Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
File:                     wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json)
Hash identifier:          N8r0q8eOxMMYJGmdukUBQmfhqJrFbqTFVBKhY/X2GKk=
Subject key identifier:   3B:CB:C0:01:20:24:3D:7E:9E:C6:46:9F:A0:C5:5C:75:C3:FD:64:0C
Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4
Certificate issuer:       /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
Certificate serial:       019D390A4927450C12AE12445218683E323E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
Manifest number:          183A
Signing time:             Sun 29 Mar 2026 10:01:08 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:08 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:08 +0000
Files and hashes:         1: MQ6sWToCB3mumMKgqU-7hS8fOpI.roa (hash: xhgcVHl7BJsW6MydRWNrXzoXNfS0GYn0WspMbhtJ6Ns=)
                          2: UGUSM9hVA7KNGP7ZI953Rb9GwC4.roa (hash: fiNb23qzbYBvgPKusu1s3CPZalyy1OSv2RbVYQYIa5Y=)
                          3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: YJz0CUmR8lxSS80H0srmIs1bsAHPuqGgE7JB6UkT1Jc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:49:27:45:0c:12:ae:12:44:52:18:68:3e:32:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4
        Validity
            Not Before: Mar 29 10:01:08 2026 GMT
            Not After : Mar 30 10:01:08 2026 GMT
        Subject: CN=3bcbc00120243d7e9ec6469fa0c55c75c3fd640c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ba:6a:c8:0a:87:31:e5:f0:c9:7f:06:19:82:
                    a0:15:18:35:18:a6:d4:d5:f1:ad:b2:b7:22:60:4a:
                    07:e0:aa:d7:c2:1d:60:05:84:01:97:25:27:03:cb:
                    42:19:3a:74:86:ec:94:59:7d:7d:b5:a6:ec:76:39:
                    bf:12:db:2d:38:64:5c:91:fe:46:c9:40:50:c9:2c:
                    68:09:e3:7a:b7:34:3a:89:f5:8f:85:fe:e7:74:b5:
                    0f:dc:52:0f:8d:f2:e7:bc:a2:2b:07:f5:aa:63:7b:
                    18:14:84:10:3f:92:9a:22:e9:69:b0:8d:eb:58:0d:
                    96:d8:3b:6f:dd:3d:61:d1:1c:88:a5:65:d0:e5:23:
                    2f:61:f9:7c:7c:5e:50:fe:82:d5:27:18:79:01:2a:
                    a8:97:c8:70:db:da:06:c3:13:ad:10:e7:2f:da:d6:
                    82:c9:5d:4e:20:70:86:6b:7b:9e:b7:a2:60:cb:f7:
                    00:a3:43:63:38:0f:09:c2:bc:32:5e:8d:1f:7e:72:
                    d5:d5:00:cc:e5:a3:8c:b9:d7:1e:0b:b6:c1:bd:79:
                    0b:11:a8:19:63:92:5b:80:cc:19:4c:1e:1e:aa:7d:
                    3b:11:59:95:a0:be:61:fc:8f:ba:5b:90:c7:5e:88:
                    c2:a4:8b:4a:50:3e:3c:b2:3a:ce:a1:82:b6:6a:3e:
                    9d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:CB:C0:01:20:24:3D:7E:9E:C6:46:9F:A0:C5:5C:75:C3:FD:64:0C
            X509v3 Authority Key Identifier:
                keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:57:7d:f3:4a:7b:95:e5:92:f4:51:6b:e2:74:c3:f8:fc:62:
         b9:c9:75:88:ff:95:cc:cf:11:b3:56:ab:c3:26:21:d6:b5:5c:
         be:5d:51:56:16:ff:da:c9:b6:e8:7c:ec:f9:25:34:6e:0f:14:
         37:3e:68:09:52:a7:54:e9:65:f2:9c:c5:02:ea:fc:9d:e2:60:
         eb:c8:7c:97:36:2f:89:d2:a5:27:43:e9:e5:a2:80:5f:eb:cd:
         39:4b:e3:8a:08:02:05:fc:97:ef:4a:2c:19:b1:b2:e5:eb:16:
         9c:e7:b2:e4:c0:22:88:6d:9c:85:2b:28:0f:80:00:59:04:fa:
         3d:7f:8c:1f:93:15:10:3e:ec:a6:a6:b2:47:af:c8:dd:d2:41:
         ae:a9:6d:0c:dd:e5:75:83:aa:c4:fe:7d:13:82:53:4d:4b:a0:
         ce:b8:23:62:b9:a1:f2:2b:eb:ec:ae:49:bc:89:9d:2b:84:e5:
         99:09:6b:e9:d5:1b:66:27:29:cc:95:85:6b:92:6f:fb:20:04:
         04:54:36:a4:36:09:7e:61:2d:7a:fa:42:68:df:57:a9:01:19:
         9e:b1:79:64:e1:21:c4:02:25:78:0e:54:5c:a0:11:b3:4e:b1:
         b7:0d:f4:07:4e:03:da:b1:a9:cc:a9:4c:a3:dc:57:e4:1b:97:
         00:ed:06:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CkknRQwSrhJEUhhoPjI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNTEwYThhNTI1ZGM5YjFlYzBiMTU2MGQwOTBhNjQyNjhk
NDJlYzQwHhcNMjYwMzI5MTAwMTA4WhcNMjYwMzMwMTAwMTA4WjAzMTEwLwYDVQQD
EygzYmNiYzAwMTIwMjQzZDdlOWVjNjQ2OWZhMGM1NWM3NWMzZmQ2NDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbpqyAqHMeXwyX8GGYKgFRg1GKbU
1fGtsrciYEoH4KrXwh1gBYQBlyUnA8tCGTp0huyUWX19tabsdjm/EtstOGRckf5G
yUBQySxoCeN6tzQ6ifWPhf7ndLUP3FIPjfLnvKIrB/WqY3sYFIQQP5KaIulpsI3r
WA2W2Dtv3T1h0RyIpWXQ5SMvYfl8fF5Q/oLVJxh5ASqol8hw29oGwxOtEOcv2taC
yV1OIHCGa3uet6Jgy/cAo0NjOA8JwrwyXo0ffnLV1QDM5aOMudceC7bBvXkLEagZ
Y5JbgMwZTB4eqn07EVmVoL5h/I+6W5DHXojCpItKUD48sjrOoYK2aj6dJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvLwAEgJD1+nsZGn6DFXHXD/WQMMB8GA1UdIwQY
MBaAFMJRCopSXcmx7AsVYNCQpkJo1C7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODct
OWE4OTU0NjdkYTg1LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODctOWE4OTU0NjdkYTg1
LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAild980p7
leWS9FFr4nTD+Pxiucl1iP+VzM8Rs1arwyYh1rVcvl1RVhb/2sm26Hzs+SU0bg8U
Nz5oCVKnVOll8pzFAur8neJg68h8lzYvidKlJ0Pp5aKAX+vNOUvjiggCBfyX70os
GbGy5esWnOey5MAiiG2chSsoD4AAWQT6PX+MH5MVED7spqayR6/I3dJBrqltDN3l
dYOqxP59E4JTTUugzrgjYrmh8ivr7K5JvImdK4TlmQlr6dUbZicpzJWFa5Jv+yAE
BFQ2pDYJfmEtevpCaN9XqQEZnrF5ZOEhxAIleA5UXKARs06xtw30B04D2rGpzKlM
o9xX5BuXAO0G4A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:24:44 2026 by rpki-client