Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File:                     WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier:          Uh7pHZPiX8H1m7yLR0U1HhhnbwG/scMHYfKDTL/Z8zw=
Subject key identifier:   8B:EA:EA:2A:5D:F2:D8:66:F5:0F:13:51:0B:10:84:D6:84:46:40:20
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer:       /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial:       019D98189CBF9D47AFF95B78F0CAA404CE5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number:          18D5
Signing time:             Thu 16 Apr 2026 21:00:42 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:42 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:42 +0000
Files and hashes:         1: Im_-Uz2tqMoLUO0K7lAiChMaerA.asa (hash: QEDvScemsSsXfJycofLB6Jaj+H/Hh6UPm9fvBoayQFU=)
                          2: NrgQ_5wI2_4HvegQwjwM_Zc8xdM.roa (hash: OvI93tgCnxoNbRAqaNHTlYSufUon+ySjKVV/RPhyqkQ=)
                          3: WAFcyNofG780PiarII34uyb9U64.crl (hash: wqzL66Ad/JrKe3zWZnW0Ok3nQTBrcTNQvrGIps7aBDQ=)
                          4: Wr5va4tlLM7OArIc13NwZVzUZSM.asa (hash: ZnrWop8OkpeoCvz/MYLeKchWVnb3K25hWmby4HEumAM=)
                          5: pqktpCxLGm0ef4jw2Ni2l6y-LvY.roa (hash: qzKRc0VCQWppc/oSUuGJGwq+ZahDXUJUBntxA72SvqY=)
                          6: sWwYUGN-qX4W4KsEuJ-NzSM85K4.roa (hash: 7Ca2j50Ko1N7zY6m8PRjHntwoi86jOPRDQ4B+sSksSw=)
                          7: z0dUAUAYs2FDj8KE93GCEX_1moY.asa (hash: jkyk8H05lxWxlsGkVRiKoTC3QiMwT13kS4SkDxeCCDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:9c:bf:9d:47:af:f9:5b:78:f0:ca:a4:04:ce:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
        Validity
            Not Before: Apr 16 21:00:42 2026 GMT
            Not After : Apr 17 21:00:42 2026 GMT
        Subject: CN=8beaea2a5df2d866f50f13510b1084d684464020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:5c:4a:9e:24:60:31:3c:31:2d:99:83:13:
                    0d:4b:20:51:8a:7d:0f:e8:e9:f2:e4:13:66:a5:0e:
                    f8:5d:60:a0:85:41:5c:0f:56:2e:02:69:0b:47:d1:
                    30:f9:e4:73:14:ab:35:e2:5e:5d:cb:e8:28:67:8a:
                    45:20:e1:4a:d7:00:31:1f:d7:cb:21:bb:c9:bf:0b:
                    7c:53:e9:44:51:3f:f4:31:26:c4:c3:51:5b:c0:58:
                    9a:94:b2:dc:4c:16:18:ac:d1:ec:3c:d0:ed:63:e5:
                    20:1f:24:52:26:53:6c:26:b3:86:c3:2a:08:e3:11:
                    bf:22:42:dd:46:92:a3:c1:0d:d6:87:2a:e4:85:28:
                    77:80:69:21:13:5c:ee:7f:f7:1b:48:0e:46:bd:db:
                    29:25:78:23:af:c8:5a:1e:3a:b8:a7:e9:b5:2f:85:
                    ec:1b:ed:61:8b:7f:d5:aa:f6:d5:ec:d0:fe:f4:f0:
                    81:e8:e2:47:3f:69:37:e7:97:57:b6:00:f5:38:3f:
