Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File:                     wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier:          ISNIKnPbe9eRiYhHo+PfWQpHmGX4mbIjIcvHw/HLWKU=
Subject key identifier:   62:A8:E4:0C:F1:87:E8:E4:FC:D2:DB:C3:E4:0E:01:E5:B9:57:16:B2
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer:       /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial:       019D270485F2A0EFC3A52C04A7A9CE0B2441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number:          141E
Signing time:             Wed 25 Mar 2026 22:01:40 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:40 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:40 +0000
Files and hashes:         1: GWCQDoCj1EnoGr4G4aQGE_yERiw.roa (hash: jbmBzxR3cM82xnuqQI0lxiYS+XoV+IrgikeHq5X9ZmM=)
                          2: Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa (hash: Bnj3IDrJ882iRsnMbr53VXkROwmtnT/7J8NLZ7LP/VA=)
                          3: fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa (hash: 9DTO9B8YoPB/uUt1Im78LbNqxaAWyEGXlRRw0zOgX3E=)
                          4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: 4KQMz3hzIE2VE6EgcZcZwdpTdIohD1Cvdfi+LkmN1vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:85:f2:a0:ef:c3:a5:2c:04:a7:a9:ce:0b:24:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
        Validity
            Not Before: Mar 25 22:01:40 2026 GMT
            Not After : Mar 26 22:01:40 2026 GMT
        Subject: CN=62a8e40cf187e8e4fcd2dbc3e40e01e5b95716b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:e3:ca:c8:07:6d:bd:a3:5a:af:99:fd:04:
                    02:cb:e6:0e:72:c5:9e:10:21:9a:83:4c:c4:8e:67:
                    98:2d:73:a5:ff:32:67:f4:63:9e:d1:17:4b:d1:c5:
                    7c:f2:0c:0b:68:8b:8a:16:a3:77:93:e8:b9:d9:3c:
                    25:c2:0c:f1:24:23:3d:30:5a:8f:2c:9b:00:b2:08:
                    f6:7b:25:4a:70:68:a7:e0:10:da:1a:be:7a:89:33:
                    4b:50:f3:4f:91:aa:55:6f:8a:08:32:00:27:3e:f6:
                    e4:89:b9:92:37:a9:12:c8:97:81:26:d6:31:c5:5b:
                    1f:20:4b:5d:19:bf:92:2f:af:ac:f5:b6:e3:6c:2c:
                    87:fb:98:db:67:3f:17:63:fa:fd:5a:5e:c4:03:ef:
                    9c:a0:fd:32:bb:80:c1:5c:2e:d9:16:e2:a2:1c:b0:
                    89:bd:75:1a:ed:66:d6:84:41:e8:29:9e:c6:54:70:
                    e5:98:60:42:28:a8:66:7e:dc:4e:5f:c5:cd:00:38:
                    9d:4f:6b:29:07:6a:99:89:1f:5c:80:42:e9:74:ec:
                    0e:e6:dc:75:b8:70:bb:01:1b:f7:a4:36:1a:44:54:
                    28:17:3a:a9:0a:a6:6c:58:e2:18:43:34:9a:ce:77:
