Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
File:                     wGDUbR2ARrTXTk2BWBjI42We2-k.mft (raw, json)
Hash identifier:          XSqbsVhzMbPh0k4ORwfI24Fq1FbV1/YxvwHQUpxUq5g=
Subject key identifier:   3C:35:C6:ED:98:79:61:9D:1A:E7:CC:73:54:06:FC:AB:38:A1:52:76
Authority key identifier: C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9
Certificate issuer:       /CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
Certificate serial:       019F8F7ED14575BBFA3ECB4A027427B3C1E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
Manifest number:          42
Signing time:             Thu 23 Jul 2026 15:01:20 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:20 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:20 +0000
Files and hashes:         1: 25BBiDR8yUw_giFf8TVIFyZVcZE.roa (hash: PFZc2HRYy/c/JYp6Cc+Y2LgsM9oiJMXKoNebC6wZE1g=)
                          2: 31lsna3coaCho9f79M74rSiM-2E.roa (hash: TBV2V1tUQJQMVD10TW8IiOUNmV5p9zslLqp5axtwP2I=)
                          3: 6FldpB1KoXc7_rrbP39Bq9_huL4.roa (hash: 5Vb3gZ/NsexkVgsk+CP2UCmvORvkYkLH2dzKg9YvTyk=)
                          4: 6b4J6K1sIf4sh3TpTzLA50H2i9E.roa (hash: RvgEHSjIu9PJXTVwxwLo6zFt2f3A1tUMgoxPmAagYDE=)
                          5: E3ArwYEYz0p1tRS8NTnF_SeY2mM.roa (hash: bB/yiMf3cVw3gozrgLlQJJ6kEroSsFqqldiMXLpOlrc=)
                          6: EA0sYoEkGY--aXg03FYbjJMjc6E.roa (hash: 0QWqzxwOE1IAJYpUFvg8vxdtj+8qJzVTMZwsPgQDB/s=)
                          7: FUkJHIVrFrlOWEZn3NYUiH6k_bc.roa (hash: vGaTybYdhyeaOAPwcCS7Uix9cUhClZLn4jQWoTrNwYQ=)
                          8: HqEUGRjIUWCN-LoAJsgZNzQAcd4.roa (hash: W/hTNd+CTOSx3Lh1BPJBrH8fFi7uRtJSQMLg5YF9pWU=)
                          9: IdxZ7ii2BtH-aHbClfeNmCS_iVo.roa (hash: f/5uTyMaYzEzYCrjU7gNcgtd3V1ld08XX3gn3rUAydA=)
                          10: JLgS3ea-gXLnY_fNVgZM8WZ4JTk.roa (hash: +LLMdRS+BhQRnC0uf970cLATXLhRpqfVBqBMrYlx/ps=)
                          11: NobYJ4d_NstOs2IhETvVadUkk5Y.roa (hash: eYjXAuqpGQTsoa+ekmFSgIVX7NhmdX4g74QpsVMafUI=)
                          12: PfpKG9L9nw21zDeclBkBtIdO1Qs.roa (hash: gpC8SL/cXbSFWb5uAYLLH5P0ilNgbgl7FKWZOdyr4Rg=)
                          13: WAFx-v2RXmaZLOBwMaqQUhR68Hg.roa (hash: F7zvdeotN/wvvVo3wtr87UCpey+LkxUq55KDc9CtUsY=)
                          14: ZJU7Yn4OgFwV3EgkepnbW9hDIvE.roa (hash: Ft3uRd5+wQwQpXyYcn2mZoa56Wj4aO+sy2PGLzCpZ5w=)
                          15: Zy3huIOnJv71Y7Kvb-IYIqP5Ib0.roa (hash: UiE8ySnZG8AglxSZLRGVHABCpVAJCHbk9VQcVxi8Tl4=)
                          16: _88cGpAaOxlQ618khySC8ZG-OMs.roa (hash: HCqofKIP/L4h4ZD05S9epNf111ZQ+OjdA9CD8fobtxE=)
