Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          lOK3G9LfhB4u7yBeMWh1f7EcXBGZbgiZxEcys1TzwVM=
Subject key identifier:   0E:C0:9D:4F:A0:63:F0:E5:1D:46:C3:55:AA:79:FC:D1:00:F1:BA:B1
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       019DCF756C758C15F7E8B6C230F7C5AA15DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          07CC
Signing time:             Mon 27 Apr 2026 15:01:12 +0000
Manifest this update:     Mon 27 Apr 2026 15:01:12 +0000
Manifest next update:     Tue 28 Apr 2026 15:01:12 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: Skni9PTpR3C5VcRiYz744Oh5BvYwHHz6UIEfqQ8b6JI=)
                          2: lJ9R5Dh_kyvQTqID5Ptu3Jzlprg.roa (hash: GdaCvKcF3hhpCqRpHUMph71fNwvXQ4kAIUixuBm8+iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 15:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:75:6c:75:8c:15:f7:e8:b6:c2:30:f7:c5:aa:15:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: Apr 27 15:01:12 2026 GMT
            Not After : Apr 28 15:01:12 2026 GMT
        Subject: CN=0ec09d4fa063f0e51d46c355aa79fcd100f1bab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:71:e9:ec:d8:ae:18:c1:9b:2e:7d:29:d8:
                    6d:13:e4:0c:f9:04:7f:f0:b2:cc:12:f9:b1:87:75:
                    74:b9:8b:fe:12:46:7c:d8:1e:a9:e3:85:72:d3:5a:
                    39:0e:4a:d3:6b:ce:60:00:5a:c3:c9:2f:5c:88:2c:
                    cf:c4:c8:86:89:10:7f:25:84:68:66:6f:58:6e:9a:
                    d4:74:e2:b1:ec:3c:a6:29:63:40:d0:a2:b6:76:26:
                    39:33:ff:37:96:17:4f:c4:c8:87:f3:48:11:6e:01:
                    09:31:55:d0:0f:d0:aa:6c:65:2a:18:5c:08:47:91:
                    a1:a2:1b:6e:c2:69:90:71:20:51:58:62:01:5c:7c:
                    5a:44:89:7a:da:9d:ed:f5:e4:a1:4e:56:bc:f6:a0:
                    94:73:a4:f8:6c:fe:13:a5:1a:37:65:a9:87:bb:ce:
                    3e:47:e6:04:c5:43:99:e4:f6:63:37:b0:8d:f1:c6:
                    66:bb:ac:a7:95:64:19:be:b7:90:5b:7c:64:88:1d:
                    6a:5f:f6:87:b7:29:a7:18:30:cd:01:1f:d0:94:dd:
                    05:43:ad:ae:47:3a:d0:ec:cc:19:f9:af:69:5c:20:
                    03:9b:d0:a0:85:d7:0f:dd:1b:7b:c4:32:0f:4a:62:
                    3e:c8:c0:1f:52:d0:5c:f1:2e:47:fa:b8:4e:08:b8:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C0:9D:4F:A0:63:F0:E5:1D:46:C3:55:AA:79:FC:D1:00:F1:BA:B1
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:c9:1f:13:58:2f:79:70:18:74:40:13:fb:1b:12:b7:28:79:
         e5:ab:d5:e1:10:42:1a:19:19:77:d5:d4:99:5a:11:c7:15:9b:
         8e:61:77:8c:26:e8:d6:87:cf:35:ba:a8:c9:51:11:a8:e4:8e:
         a9:6e:63:b8:6b:ac:9f:1b:57:89:36:30:45:c5:87:5d:25:1e:
         15:d5:8c:8e:ab:00:82:49:32:3d:df:98:5f:af:8b:47:3c:e9:
         00:f7:47:ef:f3:4d:c7:24:8c:54:db:67:85:d3:fd:cd:dc:f9:
         fc:1d:d8:ca:37:16:d1:2a:d8:5b:cb:dd:dc:53:e4:5f:e2:23:
         54:e3:45:8f:22:c4:bd:46:ed:04:77:d0:d0:49:6d:37:2e:d2:
         ba:0d:e3:be:09:72:d1:58:f4:96:e4:c4:52:0e:0b:8c:3d:02:
         13:68:58:1f:ef:d9:a6:90:f1:2d:b5:21:5e:30:56:62:54:1e:
         79:fe:d3:22:63:97:97:6b:04:ba:27:13:b4:4c:94:b1:65:ed:
         2e:70:2b:e5:85:18:6b:54:58:ec:23:df:fc:24:ad:95:2f:56:
         dd:ab:40:60:68:e9:fe:4d:5c:03:5f:a6:bd:02:18:8b:fe:70:
         5d:70:b1:dc:a6:46:10:ed:23:51:58:45:77:0b:eb:7d:cf:21:
         55:dd:91:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdWx1jBX36LbCMPfFqhXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZDU4MzIzZTdkNGY5MWMzNzI5N2NkMTkyNjU2NjAzM2Iz
ZjhhYmEwHhcNMjYwNDI3MTUwMTEyWhcNMjYwNDI4MTUwMTEyWjAzMTEwLwYDVQQD
EygwZWMwOWQ0ZmEwNjNmMGU1MWQ0NmMzNTVhYTc5ZmNkMTAwZjFiYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhdx6ezYrhjBmy59KdhtE+QM+QR/
8LLMEvmxh3V0uYv+EkZ82B6p44Vy01o5DkrTa85gAFrDyS9ciCzPxMiGiRB/JYRo
Zm9YbprUdOKx7DymKWNA0KK2diY5M/83lhdPxMiH80gRbgEJMVXQD9CqbGUqGFwI
R5GhohtuwmmQcSBRWGIBXHxaRIl62p3t9eShTla89qCUc6T4bP4TpRo3ZamHu84+
R+YExUOZ5PZjN7CN8cZmu6ynlWQZvreQW3xkiB1qX/aHtymnGDDNAR/QlN0FQ62u
RzrQ7MwZ+a9pXCADm9CghdcP3Rt7xDIPSmI+yMAfUtBc8S5H+rhOCLj+zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7AnU+gY/DlHUbDVap5/NEA8bqxMB8GA1UdIwQY
MBaAFEXVgyPn1PkcNyl80ZJlZgM7P4q6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTct
ZjNkZjYxNzdhMmJiLzEvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lYzI4MzMtYmIwZi00OTI0LTg1MTctZjNkZjYxNzdhMmJi
LzEvUmRXREktZlUtUnczS1h6UmttVm1BenNfaXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaMkfE1gv
eXAYdEAT+xsStyh55avV4RBCGhkZd9XUmVoRxxWbjmF3jCbo1ofPNbqoyVERqOSO
qW5juGusnxtXiTYwRcWHXSUeFdWMjqsAgkkyPd+YX6+LRzzpAPdH7/NNxySMVNtn
hdP9zdz5/B3YyjcW0SrYW8vd3FPkX+IjVONFjyLEvUbtBHfQ0EltNy7Sug3jvgly
0Vj0luTEUg4LjD0CE2hYH+/ZppDxLbUhXjBWYlQeef7TImOXl2sEuicTtEyUsWXt
LnAr5YUYa1RY7CPf/CStlS9W3atAYGjp/k1cA1+mvQIYi/5wXXCx3KZGEO0jUVhF
dwvrfc8hVd2R6w==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:17:02 2026 by rpki-client