Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
File:                     WIOU45ENlKe_Cnig8wLQKumQcnM.mft (raw, json)
Hash identifier:          xBBTnkkX07+boFtjBBG5SeJDYvJb4mISe+2QXSG+sEQ=
Subject key identifier:   D5:4A:F2:F5:66:5C:8F:7A:9F:6B:7F:97:5E:B4:6A:43:C5:EE:47:3E
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Certificate issuer:       /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial:       019DF4267ECE7C4105BD55E94CEE72B1C674
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
Manifest number:          18EF
Signing time:             Mon 04 May 2026 18:00:56 +0000
Manifest this update:     Mon 04 May 2026 18:00:56 +0000
Manifest next update:     Tue 05 May 2026 18:00:56 +0000
Files and hashes:         1: 8O4Y6gqi_V-4_Dp70sUoajALQUc.roa (hash: w9UZFYJ/tT99RCEpaAiyOJPfFVOSK8U3STDxczdaYFs=)
                          2: WIOU45ENlKe_Cnig8wLQKumQcnM.crl (hash: sUBIJGdy8frmzV1QFnDItWb0mVTqoyrQKftaXq4oB80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 May 2026 14:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f4:26:7e:ce:7c:41:05:bd:55:e9:4c:ee:72:b1:c6:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
        Validity
            Not Before: May  4 18:00:56 2026 GMT
            Not After : May  5 18:00:56 2026 GMT
        Subject: CN=d54af2f5665c8f7a9f6b7f975eb46a43c5ee473e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:02:9f:98:4c:16:a0:7c:db:d0:a6:95:df:
                    f8:f6:d9:c4:35:d5:4f:4a:8d:4a:c0:9f:62:95:6d:
                    52:50:8d:96:19:f6:92:1d:0c:e4:9d:ca:d0:0c:3a:
                    66:1d:31:70:ed:12:4b:2b:4f:27:ae:80:58:08:bd:
                    39:fb:eb:01:ba:2a:94:2f:13:58:0b:b2:ce:02:6e:
                    40:19:5c:b4:7f:df:3f:86:48:5f:1d:31:dd:4f:4b:
                    18:bb:31:28:fb:e7:9a:cd:39:a0:63:8d:3c:3d:f5:
                    ed:b6:a1:0b:ec:bc:19:f7:5a:b8:64:d3:1a:01:71:
                    2e:d8:d6:70:c8:82:f9:0b:11:5a:cb:69:13:38:bb:
                    d3:3e:a7:d1:14:ed:83:cc:b1:03:a8:0d:32:14:f4:
                    23:e2:af:17:e8:06:fd:19:2a:43:02:52:f1:78:2e:
                    64:ff:d4:39:ec:bb:a5:2f:c0:6e:42:2d:14:78:9c:
                    7a:e5:96:3b:15:f5:0e:e2:1a:9b:1b:88:aa:74:be:
                    b2:b6:64:10:d6:26:2d:c6:20:d2:b6:9f:3c:69:64:
                    48:9a:e7:47:d8:f7:20:16:9e:a8:35:19:33:3f:86:
                    50:66:5c:b7:c3:49:63:f3:e9:a1:5f:4c:15:29:81:
                    0c:ae:e8:39:3e:21:d3:36:5c:c0:73:e9:b6:78:ba:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:4A:F2:F5:66:5C:8F:7A:9F:6B:7F:97:5E:B4:6A:43:C5:EE:47:3E
            X509v3 Authority Key Identifier:
                keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:dc:39:7a:da:18:be:59:ef:61:5b:64:a6:42:9e:6a:b3:
         ad:00:ff:15:7c:8a:31:9d:8a:93:93:e1:e4:92:25:78:2e:f9:
         e5:20:fe:0e:21:e9:74:10:9c:82:dc:94:fd:0d:d2:8f:4b:c0:
         4f:1a:62:c9:8e:ae:f7:69:64:95:40:c2:a5:8b:a0:f4:4e:20:
         f6:40:b7:87:0f:29:d4:d1:16:ae:54:d0:59:c1:1c:fc:7b:ca:
         48:3d:43:c1:bb:40:1f:e5:2b:a0:1b:20:93:a4:ce:a8:5d:bd:
         e5:6d:0d:d0:db:60:73:d0:35:d6:ba:11:51:eb:f3:e1:52:4e:
         08:e0:f7:3f:b5:a9:cf:cf:1e:55:21:1f:d7:f3:3d:21:3b:0f:
         03:1e:7b:78:b8:62:8b:fb:be:68:e1:a8:9f:f1:32:9a:05:b5:
         2d:dc:d6:e8:1b:41:44:d8:c1:a4:72:02:04:bd:fb:7c:1b:e8:
         3f:47:52:b0:5d:dd:ba:64:7d:9d:23:1a:55:0c:48:7b:5b:bc:
         b4:f4:6a:c1:a6:38:df:0e:f3:43:c0:5a:02:f9:90:05:0a:ca:
         e9:5c:0e:fe:83:48:23:83:70:cd:7c:e9:25:bf:0c:8e:ba:79:
         c1:f9:ed:d4:54:08:2a:7d:8f:49:f6:8a:7e:9e:76:ff:1c:7a:
         81:d9:05:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 23:02:54 2026 by rpki-client