Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
File:                     wUMgTpetea1qHwlA70GxbyB7SJ0.mft (raw, json)
Hash identifier:          TWqNeLwZJeg9YQuOfv9R+MavSsgwmb9EBQ7gZpV3yKc=
Subject key identifier:   2C:2B:61:56:9C:7C:AB:C9:EE:74:82:88:03:8B:E1:20:44:88:0E:54
Authority key identifier: C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D
Certificate issuer:       /CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
Certificate serial:       019FA03A8EDC9979ED627F7AE6CC0A8C8422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
Manifest number:          032E
Signing time:             Sun 26 Jul 2026 21:00:19 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:19 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:19 +0000
Files and hashes:         1: 1D-KzTs2x3YCvLX_diqn68dkjas.roa (hash: G2T8kMybTdtstk/QjGzaaTiveaLxpF2RhcjDjiZFthc=)
                          2: tG3_Wx1Q-pkulqEqUyFXzivDhRU.roa (hash: eXCAiJLJ/Ee4RYxbcZadGgQS6Fg8Xl7wn+u4+riK4HI=)
                          3: wUMgTpetea1qHwlA70GxbyB7SJ0.crl (hash: dqhf2yAi1JoO9akbzp6/7KtIaTflII2xAvLttvxxOb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:8e:dc:99:79:ed:62:7f:7a:e6:cc:0a:8c:84:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c143204e97ad79ad6a1f0940ef41b16f207b489d
        Validity
            Not Before: Jul 26 21:00:19 2026 GMT
            Not After : Jul 27 21:00:19 2026 GMT
        Subject: CN=2c2b61569c7cabc9ee748288038be12044880e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:68:4b:37:9f:96:30:29:62:aa:41:88:29:5b:
                    56:ad:ea:6b:b0:c6:33:47:c0:45:39:fb:ff:9f:14:
                    32:33:ee:02:27:00:77:da:d7:ff:04:00:95:9f:b0:
                    25:9f:69:bf:f7:60:a3:62:d6:f7:2d:f6:10:c8:be:
                    01:e1:d5:31:60:dd:e6:7e:fa:32:fb:24:41:9e:bf:
                    08:da:f5:55:47:f3:65:b1:2a:f7:8e:bb:55:62:87:
                    c2:38:a0:66:f2:f0:34:9d:f4:f8:9b:82:e4:9c:dc:
                    25:f1:c4:94:c9:16:cc:b0:26:56:1c:b8:cf:f1:59:
                    a6:18:df:e6:1e:f3:c8:a8:38:96:43:ab:f6:af:d9:
                    f0:ba:de:72:43:2b:6f:1a:af:ba:0b:12:31:02:08:
                    eb:f9:25:78:a7:8e:4a:60:28:aa:26:6d:9b:bc:31:
                    0b:2d:ea:ef:6b:ec:8a:00:a4:22:b1:97:3a:57:c0:
                    89:89:62:50:65:77:c6:54:d0:b9:fb:ee:94:65:56:
                    7e:da:e1:56:74:2c:82:01:a4:47:8d:2e:da:e9:67:
                    72:a0:f0:a7:28:a3:c2:f3:bb:e5:21:38:51:25:bc:
                    cc:70:c7:fa:55:7c:bc:2e:a2:71:4c:4e:0e:e2:c3:
                    0e:f9:be:bd:e0:0f:18:d4:d0:43:a8:b6:d1:5b:ca:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2B:61:56:9C:7C:AB:C9:EE:74:82:88:03:8B:E1:20:44:88:0E:54
            X509v3 Authority Key Identifier:
