Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
File:                     w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft (raw, json)
Hash identifier:          BPJ8kNVoWWtjWpQPS6EOCKulMoCJk22bwSJDpLT/Uj8=
Subject key identifier:   40:2B:74:E2:36:C6:52:83:B0:E1:6A:13:9D:10:42:0E:59:04:B1:F1
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Certificate issuer:       /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial:       019D27E072364EBC25417B117A9C57EE84DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 02:01:53 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:53 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:53 +0000
Files and hashes:         1: tKeJVPQprzbHDozpuHwQaIkze-Y.roa (hash: MtFkxMtpBK9xKMV/TWfmwpZjiWuBHp0NnIWMjL58uD4=)
                          2: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl (hash: PORqVEthd+n9rMrMUIfGK9B97/v+b0bXw9v2hbtXgnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:72:36:4e:bc:25:41:7b:11:7a:9c:57:ee:84:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
        Validity
            Not Before: Mar 26 02:01:53 2026 GMT
            Not After : Mar 27 02:01:53 2026 GMT
        Subject: CN=402b74e236c65283b0e16a139d10420e5904b1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:ad:bc:c4:36:90:46:a1:5a:7b:16:e5:01:
                    e5:87:6e:88:af:39:48:59:2d:1d:b8:f2:c5:83:10:
                    81:31:24:17:10:07:b1:ae:3e:a8:90:8f:87:f2:03:
                    43:51:70:cb:0d:47:7c:be:e2:98:d1:65:f5:05:a6:
                    62:c6:dc:20:33:a2:9c:3e:04:94:c9:f9:75:eb:98:
                    0b:4d:da:17:78:4c:ae:85:3a:8e:49:e0:ac:5b:63:
                    a6:5f:58:e0:2c:6c:c4:53:35:8d:c1:e3:bc:4a:71:
                    a9:00:ea:70:18:af:3d:2d:64:ad:cf:20:9e:af:69:
                    ce:5e:f8:8b:5f:4e:d5:c3:aa:fe:e9:f0:68:c6:bf:
                    cb:10:c8:38:4c:13:61:a8:06:4f:36:aa:8b:53:26:
                    09:fb:a7:57:c4:38:0d:70:08:bd:89:98:6f:fc:bf:
                    bb:3b:9a:0c:85:98:01:9c:dc:d7:6c:c9:dd:e4:08:
                    55:69:56:66:86:b5:72:73:25:23:c6:2f:c2:0b:6e:
                    d8:90:a4:54:55:d9:f0:7c:b7:54:d1:ee:68:85:07:
                    f4:a5:aa:4f:90:66:9c:c2:03:24:4b:03:89:97:c8:
                    47:8a:3c:55:4a:4e:cd:4f:54:65:70:24:8c:a0:9d:
                    bc:d8:d5:0a:8b:e9:bd:18:9c:60:37:84:53:ad:e5:
                    6e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2B:74:E2:36:C6:52:83:B0:E1:6A:13:9D:10:42:0E:59:04:B1:F1
            X509v3 Authority Key Identifier:
                keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:71:96:0d:73:f9:d0:0c:77:17:19:8c:2d:c8:ca:23:3c:25:
         61:96:87:62:dc:cc:8e:1f:e1:6f:b8:62:ee:19:a2:70:f6:28:
         87:69:12:eb:24:85:06:2a:09:0e:cd:1d:79:00:cc:44:eb:fe:
         55:d2:96:6b:d6:3a:3f:94:97:94:b6:b1:73:59:d5:29:d2:56:
         58:a9:0f:ef:71:f9:1e:b9:73:ce:47:55:ad:c3:55:f0:07:92:
         b2:70:ee:37:5b:b0:21:1d:54:15:9c:05:44:89:b3:fa:d4:0c:
         19:9e:54:2c:d0:b8:94:f1:ba:3f:0e:57:83:52:67:88:df:e9:
         83:5f:6e:2d:1d:2b:b3:b1:77:e6:ca:0f:b7:a3:03:6f:95:93:
         0d:d5:5d:1e:f0:b5:76:e4:3c:8d:12:bd:45:6d:6e:2a:6e:0a:
         e6:dd:2e:9e:e7:9d:08:3a:ae:89:2c:2b:f1:e6:49:ff:e2:bb:
         63:39:26:22:5a:44:44:b5:07:75:a7:80:75:be:4d:2e:39:5e:
         40:12:85:8d:70:69:dd:20:b0:dc:3b:6d:94:a1:70:bb:86:44:
         af:e7:d4:e8:11:8e:a0:83:3f:5b:66:15:37:59:0e:94:51:b9:
         e0:2b:f4:7f:cd:95:e5:16:f6:42:05:68:5d:36:c3:19:b8:fe:
         60:60:fb:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4HI2TrwlQXsRepxX7oTdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODUyMDFhMzNiNTI3YzY0NGFhZDVhZWNkMzc4MmM2YThj
MmY1MWYwHhcNMjYwMzI2MDIwMTUzWhcNMjYwMzI3MDIwMTUzWjAzMTEwLwYDVQQD
Eyg0MDJiNzRlMjM2YzY1MjgzYjBlMTZhMTM5ZDEwNDIwZTU5MDRiMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUKtvMQ2kEahWnsW5QHlh26IrzlI
WS0duPLFgxCBMSQXEAexrj6okI+H8gNDUXDLDUd8vuKY0WX1BaZixtwgM6KcPgSU
yfl165gLTdoXeEyuhTqOSeCsW2OmX1jgLGzEUzWNweO8SnGpAOpwGK89LWStzyCe
r2nOXviLX07Vw6r+6fBoxr/LEMg4TBNhqAZPNqqLUyYJ+6dXxDgNcAi9iZhv/L+7
O5oMhZgBnNzXbMnd5AhVaVZmhrVycyUjxi/CC27YkKRUVdnwfLdU0e5ohQf0papP
kGacwgMkSwOJl8hHijxVSk7NT1RlcCSMoJ282NUKi+m9GJxgN4RTreVuiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEArdOI2xlKDsOFqE50QQg5ZBLHxMB8GA1UdIwQY
MBaAFMOFIBoztSfGRKrVrs03gsaowvUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYt
ODU3NTgwZmM2MTY3LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYtODU3NTgwZmM2MTY3
LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3GWDXP5
0Ax3FxmMLcjKIzwlYZaHYtzMjh/hb7hi7hmicPYoh2kS6ySFBioJDs0deQDMROv+
VdKWa9Y6P5SXlLaxc1nVKdJWWKkP73H5HrlzzkdVrcNV8AeSsnDuN1uwIR1UFZwF
RImz+tQMGZ5ULNC4lPG6Pw5Xg1JniN/pg19uLR0rs7F35soPt6MDb5WTDdVdHvC1
duQ8jRK9RW1uKm4K5t0unuedCDquiSwr8eZJ/+K7YzkmIlpERLUHdaeAdb5NLjle
QBKFjXBp3SCw3DttlKFwu4ZEr+fU6BGOoIM/W2YVN1kOlFG54Cv0f82V5Rb2QgVo
XTbDGbj+YGD7kw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:57:14 2026 by rpki-client