Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
File:                     wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft (raw, json)
Hash identifier:          ygGVIy5SYxT0hVn4bARXV6lkAfIRN1Q3ZxTOMxKj2og=
Subject key identifier:   0D:05:C3:F5:1A:1D:48:8D:F8:7E:3F:0E:0A:4F:10:E5:67:6E:43:08
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Certificate issuer:       /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial:       019D9A74D3B244EF8152F8FE7116C42CC932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
Manifest number:          0AE5
Signing time:             Fri 17 Apr 2026 08:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:40 +0000
Files and hashes:         1: 07FQcpcOx9dIkPfjKLtsF7CxIoA.roa (hash: 06X1mFh23OQI27UHgwFuA+R/te6ohldQDL+yi481fPk=)
                          2: 1abhrlOuSKnZ708WnL5sdHK1Ie0.roa (hash: /NbpRcPbPMObQ6oF2HglXE8t2NqbPyxSqMDeYEigMy8=)
                          3: 2LbAvbtaLL4wP6xQBwD33ZwnMco.roa (hash: lDJw37fnJ9K4oAxfTng5pKuQVfPwI4nhJ520WhzMyQE=)
                          4: 2ersDEYbQtg4l5m9V8r0SieR8Vo.roa (hash: aUuOBsE01fiLcyj9TfP/Qu1NPe+7XiHnxfWsVnOH0VI=)
                          5: 35g8C0Bqx69WCLMEI0d4eZzXow8.roa (hash: aKHlWChv0cCXRM+u3C5OOeU1egqlZV55eA/cfuE3sp4=)
                          6: 3FZlUz7uoucCzaZmPG0U58fB6SA.roa (hash: LGcv5ZIogTyxDleJRKQb2SPMT566dCH0f2NqyWLWYyA=)
                          7: 4RzlaE4IATIyocr-VUzpEUSO7Mo.roa (hash: zDqUG2mBRxI6CuLzFrAEFvPmBc+dGZskWKeVJphaxsI=)
                          8: 635uudG8DHHGUC5dHB75yyM9dXM.roa (hash: my4GmBqnhavathKgPuGRu/aCUoMVTtb5pDpy5TEfiRo=)
                          9: FH_80jMPKL9spaQFMKL0FymFhtc.roa (hash: oUYz8P6/ozfIRV+WS+r8nJ+ZAnznPQME4aSk8skvvTg=)
                          10: OgghXDjyjDqnxRl611PNnUIg8gc.roa (hash: nx8X3I9R1T0jK3t8FirNFx0YohQgACVLB9CPv39jV04=)
                          11: Ov3GDifgE-i6cGCKg9qwgB5MUqE.roa (hash: 89f0cgjBZ2lHNAyH+JzH9w9hR0/NzmZ9fcdY/7jNHRo=)
                          12: Sk9ag2YHmKJcp4CwUZ7utaM8xmA.roa (hash: qh4mq4MdyV9B/rSa6KdwSUIcjfbHQUKuH4MZ7aEP/nU=)
                          13: UwVIBu2jxBDiFJTytgK8RUzy-Cs.roa (hash: ltWrsmWOaH+qQhwZyDVBUFqGoWpky9At3HwYToazYgw=)
                          14: YPUBKOKTPiEmiP59Xe8MEIRR4Pw.roa (hash: PWQfhcGH7jngcQ70GlQ11H+FIx0EvbMhWzfDH/DhN10=)
                          15: ZvZaCcAk1G4g-Goxw_9Mm09U5HQ.roa (hash: 6J65b1+OVj9EmypCFNsDOLXw55bioisW0DUjoT1yQ8c=)
                          16: aYMmtg2F_--bVu8hSyKAFciGf7U.roa (hash: CxDcGIhoZfPolf9XmBJFl0rGdo9uyrgJav1ZUiVhwxo=)
                          17: b4p2jMta42mrYAQW2PDzY71BQxM.roa (hash: vig3XgpsHDlv1ClvCN6nBvia6IqVeDyFq+RR39uBNyk=)
                          18: ek0kAxmgD_bIdypuN8g651x-9uc.roa (hash: 19NypaHsjpb2/HsDFohPxp20XTcbs4VySqlMRe+Mr8o=)
                          19: hvdGPqGZACKBGf93rntej67lv54.roa (hash: Zz0VuDlVsJON1ndmUKaTXSvLDIjjSSZLp4ke0HjSjws=)
                          20: oxu0GmrQ5_piXLI7Mf7_jeVm9eU.roa (hash: GJ6aUk4H8magSU3n7bIt4f5oeneg+QR+DzjJ9j+ifeE=)
                          21: rkni80Or2w2QygXy0RTlNsvlL8E.roa (hash: gMQ3ViXeTKyCOOddnGlJIocGpXYE80FbVoVgkMfQtjU=)
                          22: tw-WBHaNJZuGE7q9LknpcfdIUzA.roa (hash: 4zJGXt4udsl6SmucJzDYHgeK3Njjb1y+erXlqa1Ud6M=)
                          23: vt0ElRQTTQDbtawurQTq5naKklI.roa (hash: sTZaSlh1WeFZN4xDhr5tgce7SkNVNhyZN7/S1+Uq2OY=)
                          24: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl (hash: wXdNkRPHFJ/y5OtTw1//xcNC3QY97v6WTmfYBCIhTjI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:d3:b2:44:ef:81:52:f8:fe:71:16:c4:2c:c9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
        Validity
