdcrvQ+4HXSPRlCJIt
CjSGPhv66z1PaNfmhv7pzuJsCks34haCv0peNqj7Q6nBDXEb4BhSROUqeh/0pkDM
Vs4FzJHI+mP7sJw4recnvJfvnt7KNWMkUeuH9X5D+yFpDKM29+9SmV/vaR29jbhw
bWf8WsEaGKRtzDiNUaTrLjYA2PjeRcE/wo0bbyosnNOhZZxOFZpdLxwfKbYzIion
fISgE876EUUvbbCLpQvb6GMoE2Ewl/V/sxjE2qzJ3MqOjjineYxRUEOTmF8i8d5e
XNgjsjhgqjsKc8ioxyVe3Etkci0gTrAuT23kqEfp7pWH4PQV9m+fKl0jCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJo+vUN38NrAhpzBNNGn62tJ31P+MB8GA1UdIwQY
MBaAFMGfdbJZPKKxsKX9DFQBXeMGxH7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMt
MDEyNDBiY2ZkYjQyLzEvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zN2E4ZDItMzQ2Ni00NjE2LWJjMWMtMDEyNDBiY2ZkYjQy
LzEvd1o5MXNsazhvckd3cGYwTVZBRmQ0d2JFZnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuFGaMKG
s1oAqMD+R/eqqheI/PFtUwXm2C2QqSSras/nyLtfU2BCdowlDkkst8ggvaxJ12SR
fa3j/q12JBjEEjmLc/Nvj5bVZDxSP0u92sci9Bv5JBj947jGRcb11AL5iiwD44Cj
owv9ytyl8v9GxXTkOKFi3nd717cu5j+ETjz7/sgdQ6uh2zsl0XEsV9aTRZWrPks6
iCVt/0tQFvo8d4Tc6OgMS9vpTypZGHOioFQY5lL7R9HLQ2LCMgP/lYzLckj5i5wf
UXrP1LBcr8zYfbQJCNAQT0g0uXu64zPv5yV2fNu0M1fScynCyO9ZsbJPVQDfLT69
75OPn+56PFs/XQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:59 2026 by rpki-client