Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File:                     wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier:          1N2B4RgcG+PVxq/UbUnGIOm040J+l5X6Z+X/RpZycog=
Subject key identifier:   50:2B:30:7E:66:23:AB:45:D6:7D:01:8F:10:71:31:31:E7:55:AF:CC
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       019E1ED9E94BC27F0BCA5A1695750D069C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number:          02A1
Signing time:             Wed 13 May 2026 01:00:57 +0000
Manifest this update:     Wed 13 May 2026 01:00:57 +0000
Manifest next update:     Thu 14 May 2026 01:00:57 +0000
Files and hashes:         1: opV5K4TDIZwg2_Ke6wz0k_YRsno.roa (hash: L3PdsoBBCqtcSMykMoxo+EhISOF23hs0Fdp4ciolx2U=)
                          2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: GnNH53NgYNJUdvgX5FLT91Ftq8Z0rAZo7PvfUgbfdMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:e9:4b:c2:7f:0b:ca:5a:16:95:75:0d:06:9c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: May 13 01:00:57 2026 GMT
            Not After : May 14 01:00:57 2026 GMT
        Subject: CN=502b307e6623ab45d67d018f10713131e755afcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:bb:b6:f5:d2:50:fc:a1:82:36:ca:d0:d6:20:
                    5f:75:62:1c:71:da:78:a2:41:53:ec:91:fa:1e:90:
                    e9:81:af:86:2e:15:13:66:6b:2f:e8:23:92:08:bc:
                    9c:7c:15:d4:89:16:dd:40:34:a3:3d:67:5d:08:7b:
                    7e:f1:d1:f0:17:72:63:37:30:c3:ba:b7:ae:84:8d:
                    14:46:eb:c7:61:dd:0b:ae:7c:23:57:5f:e5:2e:b2:
                    d3:bd:48:4a:f2:02:c8:b9:58:34:76:fc:8b:5f:4d:
                    21:8c:96:37:66:8b:d9:f1:75:80:b0:9e:e7:13:d7:
                    cc:2e:0c:45:1d:4d:4e:2c:5b:85:e7:5e:8b:a0:09:
                    e3:32:fc:98:ed:c9:37:8f:39:be:e7:7a:bc:90:6d:
                    e4:d5:35:2f:53:c5:b8:7e:ca:e1:92:72:f9:3d:fb:
                    62:6e:65:2a:90:d7:2d:be:fd:1c:92:f2:a3:ef:30:
                    14:3b:6f:8a:4e:be:6e:21:37:22:3c:c3:27:12:41:
                    6b:e9:3c:af:c8:d0:71:ec:66:3a:86:b8:de:25:ab:
                    a1:e5:7a:c5:c1:bc:c0:5b:d3:1c:e3:6b:e1:a3:1b:
                    a8:a0:8f:21:5d:7d:57:cb:bd:32:77:fa:9d:7c:e0:
                    40:35:72:c2:6f:b7:eb:3c:02:17:6c:c2:55:d4:e0:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:2B:30:7E:66:23:AB:45:D6:7D:01:8F:10:71:31:31:E7:55:AF:CC
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:03:ae:41:01:87:13:0f:70:1b:3a:ea:94:a9:28:b1:1e:
         d2:18:d5:3b:39:83:68:9a:68:95:3a:84:dc:92:a0:65:bd:8a:
         f1:4e:8b:5f:2d:70:80:0f:71:ea:56:a1:ae:e9:bd:93:85:bf:
         62:88:e8:00:15:41:e4:34:d1:f7:4e:63:aa:da:4c:f4:eb:e7:
         ef:89:40:4c:dc:3e:b3:93:03:fc:bc:76:9c:0c:dc:c7:9c:26:
         57:1e:b1:ff:ae:a4:85:df:bd:f3:ef:d7:8f:b4:28:61:0a:81:
         32:1c:91:ab:f6:59:e1:48:82:af:9f:93:63:91:9d:16:0d:db:
         41:f8:60:15:63:17:ff:9a:e9:33:7d:fe:7d:04:62:71:e7:b3:
         46:96:65:9c:14:e6:88:e0:ea:4d:b1:ac:9d:88:68:3f:d7:95:
         11:86:e3:13:7c:9f:2f:b3:81:f4:be:b7:22:8b:02:6b:be:77:
         ae:92:98:65:69:a1:05:89:19:2f:a3:20:c1:e7:3d:2e:2a:18:
         21:58:17:a9:3a:fb:ad:db:ef:e5:84:da:07:cd:36:2d:05:0f:
         f8:e8:d0:16:30:9d:a8:12:1f:15:ba:98:c1:82:67:7b:e3:03:
         f3:b8:ad:90:2e:da:db:85:75:ae:89:8f:d2:6d:76:2b:89:0d:
         71:12:2d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2elLwn8LyloWlXUNBpxEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3
NzJjZDIwHhcNMjYwNTEzMDEwMDU3WhcNMjYwNTE0MDEwMDU3WjAzMTEwLwYDVQQD
Eyg1MDJiMzA3ZTY2MjNhYjQ1ZDY3ZDAxOGYxMDcxMzEzMWU3NTVhZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLu29dJQ/KGCNsrQ1iBfdWIccdp4
okFT7JH6HpDpga+GLhUTZmsv6COSCLycfBXUiRbdQDSjPWddCHt+8dHwF3JjNzDD
ureuhI0URuvHYd0LrnwjV1/lLrLTvUhK8gLIuVg0dvyLX00hjJY3ZovZ8XWAsJ7n
E9fMLgxFHU1OLFuF516LoAnjMvyY7ck3jzm+53q8kG3k1TUvU8W4fsrhknL5Pfti
bmUqkNctvv0ckvKj7zAUO2+KTr5uITciPMMnEkFr6TyvyNBx7GY6hrjeJauh5XrF
wbzAW9Mc42vhoxuooI8hXX1Xy70yd/qdfOBANXLCb7frPAIXbMJV1ODnHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFArMH5mI6tF1n0BjxBxMTHnVa/MMB8GA1UdIwQY
MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt
ZWM1NzhlMWNjZWVkLzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk
LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVkDrkEB
hxMPcBs66pSpKLEe0hjVOzmDaJpolTqE3JKgZb2K8U6LXy1wgA9x6lahrum9k4W/
YojoABVB5DTR905jqtpM9Ovn74lATNw+s5MD/Lx2nAzcx5wmVx6x/66khd+98+/X
j7QoYQqBMhyRq/ZZ4UiCr5+TY5GdFg3bQfhgFWMX/5rpM33+fQRiceezRpZlnBTm
iODqTbGsnYhoP9eVEYbjE3yfL7OB9L63IosCa753rpKYZWmhBYkZL6Mgwec9LioY
IVgXqTr7rdvv5YTaB802LQUP+OjQFjCdqBIfFbqYwYJne+MD87itkC7a24V1romP
0m12K4kNcRIt+w==
-----END CERTIFICATE-----
Generated at Wed May 13 10:47:44 2026 by rpki-client