                    8c:0e:fd:1a:fe:de:d2:34:0c:53:e4:e0:af:a8:44:
                    0c:5b:84:6f:ed:46:a5:be:cf:4f:0f:c4:ef:dc:ba:
                    c8:63:e4:c8:81:16:ee:15:45:86:1d:a8:9b:62:6a:
                    0f:f9:5e:46:c8:5b:2f:48:8a:db:60:56:aa:34:c2:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EA:EA:2A:5D:F2:D8:66:F5:0F:13:51:0B:10:84:D6:84:46:40:20
            X509v3 Authority Key Identifier:
                keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d7:a7:e4:35:3a:74:cc:7d:b1:7c:e1:ac:c0:1a:a9:3e:ad:
         93:3c:91:89:5a:17:a1:ff:1c:ff:85:9a:03:fa:ff:62:b8:0e:
         c5:eb:e8:06:69:1b:07:4c:ba:7b:c9:3a:ce:69:69:3f:49:26:
         29:f2:cf:93:a0:94:1c:4d:db:d9:00:7d:fa:06:26:4f:5d:33:
         96:bd:69:19:e7:e0:97:d4:30:b8:15:5d:d4:27:38:37:93:1a:
         08:2f:4d:26:77:40:75:fc:dc:b0:16:11:82:04:62:5f:8b:93:
         e2:8b:7f:e3:f7:e5:73:7c:5f:fa:9a:b2:ad:85:22:43:17:7a:
         79:9c:d7:90:1f:15:65:3e:e4:e2:61:f2:ae:7c:31:ea:34:3a:
         0a:10:3d:2f:1c:e4:ff:60:08:e5:b4:a1:98:65:e0:cb:cb:9d:
         04:3e:09:b6:a7:dc:fa:f6:0e:a8:f0:93:03:fa:4e:75:01:55:
         ee:f9:ec:25:92:f9:7a:0e:38:4a:93:f2:e6:c7:ed:4c:15:cb:
         ac:d7:81:aa:d5:b3:0c:fb:6b:7e:c1:80:88:77:c5:5b:23:0b:
         ab:f6:1a:ee:1b:93:61:d6:9e:50:a2:68:91:39:a2:d9:3f:82:
         31:e6:92:e4:80:96:93:25:af:ea:c5:66:09:bc:1d:c8:d1:e0:
         32:28:69:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGJy/nUev+Vt48MqkBM5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm
ZDUzYWUwHhcNMjYwNDE2MjEwMDQyWhcNMjYwNDE3MjEwMDQyWjAzMTEwLwYDVQQD
Eyg4YmVhZWEyYTVkZjJkODY2ZjUwZjEzNTEwYjEwODRkNjg0NDY0MDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydNcSp4kYDE8MS2ZgxMNSyBRin0P
6Ony5BNmpQ74XWCghUFcD1YuAmkLR9Ew+eRzFKs14l5dy+goZ4pFIOFK1wAxH9fL
IbvJvwt8U+lEUT/0MSbEw1FbwFialLLcTBYYrNHsPNDtY+UgHyRSJlNsJrOGwyoI
4xG/IkLdRpKjwQ3WhyrkhSh3gGkhE1zuf/cbSA5GvdspJXgjr8haHjq4p+m1L4Xs
G+1hi3/VqvbV7ND+9PCB6OJHP2k355dXtgD1OD+MDv0a/t7SNAxT5OCvqEQMW4Rv
7Ualvs9PD8Tv3LrIY+TIgRbuFUWGHaibYmoP+V5GyFsvSIrbYFaqNMIvqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvq6ipd8thm9Q8TUQsQhNaERkAgMB8GA1UdIwQY
MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt
OGVlMjFiNzRkZDU2LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2
LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9en5DU6
dMx9sXzhrMAaqT6tkzyRiVoXof8c/4WaA/r/YrgOxevoBmkbB0y6e8k6zmlpP0km
KfLPk6CUHE3b2QB9+gYmT10zlr1pGefgl9QwuBVd1Cc4N5MaCC9NJndAdfzcsBYR
ggRiX4uT4ot/4/flc3xf+pqyrYUiQxd6eZzXkB8VZT7k4mHyrnwx6jQ6ChA9Lxzk
/2AI5bShmGXgy8udBD4Jtqfc+vYOqPCTA/pOdQFV7vnsJZL5eg44SpPy5sftTBXL
rNeBqtWzDPtrfsGAiHfFWyMLq/Ya7huTYdaeUKJokTmi2T+CMeaS5ICWkyWv6sVm
CbwdyNHgMihpAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:15:57 2026 by rpki-client