                          17: d2gMOrPuFF2xz_9mplkl3BeyYac.roa (hash: hMGGpuXUGzC0yFPNLu1PQs6yIzQGCuppBNvOlOKOZRk=)
                          18: e1JjC5WFbTioA0QO0B4nYiY-3-0.roa (hash: kjrs8TwJGxPvEvD0Gp9V75aup5Hzu1MHVeUZcnwwG/0=)
                          19: igS0cFT4bKmQza7xOsMautMBrdc.roa (hash: vIQ5BdqmbroBvvs0jFLKd4x/xCXV8VFIeeqQ7LxGMsY=)
                          20: ijX-wbrRsGA1oH7vIX-da-hg2o4.roa (hash: eYGuJmx/1NokgHZ4ALtPE2iWk9VkyPXdAtlC+gC9/G4=)
                          21: o5Wsg4siqOQAMErJNWMe7zLJp7I.roa (hash: 2yvV6ahub2ug8311gJTOGJY3WDPvZfi12idbZBLq/Fo=)
                          22: pdmOgxQCMQy4q8RBOWk8jUUUPOk.roa (hash: lkyyCZk1iYJ84UbKknek5JQ+JBGp0Xaxfyamk1cul+0=)
                          23: wFXMySld0SQGDvYjm8QPsMmxH0o.roa (hash: dh285VQW167J+uosYSUr0PO4nnL7HODt9EN6xHE8tLk=)
                          24: wGDUbR2ARrTXTk2BWBjI42We2-k.crl (hash: XGq/WFZ5hq0mroBv+J2OdG54wMRf+weXYNZ/MBchXc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:d1:45:75:bb:fa:3e:cb:4a:02:74:27:b3:c1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c060d46d1d8046b4d74e4d815818c8e3659edbe9
        Validity
            Not Before: Jul 23 15:01:20 2026 GMT
            Not After : Jul 24 15:01:20 2026 GMT
        Subject: CN=3c35c6ed9879619d1ae7cc735406fcab38a15276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:ee:b8:4d:19:e3:4f:c6:5a:5a:21:ce:c8:
                    ee:ca:d6:95:ea:c6:25:66:ce:52:17:45:70:e0:c8:
                    07:08:3c:51:9c:7e:07:1c:7a:ab:d1:de:98:2e:05:
                    fa:a0:db:8b:ce:e6:03:18:9e:03:e4:3e:2e:63:eb:
                    9f:d7:9d:56:ba:f8:b4:43:f2:ea:6b:6c:d2:d5:f2:
                    74:f4:07:b3:ad:49:35:ab:50:81:b5:5b:fe:1a:6f:
                    5c:80:70:5a:36:53:af:2d:56:86:3c:b7:35:cc:00:
                    4d:06:d9:96:81:9c:17:10:66:92:55:0b:a4:fd:40:
                    83:96:f8:34:67:63:80:66:09:d8:58:09:c5:04:84:
                    c2:88:f7:da:23:9d:bb:6e:75:9c:d4:c7:38:2d:f6:
                    0b:9e:6d:b2:b1:55:33:60:d5:e0:66:d0:f6:37:a1:
                    2c:6a:ec:bc:d8:43:c9:ed:43:cb:58:22:3c:20:eb:
                    42:4a:46:37:7c:6b:24:e2:7e:fa:3b:8c:26:9c:41:
                    19:a7:92:3b:44:0d:25:73:3a:02:3b:83:f0:45:8e:
                    45:0f:76:45:8c:c8:9e:b5:b8:83:83:78:57:13:c9:
                    db:6d:76:73:7b:84:c5:0c:9d:63:42:e1:56:43:b3:
                    8b:24:52:f9:50:64:cb:a1:ab:0b:e6:34:41:d6:df:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:35:C6:ED:98:79:61:9D:1A:E7:CC:73:54:06:FC:AB:38:A1:52:76
            X509v3 Authority Key Identifier:
