Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
File:                     wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json)
Hash identifier:          9PeHyCWarFzARdGOq1KIo6aBraBLZ8N/R5SoA9tk7Xw=
Subject key identifier:   9D:10:0C:9D:B1:32:83:4E:48:D9:A9:99:A3:A8:AD:96:C4:D2:09:3E
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Certificate issuer:       /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial:       019D37528A335451404881F4FF7571691AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
Manifest number:          181E
Signing time:             Sun 29 Mar 2026 02:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:49 +0000
Files and hashes:         1: LJ5gZJSPzwjdTVggDFY4W_1l4w4.roa (hash: ik1OvlzeTsw4mzKCrPXBw8FurNhNyxucfV+IOGhqUhU=)
                          2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: +YNK9wIktsPuAwXq/y3I0rrzYMSYAJjeIzYtmxKTOPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:8a:33:54:51:40:48:81:f4:ff:75:71:69:1a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
        Validity
            Not Before: Mar 29 02:00:49 2026 GMT
            Not After : Mar 30 02:00:49 2026 GMT
        Subject: CN=9d100c9db132834e48d9a999a3a8ad96c4d2093e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b8:4c:1e:ea:08:da:e9:72:01:47:0f:d1:ef:
                    1b:cf:61:26:52:80:22:45:0c:fd:8e:98:96:a8:ca:
                    15:3b:be:89:ae:01:76:d1:c1:c8:40:87:0d:39:53:
                    56:d2:67:12:6c:c8:19:f6:a1:26:be:aa:3d:2c:4c:
                    9e:d3:10:f8:46:7e:56:59:87:d6:75:dc:49:7d:4d:
                    aa:e0:67:f9:7f:62:0e:17:6c:eb:5a:3e:d8:cd:7a:
                    80:cd:c0:44:8f:40:8b:0a:f3:aa:3f:48:5c:29:9f:
                    68:bc:46:80:ec:d8:db:8b:0e:6f:9d:3b:00:69:83:
                    83:69:d1:59:b8:f5:c3:a2:aa:6c:06:7b:fd:20:60:
                    41:00:cf:26:67:55:6a:4b:0b:c7:e2:f5:02:b1:0e:
                    17:23:7e:60:ce:69:dd:76:f8:b3:69:e9:27:93:21:
                    3e:7b:16:78:e5:9b:3f:03:75:12:d6:c5:96:6d:ff:
                    b6:2c:65:20:f7:bb:3f:6e:d1:56:a3:33:e9:9f:6a:
                    59:0b:64:84:a4:e6:a7:79:52:5a:09:c3:2b:c2:17:
                    53:e4:1f:bf:63:e2:fa:09:d8:88:b5:86:22:d9:be:
                    b5:e1:d8:d3:f7:7e:c4:9f:17:d5:d6:08:fc:d0:01:
                    8e:4c:8b:21:23:7a:d2:b9:e1:21:8f:e0:7b:24:8b:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:10:0C:9D:B1:32:83:4E:48:D9:A9:99:A3:A8:AD:96:C4:D2:09:3E
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:02:0a:a3:b9:6a:08:cb:69:7b:91:21:8a:ed:85:b9:15:db:
         e0:31:c8:fb:24:33:00:18:1a:e1:4c:a2:45:10:5d:d7:35:77:
         7a:6e:54:a1:b6:c3:18:b6:76:ad:28:26:23:55:1f:d7:89:51:
         e7:46:bc:1e:f8:22:fe:76:90:99:7b:90:e0:a5:e4:5a:46:cd:
         3c:3b:36:d7:78:ae:51:99:65:1b:e0:3c:23:82:43:0e:c1:ed:
         a7:60:79:90:a5:31:db:28:62:6c:59:d5:05:31:28:93:8d:b7:
         84:d5:5e:31:20:a3:0d:5a:7c:05:96:f8:31:f4:6b:e6:e3:22:
         60:65:85:95:37:cb:2b:fc:a2:3a:27:35:26:e7:b4:dc:30:bc:
         c5:77:75:cb:70:63:e7:47:4d:36:fe:f4:ae:27:f8:24:be:17:
         4d:ea:eb:2e:24:5b:3a:85:79:a6:13:a8:b0:9c:c6:fd:b4:c3:
         5b:d9:e3:a1:c2:cb:2e:48:eb:52:17:b2:ce:88:9e:5b:15:c1:
         9d:8d:a4:94:60:bc:39:67:d7:f7:a3:84:b8:ba:de:b3:7b:a4:
         8f:80:cb:e9:d4:2f:a0:97:c9:dc:8d:a8:fc:a6:c7:6d:d8:ca:
         e4:d1:ab:3f:c2:5d:aa:21:79:02:53:0b:e9:48:ea:41:e0:00:
         d3:45:b9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:27 2026 by rpki-client