                    4d:02:21:b3:95:21:05:f1:88:1e:ef:3e:e7:a9:f6:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A8:E4:0C:F1:87:E8:E4:FC:D2:DB:C3:E4:0E:01:E5:B9:57:16:B2
            X509v3 Authority Key Identifier:
                keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:ea:8e:d7:e3:6c:8a:2c:d5:79:5e:6b:70:98:17:84:80:
         66:68:40:36:8f:48:22:9a:a1:91:52:c1:8b:0c:e9:af:0c:d6:
         43:e1:4a:fd:49:67:25:0b:f6:2e:81:1b:a7:25:7c:17:33:58:
         36:29:b6:ca:cf:b9:6a:b0:f0:c1:f0:d4:71:38:c8:42:81:01:
         76:1b:c2:69:5a:68:46:f1:fa:19:c8:b2:1e:b0:25:ef:63:0f:
         f6:63:c4:ed:82:80:ef:8e:6c:a2:3c:cc:04:ce:c4:bc:4e:fa:
         38:18:19:30:69:79:c3:1c:ba:91:70:ad:19:23:06:bc:8c:2c:
         74:e8:a9:3c:f3:7d:48:4f:c1:9f:91:6a:f8:4e:80:f2:1f:1d:
         83:67:70:cd:28:1d:f9:82:95:42:9b:00:18:d3:91:20:cb:ec:
         ab:23:8d:09:7d:69:91:11:fb:95:05:4a:d2:f7:1c:30:3f:26:
         b1:3e:b0:da:c4:c6:5c:20:cf:18:e0:7b:32:41:55:06:71:5f:
         4a:ee:76:af:b9:f6:0b:c3:1a:b2:46:00:29:32:c4:cf:2d:f9:
         14:1e:b3:d2:d3:81:9c:be:6f:3e:cc:f9:38:e0:16:db:c8:6e:
         50:42:0b:ca:90:b0:0a:1d:db:00:c8:6d:7b:d6:81:14:5c:d1:
         fa:1d:cc:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBIXyoO/DpSwEp6nOCyRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwOWZjOGEwNjdmYTZkMjQ3NmJkY2UyNGFmZmZhZDE3MTMx
ZDllODYwHhcNMjYwMzI1MjIwMTQwWhcNMjYwMzI2MjIwMTQwWjAzMTEwLwYDVQQD
Eyg2MmE4ZTQwY2YxODdlOGU0ZmNkMmRiYzNlNDBlMDFlNWI5NTcxNmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJbjysgHbb2jWq+Z/QQCy+YOcsWe
ECGag0zEjmeYLXOl/zJn9GOe0RdL0cV88gwLaIuKFqN3k+i52TwlwgzxJCM9MFqP
LJsAsgj2eyVKcGin4BDaGr56iTNLUPNPkapVb4oIMgAnPvbkibmSN6kSyJeBJtYx
xVsfIEtdGb+SL6+s9bbjbCyH+5jbZz8XY/r9Wl7EA++coP0yu4DBXC7ZFuKiHLCJ
vXUa7WbWhEHoKZ7GVHDlmGBCKKhmftxOX8XNADidT2spB2qZiR9cgELpdOwO5tx1
uHC7ARv3pDYaRFQoFzqpCqZsWOIYQzSazndNAiGzlSEF8Yge7z7nqfb+2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKo5Azxh+jk/NLbw+QOAeW5VxayMB8GA1UdIwQY
MBaAFMCfyKBn+m0kdr3OJK//rRcTHZ6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYt
OGU5MjRmZmJlNTg0LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9hNzMzYmMtNjhmOC00OTlmLTg1MGYtOGU5MjRmZmJlNTg0
LzEvd0pfSW9HZjZiU1IydmM0a3JfLXRGeE1kbm9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6/qjtfj
bIos1Xlea3CYF4SAZmhANo9IIpqhkVLBiwzprwzWQ+FK/UlnJQv2LoEbpyV8FzNY
Nim2ys+5arDwwfDUcTjIQoEBdhvCaVpoRvH6GciyHrAl72MP9mPE7YKA745sojzM
BM7EvE76OBgZMGl5wxy6kXCtGSMGvIwsdOipPPN9SE/Bn5Fq+E6A8h8dg2dwzSgd
+YKVQpsAGNORIMvsqyONCX1pkRH7lQVK0vccMD8msT6w2sTGXCDPGOB7MkFVBnFf
Su52r7n2C8MaskYAKTLEzy35FB6z0tOBnL5vPsz5OOAW28huUEILypCwCh3bAMht
e9aBFFzR+h3MIQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:57:32 2026 by rpki-client