Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
File:                     WIOU45ENlKe_Cnig8wLQKumQcnM.mft (raw, json)
Hash identifier:          nEyblKUf7VC9/zwxQ6yg4lDl1Zj64BuOrM1ZnjSiHIg=
Subject key identifier:   01:8A:7F:8F:11:60:4C:AC:0B:C4:E3:17:24:2D:31:44:A6:8A:3B:D2
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Certificate issuer:       /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial:       019D277226A16A9B85F6017F9DA7F3C2D3BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 00:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:25 +0000
Files and hashes:         1: 8O4Y6gqi_V-4_Dp70sUoajALQUc.roa (hash: w9UZFYJ/tT99RCEpaAiyOJPfFVOSK8U3STDxczdaYFs=)
                          2: WIOU45ENlKe_Cnig8wLQKumQcnM.crl (hash: a9RCssCV9tgd3vD7mIw/miaBEteafO+eiyZK9bmbbCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:26:a1:6a:9b:85:f6:01:7f:9d:a7:f3:c2:d3:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
        Validity
            Not Before: Mar 26 00:01:25 2026 GMT
            Not After : Mar 27 00:01:25 2026 GMT
        Subject: CN=018a7f8f11604cac0bc4e317242d3144a68a3bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:6f:b7:0f:7d:79:eb:8a:50:9c:3a:43:78:a1:
                    4e:38:b0:b4:7c:a1:e0:df:c8:fb:5e:75:38:08:26:
                    76:13:fd:49:b7:20:bd:92:e6:06:78:95:79:32:b4:
                    96:64:c7:90:e1:66:50:b8:eb:33:2a:d8:59:a7:14:
                    1a:96:f9:55:03:33:0c:80:e6:f7:e8:1b:eb:9a:4c:
                    ea:5e:de:d2:b2:cc:93:de:0f:0a:0e:05:71:1d:d7:
                    bd:c3:be:c5:c6:fe:cd:ca:3a:20:8c:8c:84:17:77:
                    15:2f:cc:a8:4f:58:08:00:18:13:43:eb:15:34:9d:
                    6f:c9:a4:3e:72:10:9f:4d:c1:4c:49:e2:a1:0c:71:
                    b4:7e:f5:96:c2:c8:ff:d3:6e:34:64:91:48:5a:56:
                    41:f1:89:ed:0d:70:7f:3a:50:de:39:92:c5:38:0c:
                    17:99:a3:ff:2c:5a:1e:1c:b5:e2:c9:de:1d:ef:31:
                    d7:b0:53:6e:3b:89:19:b2:1f:ec:a6:2f:f6:11:59:
                    19:9b:e2:1f:86:64:b0:39:3c:45:16:06:6f:61:b2:
                    95:9f:bb:bf:d4:62:8e:93:95:be:4f:51:19:66:5e:
                    b2:3f:1a:f5:e2:b1:e6:d4:17:eb:f7:de:9c:95:00:
                    62:59:da:8e:d4:bc:9a:fc:9c:3c:79:dd:ba:df:70:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8A:7F:8F:11:60:4C:AC:0B:C4:E3:17:24:2D:31:44:A6:8A:3B:D2
            X509v3 Authority Key Identifier:
                keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ba:28:cc:3d:cb:01:04:93:2e:1d:6f:1e:6e:b5:58:eb:07:
         c2:64:05:6b:87:61:6d:15:f3:7b:74:c5:f5:3a:b6:ba:9c:bf:
         cf:0c:b2:d4:a0:f0:94:e4:f7:c1:96:f7:9e:cd:2a:b9:25:3b:
         93:e3:2c:9b:7f:87:ee:cf:61:06:4b:c1:d5:33:2d:aa:33:ea:
         8c:38:75:a7:69:c1:e5:d1:4d:9c:41:65:93:2f:fe:3b:37:c3:
         07:d6:3e:5e:20:77:53:29:ee:b0:b0:be:8d:2b:ce:c5:a9:0f:
         6a:57:c8:3a:30:37:3f:f3:09:d6:73:7e:af:85:40:08:80:c7:
         4a:b0:59:f1:46:49:c1:a2:40:c2:89:4b:92:10:8b:4f:b7:96:
         00:61:cf:26:a5:89:a0:70:1a:fe:31:ef:80:18:64:32:cb:9a:
         07:a6:b6:e2:63:c2:b0:a1:9e:d2:e9:b6:b6:c6:d7:f6:00:79:
         f6:49:65:0e:6b:c4:59:b9:cc:c3:f7:01:82:43:58:70:6f:8a:
         02:77:b6:5c:e4:ab:cc:f9:87:2f:00:80:6b:31:ff:b9:cd:bb:
         4e:14:b9:b3:7c:78:46:38:bd:34:8a:04:98:9f:d0:f7:4b:28:
         b5:00:7b:51:c2:46:f1:55:b3:cb:2f:54:b4:5f:05:48:ca:20:
         ee:12:c3:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nciahapuF9gF/nafzwtO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODM5NGUzOTEwZDk0YTdiZjBhNzhhMGYzMDJkMDJhZTk5
MDcyNzMwHhcNMjYwMzI2MDAwMTI1WhcNMjYwMzI3MDAwMTI1WjAzMTEwLwYDVQQD
EygwMThhN2Y4ZjExNjA0Y2FjMGJjNGUzMTcyNDJkMzE0NGE2OGEzYmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG+3D31564pQnDpDeKFOOLC0fKHg
38j7XnU4CCZ2E/1JtyC9kuYGeJV5MrSWZMeQ4WZQuOszKthZpxQalvlVAzMMgOb3
6BvrmkzqXt7SssyT3g8KDgVxHde9w77Fxv7NyjogjIyEF3cVL8yoT1gIABgTQ+sV
NJ1vyaQ+chCfTcFMSeKhDHG0fvWWwsj/0240ZJFIWlZB8YntDXB/OlDeOZLFOAwX
maP/LFoeHLXiyd4d7zHXsFNuO4kZsh/spi/2EVkZm+IfhmSwOTxFFgZvYbKVn7u/
1GKOk5W+T1EZZl6yPxr14rHm1Bfr996clQBiWdqO1Lya/Jw8ed2633AEHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGKf48RYEysC8TjFyQtMUSmijvSMB8GA1UdIwQY
MBaAFFiDlOORDZSnvwp4oPMC0CrpkHJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83OGIxYTctOWZiZC00ZjZmLThlYjQt
N2I2MjJkZGY4NGY0LzEvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83OGIxYTctOWZiZC00ZjZmLThlYjQtN2I2MjJkZGY4NGY0
LzEvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7oozD3L
AQSTLh1vHm61WOsHwmQFa4dhbRXze3TF9Tq2upy/zwyy1KDwlOT3wZb3ns0quSU7
k+Msm3+H7s9hBkvB1TMtqjPqjDh1p2nB5dFNnEFlky/+OzfDB9Y+XiB3UynusLC+
jSvOxakPalfIOjA3P/MJ1nN+r4VACIDHSrBZ8UZJwaJAwolLkhCLT7eWAGHPJqWJ
oHAa/jHvgBhkMsuaB6a24mPCsKGe0um2tsbX9gB59kllDmvEWbnMw/cBgkNYcG+K
Ane2XOSrzPmHLwCAazH/uc27ThS5s3x4Rji9NIoEmJ/Q90sotQB7UcJG8VWzyy9U
tF8FSMog7hLD1g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:25 2026 by rpki-client