Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
File:                     w-iL5cCvqz0dvhLceTEMRJnhJ60.mft (raw, json)
Hash identifier:          +lTbsuFX5M3zTItj5tNtbB2f2hmvz8cE+x+kit0f3Hw=
Subject key identifier:   BA:47:DD:14:13:D6:70:BD:ED:62:AC:2B:6E:90:9A:95:CE:4B:9B:A8
Authority key identifier: C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD
Certificate issuer:       /CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
Certificate serial:       019E1FED27C272CB02EA372FF4633565A924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
Manifest number:          048C
Signing time:             Wed 13 May 2026 06:01:36 +0000
Manifest this update:     Wed 13 May 2026 06:01:36 +0000
Manifest next update:     Thu 14 May 2026 06:01:36 +0000
Files and hashes:         1: S3c1kJbk90AG-TvEYnQ3FInajlA.roa (hash: qf58vrU6QtyjdTNpb5V9EiRabiFulA8d1+PfNRFARrI=)
                          2: w-iL5cCvqz0dvhLceTEMRJnhJ60.crl (hash: 0uYIpMPtSvsaWaslkUQ5IX36Rrsgx4ZROveLz+xxTZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:27:c2:72:cb:02:ea:37:2f:f4:63:35:65:a9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e88be5c0afab3d1dbe12dc79310c4499e127ad
        Validity
            Not Before: May 13 06:01:36 2026 GMT
            Not After : May 14 06:01:36 2026 GMT
        Subject: CN=ba47dd1413d670bded62ac2b6e909a95ce4b9ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0f:13:99:2e:7e:0a:0f:dd:79:c5:b6:94:ce:
                    e2:47:99:8c:89:33:28:ad:f4:23:15:67:2c:c1:8b:
                    f8:0e:ef:a9:84:10:04:a4:97:ee:28:1c:51:30:67:
                    2a:34:2c:72:45:b3:0f:f5:52:54:ad:77:fa:ba:f6:
                    bb:d2:e2:dc:01:8f:65:43:f4:ae:d0:15:08:ec:71:
                    c8:b6:8b:2b:5b:57:2c:a9:13:14:b8:99:76:54:cd:
                    88:ee:31:c0:19:f7:fa:03:59:b2:e0:8c:99:2d:7e:
                    df:9b:5e:07:60:5e:d8:de:6e:5e:ac:1f:c6:92:04:
                    f2:d1:1b:8f:13:2c:31:9b:46:69:3d:6e:db:e7:35:
                    fb:f3:93:fd:ae:6a:ef:7a:ed:d3:e3:85:c3:3d:37:
                    bc:ba:ab:bf:56:b7:b1:f8:32:ea:89:43:95:fb:7f:
                    09:8d:b6:37:85:1c:03:f5:d8:cb:53:b5:67:ae:69:
                    73:8f:52:50:c2:f3:1d:86:f1:49:99:31:25:2c:58:
                    3a:88:21:50:e9:6a:6a:f4:2a:ce:b6:c9:40:2a:65:
                    e3:72:5c:26:be:7d:48:25:43:36:0f:14:6d:ad:d6:
                    11:b4:80:e7:db:80:5a:79:35:77:88:8a:a2:b4:82:
                    64:40:20:27:77:11:42:3a:c7:fe:c5:a9:d2:0f:06:
                    d9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:47:DD:14:13:D6:70:BD:ED:62:AC:2B:6E:90:9A:95:CE:4B:9B:A8
            X509v3 Authority Key Identifier:
                keyid:C3:E8:8B:E5:C0:AF:AB:3D:1D:BE:12:DC:79:31:0C:44:99:E1:27:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-iL5cCvqz0dvhLceTEMRJnhJ60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aa4497-0952-4618-9372-f42cd46d04ec/1/w-iL5cCvqz0dvhLceTEMRJnhJ60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:7e:c2:bf:76:1a:a1:5d:18:86:39:04:71:6e:14:88:18:c5:
         68:87:67:6d:a4:e0:15:8e:1b:1d:03:7d:9c:87:1d:b3:e0:a5:
         03:01:6d:81:e4:31:60:1e:65:ae:3e:d1:67:b6:25:9b:a0:d7:
         cc:9a:be:19:c8:d8:05:40:c4:64:c3:e1:6a:db:28:4a:9b:b0:
         f8:8f:63:04:fd:fd:89:f0:7d:c3:12:d5:29:1b:09:03:7f:55:
         8e:c2:85:e3:30:dd:31:cd:90:2f:62:ca:1c:0b:44:71:14:7c:
         e4:b3:9c:9b:2f:36:bb:80:75:c9:dd:d9:e9:01:5d:d5:29:0c:
         5a:cf:27:be:52:25:c7:09:73:bf:be:29:67:c6:da:aa:35:cd:
         49:b7:a5:b8:1c:c1:e7:68:25:aa:20:a5:2a:07:38:3e:96:4e:
         bb:a4:dd:87:67:e1:ba:12:b2:ee:e2:71:77:ed:7e:02:19:62:
         90:4e:0a:ac:7a:08:bf:57:09:01:2d:b8:84:81:fb:cd:82:ab:
         4f:8a:84:b0:34:94:47:02:9f:8a:df:60:24:41:e6:aa:d3:45:
         ea:ec:7f:1f:c9:3d:c5:a6:85:e2:5d:a5:f0:04:f9:6c:07:83:
         83:3b:05:58:1f:f0:92:33:94:d9:91:20:bc:09:57:06:1f:4e:
         8c:57:7b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:05:12 2026 by rpki-client