Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
File:                     WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json)
Hash identifier:          5NJX68ftYbThs26WkFo1CcDA9oQucIx5EEqZBUKRWVU=
Subject key identifier:   0B:0A:73:2F:99:43:5D:C0:37:D6:7A:F0:9F:8F:AC:80:FD:C8:62:44
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Certificate issuer:       /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial:       019D9B19842B3AA57F536E5F3F22B3FC8F88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
Manifest number:          18DD
Signing time:             Fri 17 Apr 2026 11:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:33 +0000
Files and hashes:         1: 3W9R-YT71N2KOE9koy1r5cINKX0.roa (hash: clKClGDaGmI0tmvfHI+K0tkdnMBa+OFDvpOE7hWE5Ts=)
                          2: 5UeKqt91iujWrLpmveszaAeKq38.roa (hash: uGfE9PLC67qvNbDJ8GUA0pov+PYaKuZOHQHTjJZLOVs=)
                          3: AUg0z5yXbzh2DRCyGjN0QT6euNA.roa (hash: RSYJ1asjZqxOdOG/NJBg7u2rmfVrBP+knp47N/2/EDM=)
                          4: NG61yH3HN97TjS1iRIUPVdYaQ7A.roa (hash: x678lkfNMzciNejX1Mk4JHb1ftZLDB8lKMVQe+Qriio=)
                          5: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: LuA8cZaH7iCqwrGeUcxU/2M/c/H1WSNQ0HxHtLcykz8=)
                          6: p0oEcMg8sG6gT08Fcxw4r9QhamI.roa (hash: z6uLeIBaxCEHOYTKTX4AQu+ufdq2lBhvDUsLTsxGNkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:84:2b:3a:a5:7f:53:6e:5f:3f:22:b3:fc:8f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
        Validity
            Not Before: Apr 17 11:00:33 2026 GMT
            Not After : Apr 18 11:00:33 2026 GMT
        Subject: CN=0b0a732f99435dc037d67af09f8fac80fdc86244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5a:69:4d:6f:07:dd:65:e0:09:a8:29:37:09:
                    f9:af:54:eb:70:d0:69:c2:ab:0d:9a:5b:0a:03:fe:
                    4c:78:de:88:67:ee:13:42:f6:64:32:75:4a:23:6d:
                    d4:34:d6:46:fb:3d:15:ba:aa:70:4e:30:eb:5f:91:
                    85:39:c4:fa:41:26:3a:94:89:89:c0:46:a4:bd:ed:
                    c6:96:79:dc:42:d5:50:e8:68:2b:73:07:f2:f8:4c:
                    ee:0d:52:af:f7:79:15:10:2d:a7:53:8a:90:63:d0:
                    b8:cd:24:de:1d:cd:b9:01:09:d7:a0:7b:16:cf:de:
                    63:ec:ce:7a:1b:f7:fb:29:05:7d:33:34:83:18:14:
                    a4:c2:fe:b3:22:84:a2:d1:0d:72:34:8a:71:ff:3a:
                    52:f2:fe:45:bf:9a:db:f9:4e:b7:81:01:10:21:35:
                    51:7e:01:3c:bb:6e:8e:9a:8c:f1:5e:6c:06:c7:11:
                    5f:84:e7:95:20:dc:9e:96:d5:d6:ba:ff:91:ee:48:
                    37:44:da:b0:49:d3:83:91:31:53:4b:78:f1:0f:fd:
                    f0:c6:ba:09:6d:32:14:4c:3f:89:51:19:e6:cf:36:
                    15:db:4c:d2:35:6c:e6:a4:e0:7b:ca:24:54:f6:c6:
                    0c:76:bf:ba:9c:cc:4a:44:65:27:d6:5a:77:0d:82:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0A:73:2F:99:43:5D:C0:37:D6:7A:F0:9F:8F:AC:80:FD:C8:62:44
            X509v3 Authority Key Identifier:
                keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:64:20:ef:27:af:4a:18:1f:22:df:65:6f:ec:b0:0b:fd:da:
         88:2b:be:aa:71:e2:37:56:65:9e:a8:31:32:17:6c:ae:fe:d0:
         cf:15:59:5b:8c:d7:ff:10:2c:3b:1c:ca:73:3f:ee:58:af:50:
         f5:fc:c6:a1:3d:e1:1b:8e:67:ae:35:17:c9:6d:6b:d1:2f:58:
         7b:cd:03:82:61:8b:fa:92:1c:da:16:8c:83:cf:bb:28:76:ae:
         7c:c4:3b:7c:b0:0e:31:f5:e7:97:86:6a:5b:c6:d2:16:44:5e:
         39:27:67:66:01:fb:a7:5c:7c:d2:56:25:e4:37:b9:b1:29:8a:
         cd:1a:37:df:e2:ce:bb:f1:cb:1f:c9:18:b4:f3:cc:21:3f:45:
         e0:05:2a:82:35:02:4d:9f:d1:42:03:98:4f:c2:8a:ec:89:36:
         f3:fa:6b:f2:87:86:6c:4c:4f:39:5c:57:38:e2:2d:ea:e4:f7:
         bb:54:94:90:73:7b:8b:9b:5e:8d:62:0a:bb:d9:e7:78:e2:56:
         19:1a:24:04:e4:65:79:75:a1:c0:05:cc:3e:07:08:d3:5c:e8:
         ee:61:34:0a:3b:57:50:9f:27:c0:78:f3:70:20:df:8b:f4:e4:
         63:9c:ba:82:4b:23:99:66:1a:cb:eb:50:a3:70:c6:16:cb:a9:
         77:ae:10:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:59:18 2026 by rpki-client