                keyid:C0:60:D4:6D:1D:80:46:B4:D7:4E:4D:81:58:18:C8:E3:65:9E:DB:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGDUbR2ARrTXTk2BWBjI42We2-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/wGDUbR2ARrTXTk2BWBjI42We2-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:71:3a:de:ca:7f:c2:65:54:b6:64:cf:99:65:5d:b6:83:d8:
         c7:9c:b7:81:aa:00:95:25:75:46:0f:df:b3:da:1c:9a:1c:9a:
         9b:0f:52:65:7d:b9:f1:30:10:d9:65:29:8a:28:07:df:d0:05:
         c6:6e:e0:b6:0b:76:18:6f:eb:df:47:cc:a3:a0:c6:c2:cb:9b:
         64:10:a7:4e:eb:be:b4:23:28:df:10:1d:4a:03:3f:39:17:c0:
         ef:aa:1f:df:51:48:f9:04:e7:ea:06:2f:4f:f6:18:b5:ba:8c:
         c0:69:22:ec:cd:b3:92:54:02:dd:c1:c5:a6:a5:9f:d3:51:cb:
         63:74:d1:a4:77:c8:f3:04:88:b8:54:b7:0a:a2:56:7e:1c:13:
         67:b0:4c:5f:a3:ce:cc:00:13:b1:b1:c5:bb:4d:79:a1:20:39:
         19:48:fe:94:9c:9e:ae:79:30:37:a6:50:1d:a3:a4:c9:46:4b:
         01:f8:65:3f:93:7d:fe:c1:df:e1:db:5e:24:d0:1a:3f:ce:68:
         f6:1c:cb:7a:7f:64:cd:74:56:a8:4f:9a:36:f9:a6:76:0a:b1:
         22:89:6c:ab:25:f0:65:89:d4:97:98:cc:1e:33:c1:71:53:1a:
         8b:de:74:1b:5a:c6:01:85:d5:d2:2a:08:d9:f6:d7:f8:76:86:
         a1:83:ef:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PftFFdbv6PstKAnQns8HnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNjBkNDZkMWQ4MDQ2YjRkNzRlNGQ4MTU4MThjOGUzNjU5
ZWRiZTkwHhcNMjYwNzIzMTUwMTIwWhcNMjYwNzI0MTUwMTIwWjAzMTEwLwYDVQQD
EygzYzM1YzZlZDk4Nzk2MTlkMWFlN2NjNzM1NDA2ZmNhYjM4YTE1Mjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwLuuE0Z40/GWlohzsjuytaV6sYl
Zs5SF0Vw4MgHCDxRnH4HHHqr0d6YLgX6oNuLzuYDGJ4D5D4uY+uf151Wuvi0Q/Lq
a2zS1fJ09AezrUk1q1CBtVv+Gm9cgHBaNlOvLVaGPLc1zABNBtmWgZwXEGaSVQuk
/UCDlvg0Z2OAZgnYWAnFBITCiPfaI527bnWc1Mc4LfYLnm2ysVUzYNXgZtD2N6Es
auy82EPJ7UPLWCI8IOtCSkY3fGsk4n76O4wmnEEZp5I7RA0lczoCO4PwRY5FD3ZF
jMietbiDg3hXE8nbbXZze4TFDJ1jQuFWQ7OLJFL5UGTLoasL5jRB1t88dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDw1xu2YeWGdGufMc1QG/Ks4oVJ2MB8GA1UdIwQY
MBaAFMBg1G0dgEa0105NgVgYyONlntvpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvd0dEVWJSMkFSclRYVGsyQldCakk0MldlMi1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAenE63sp/
wmVUtmTPmWVdtoPYx5y3gaoAlSV1Rg/fs9ocmhyamw9SZX258TAQ2WUpiigH39AF
xm7gtgt2GG/r30fMo6DGwsubZBCnTuu+tCMo3xAdSgM/ORfA76of31FI+QTn6gYv
T/YYtbqMwGki7M2zklQC3cHFpqWf01HLY3TRpHfI8wSIuFS3CqJWfhwTZ7BMX6PO
zAATsbHFu015oSA5GUj+lJyernkwN6ZQHaOkyUZLAfhlP5N9/sHf4dteJNAaP85o
9hzLen9kzXRWqE+aNvmmdgqxIolsqyXwZYnUl5jMHjPBcVMai950G1rGAYXV0ioI
2fbX+HaGoYPvCQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:50 2026 by rpki-client