            Not Before: Apr 17 08:00:40 2026 GMT
            Not After : Apr 18 08:00:40 2026 GMT
        Subject: CN=0d05c3f51a1d488df87e3f0e0a4f10e5676e4308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:1d:ea:83:88:8b:24:4e:58:ef:7e:63:3f:
                    81:52:cf:c5:ce:2f:d0:e3:8c:c2:76:31:c0:53:b4:
                    33:7d:58:d3:62:1a:a7:a7:32:ae:f1:67:49:27:00:
                    b9:33:30:d0:1c:96:f8:c6:b2:99:da:93:27:6b:58:
                    6b:d1:52:ae:34:0c:8b:16:2c:0a:ab:43:35:92:f0:
                    4c:7e:05:1a:d4:da:6d:62:3b:a3:f1:29:5b:67:4c:
                    f3:98:3e:fe:50:90:6b:d6:e6:71:31:1b:20:ce:55:
                    00:f1:4e:a1:7b:25:55:ce:c0:76:37:f9:e1:2d:a9:
                    a3:c8:3b:8b:c1:60:56:f3:6f:bc:8a:47:fd:32:08:
                    44:d2:ed:c2:9c:a5:e0:0e:93:be:d3:c5:ad:08:87:
                    fc:a2:5e:f8:03:9e:09:f3:79:0b:b8:8e:84:3a:0a:
                    75:55:d1:d9:70:23:62:fd:40:12:e5:88:25:5b:ec:
                    72:15:b4:ed:4f:91:cb:a6:10:6b:94:62:ab:57:57:
                    3a:27:96:29:69:e9:0d:37:48:d3:08:e8:68:d2:10:
                    a2:2f:44:28:07:b0:7c:42:8a:5f:e9:30:88:37:4f:
                    b2:80:7f:39:41:ef:d0:2d:f0:27:6e:43:fe:40:89:
                    1d:41:a9:ea:27:33:fe:79:6f:2b:22:1e:0f:62:64:
                    f1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:05:C3:F5:1A:1D:48:8D:F8:7E:3F:0E:0A:4F:10:E5:67:6E:43:08
            X509v3 Authority Key Identifier:
                keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:27:ae:5e:e4:f2:61:dd:0c:f8:4f:b2:f2:54:ba:01:f2:d0:
         c6:85:7d:7c:29:53:6b:50:d3:bd:91:98:ec:3e:cb:ab:57:bb:
         01:db:2d:51:4b:d8:0e:89:d1:cc:a4:45:db:3a:d6:f8:f6:b6:
         4e:5e:e0:a7:ee:14:54:d6:cc:cc:d7:d7:ba:5d:e8:51:a1:91:
         e5:12:57:56:7b:d0:c0:1a:d0:f4:1d:27:06:56:30:31:42:00:
         b4:5a:bc:ac:c7:3f:f3:21:0e:62:9d:95:91:43:14:66:23:cd:
         d7:54:7e:4a:9e:ca:fc:a1:fd:3a:5e:30:40:64:d7:a5:94:00:
         e0:77:b6:53:75:da:45:56:c0:17:6d:b7:a4:a9:34:5c:78:01:
         34:b5:c3:1b:b0:c1:4d:dd:ab:4d:9c:dc:5e:00:3c:1f:92:1d:
         66:f7:9a:42:98:de:10:35:32:e0:82:27:57:26:a4:d0:b5:fb:
         f5:e4:d6:75:d4:95:56:1c:ab:92:9a:31:24:38:37:c4:ce:f1:
         c0:64:bd:14:42:6d:f6:32:45:42:c7:7f:7d:e6:53:64:c9:a8:
         3c:f7:d4:60:90:0a:c1:a0:0c:4c:53:a2:8b:5a:34:aa:f6:7c:
         ce:38:12:55:37:a3:9d:44:a5:1a:83:cc:47:b4:46:be:c5:7f:
         63:7d:e6:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adNOyRO+BUvj+cRbELMkyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjYwNDE3MDgwMDQwWhcNMjYwNDE4MDgwMDQwWjAzMTEwLwYDVQQD
EygwZDA1YzNmNTFhMWQ0ODhkZjg3ZTNmMGUwYTRmMTBlNTY3NmU0MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoowd6oOIiyROWO9+Yz+BUs/Fzi/Q
44zCdjHAU7QzfVjTYhqnpzKu8WdJJwC5MzDQHJb4xrKZ2pMna1hr0VKuNAyLFiwK
q0M1kvBMfgUa1NptYjuj8SlbZ0zzmD7+UJBr1uZxMRsgzlUA8U6heyVVzsB2N/nh
LamjyDuLwWBW82+8ikf9MghE0u3CnKXgDpO+08WtCIf8ol74A54J83kLuI6EOgp1
VdHZcCNi/UAS5YglW+xyFbTtT5HLphBrlGKrV1c6J5YpaekNN0jTCOho0hCiL0Qo
B7B8Qopf6TCIN0+ygH85Qe/QLfAnbkP+QIkdQanqJzP+eW8rIh4PYmTxnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA0Fw/UaHUiN+H4/DgpPEOVnbkMIMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAieuXuTy
Yd0M+E+y8lS6AfLQxoV9fClTa1DTvZGY7D7Lq1e7AdstUUvYDonRzKRF2zrW+Pa2
Tl7gp+4UVNbMzNfXul3oUaGR5RJXVnvQwBrQ9B0nBlYwMUIAtFq8rMc/8yEOYp2V
kUMUZiPN11R+Sp7K/KH9Ol4wQGTXpZQA4He2U3XaRVbAF223pKk0XHgBNLXDG7DB
Td2rTZzcXgA8H5IdZveaQpjeEDUy4IInVyak0LX79eTWddSVVhyrkpoxJDg3xM7x
wGS9FEJt9jJFQsd/feZTZMmoPPfUYJAKwaAMTFOii1o0qvZ8zjgSVTejnUSlGoPM
R7RGvsV/Y33mUw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:30:56 2026 by rpki-client