                keyid:C1:43:20:4E:97:AD:79:AD:6A:1F:09:40:EF:41:B1:6F:20:7B:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUMgTpetea1qHwlA70GxbyB7SJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/b0144e-9f30-4f9f-a87f-d29a5d918fd8/1/wUMgTpetea1qHwlA70GxbyB7SJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:ba:59:18:d1:c2:65:8d:6e:68:31:4c:65:31:0a:c8:31:64:
         5b:2b:aa:0d:9e:7e:dc:a0:b8:d0:54:3c:25:34:80:a8:0a:56:
         6c:e0:ff:99:f6:e6:27:c9:50:c6:89:0c:54:d0:62:f2:e1:62:
         0d:2c:42:6b:06:49:cc:9f:b2:c8:ee:8d:b8:a8:d5:49:bf:18:
         51:e3:ed:39:37:80:52:33:f2:19:88:d0:2c:4f:49:b4:a5:77:
         d6:58:15:04:9f:72:05:cd:18:11:75:5c:18:73:18:92:13:11:
         52:cd:1d:75:77:46:7a:66:c4:d0:26:9f:55:66:65:bb:96:09:
         0a:24:c2:e8:1b:be:bc:ec:46:a4:76:1e:31:91:6c:c5:c6:c5:
         ae:c8:c4:18:29:3e:76:69:f0:63:82:80:17:c5:78:9a:b3:82:
         c2:70:0a:33:97:1b:76:d9:fe:f0:bf:6e:30:ec:73:f3:ed:33:
         d0:6e:4a:f2:88:1d:14:c0:97:4d:99:ea:f0:3e:03:8c:ce:71:
         83:08:66:60:07:7d:76:52:e3:7b:49:03:6a:09:b2:8e:93:b1:
         6a:a9:27:9e:f2:d8:7d:d6:e9:03:68:7d:bf:e3:ce:96:f0:11:
         31:14:32:e9:63:f2:9e:f7:cc:c8:c9:50:21:0e:17:35:15:f4:
         ab:27:d9:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOo7cmXntYn965swKjIQiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNDMyMDRlOTdhZDc5YWQ2YTFmMDk0MGVmNDFiMTZmMjA3
YjQ4OWQwHhcNMjYwNzI2MjEwMDE5WhcNMjYwNzI3MjEwMDE5WjAzMTEwLwYDVQQD
EygyYzJiNjE1NjljN2NhYmM5ZWU3NDgyODgwMzhiZTEyMDQ0ODgwZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWhLN5+WMCliqkGIKVtWreprsMYz
R8BFOfv/nxQyM+4CJwB32tf/BACVn7Aln2m/92CjYtb3LfYQyL4B4dUxYN3mfvoy
+yRBnr8I2vVVR/NlsSr3jrtVYofCOKBm8vA0nfT4m4LknNwl8cSUyRbMsCZWHLjP
8VmmGN/mHvPIqDiWQ6v2r9nwut5yQytvGq+6CxIxAgjr+SV4p45KYCiqJm2bvDEL
Lerva+yKAKQisZc6V8CJiWJQZXfGVNC5++6UZVZ+2uFWdCyCAaRHjS7a6WdyoPCn
KKPC87vlIThRJbzMcMf6VXy8LqJxTE4O4sMO+b694A8Y1NBDqLbRW8o1qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwrYVacfKvJ7nSCiAOL4SBEiA5UMB8GA1UdIwQY
MBaAFMFDIE6XrXmtah8JQO9BsW8ge0idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2Yt
ZDI5YTVkOTE4ZmQ4LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9iMDE0NGUtOWYzMC00ZjlmLWE4N2YtZDI5YTVkOTE4ZmQ4
LzEvd1VNZ1RwZXRlYTFxSHdsQTcwR3hieUI3U0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLpZGNHC
ZY1uaDFMZTEKyDFkWyuqDZ5+3KC40FQ8JTSAqApWbOD/mfbmJ8lQxokMVNBi8uFi
DSxCawZJzJ+yyO6NuKjVSb8YUePtOTeAUjPyGYjQLE9JtKV31lgVBJ9yBc0YEXVc
GHMYkhMRUs0ddXdGembE0CafVWZlu5YJCiTC6Bu+vOxGpHYeMZFsxcbFrsjEGCk+
dmnwY4KAF8V4mrOCwnAKM5cbdtn+8L9uMOxz8+0z0G5K8ogdFMCXTZnq8D4DjM5x
gwhmYAd9dlLje0kDagmyjpOxaqknnvLYfdbpA2h9v+POlvARMRQy6WPynvfMyMlQ
IQ4XNRX0qyfZMA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:16:54 2026 by rpki-client