Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          X1VjpVpZWCGCsfXT4p6uLWM06GpNe+vky1Cgk+HhgsA=
Subject key identifier:   AB:0D:A4:5C:34:97:94:FA:3E:08:D6:48:BE:8D:0C:BC:8E:29:4E:D1
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       019D390997DEBA81C9BA2E4B2F786F3E0BA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 10:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:23 +0000
Files and hashes:         1: mMZgXaTh11njkW9J1aXnh-Fk-kI.roa (hash: G+4h6jzZGduxse3xQqlcqa2IxQLXKni1IDY6nh6QJc0=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: 2gvlsYV8JRT7m8krVn0A+gyqKwjNNPoV+XzNfDo5ei8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 10:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:97:de:ba:81:c9:ba:2e:4b:2f:78:6f:3e:0b:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Mar 29 10:00:23 2026 GMT
            Not After : Mar 30 10:00:23 2026 GMT
        Subject: CN=ab0da45c349794fa3e08d648be8d0cbc8e294ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6d:8b:5f:81:8d:0b:42:45:00:01:a4:6a:39:
                    df:17:88:09:83:5e:64:0d:84:5d:d2:d8:65:c1:df:
                    1f:71:81:5d:d8:8c:f6:0c:a2:b2:41:a1:de:2b:cb:
                    db:ea:15:a2:43:39:54:0e:0e:23:b3:31:ec:d2:fb:
                    13:fd:b0:0b:9f:73:78:19:7e:39:33:e6:2c:20:fb:
                    45:14:21:a3:5b:15:38:50:51:10:ec:9b:eb:ab:c2:
                    da:6d:40:4d:b9:3a:8a:3c:15:b1:22:2c:0a:d8:9d:
                    80:a9:82:f7:af:89:84:8c:ec:75:b1:40:6b:96:02:
                    c0:78:35:0d:05:59:8f:17:6d:cb:ed:e7:71:96:4c:
                    1f:19:00:76:ae:75:b0:37:85:e7:0e:58:bb:96:9a:
                    4e:30:dd:d1:e3:25:80:fa:b4:d8:18:01:df:12:21:
                    73:2b:a8:fc:84:ef:45:5e:5d:15:19:d6:b1:bb:42:
                    31:7b:c8:13:f3:96:0b:dc:42:cd:ea:c6:b2:c2:0d:
                    91:61:47:2d:1a:66:73:ff:0a:c2:e9:41:c2:0f:dd:
                    73:61:b0:68:b5:9e:85:36:16:d2:ad:1c:32:37:30:
                    b8:e3:68:c8:7d:66:47:30:d3:e6:86:9b:29:c8:32:
                    7b:03:6b:c5:eb:de:97:c9:c1:ee:c1:cd:64:c6:df:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0D:A4:5C:34:97:94:FA:3E:08:D6:48:BE:8D:0C:BC:8E:29:4E:D1
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:24:41:41:9a:12:8b:e6:45:12:63:23:c4:b6:9f:9a:dd:3a:
         dc:55:66:59:95:29:04:e7:96:3d:2c:4d:d2:9d:5c:79:1a:1a:
         43:94:0a:73:1f:b6:6a:e5:b3:76:de:a1:e8:1b:49:ae:90:a0:
         94:83:4e:66:f7:fe:fe:e8:bc:79:7e:75:f3:0e:6c:13:be:66:
         1c:c6:1a:33:50:0b:a9:be:27:a6:c8:7e:5e:3e:d2:4f:dc:6d:
         e2:bd:35:8b:8d:38:72:8c:a5:e6:48:d3:c0:32:43:6d:88:56:
         28:64:e5:46:e0:89:16:e5:37:01:d8:60:f8:86:a9:1b:b3:d9:
         01:06:5f:22:4c:be:c4:38:85:ba:86:09:58:2c:16:dc:f0:16:
         51:d6:c8:c2:a2:49:65:ba:01:de:22:b1:aa:f5:62:d5:bc:43:
         46:0d:8a:9d:e7:91:78:28:35:be:2c:52:a4:75:50:0b:8e:da:
         62:c0:3b:51:87:cc:be:05:6e:68:08:33:3b:16:e4:09:fa:f7:
         80:76:c2:a7:b7:7a:e8:f8:c3:31:ad:04:11:84:c4:75:db:3f:
         fb:ae:e1:81:ff:71:a0:38:86:10:7c:77:a6:54:4f:e7:ea:a4:
         9f:f4:81:44:23:f9:6b:52:d7:77:b3:20:40:0a:0a:67:49:b1:
         bb:d8:47:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CZfeuoHJui5LL3hvPguoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2I5MGZhYWM1ZWZjZjkzMTk1NjE5ZGExNmYzYTQ3ZWZm
ZTk5ZmUwHhcNMjYwMzI5MTAwMDIzWhcNMjYwMzMwMTAwMDIzWjAzMTEwLwYDVQQD
EyhhYjBkYTQ1YzM0OTc5NGZhM2UwOGQ2NDhiZThkMGNiYzhlMjk0ZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuW2LX4GNC0JFAAGkajnfF4gJg15k
DYRd0thlwd8fcYFd2Iz2DKKyQaHeK8vb6hWiQzlUDg4jszHs0vsT/bALn3N4GX45
M+YsIPtFFCGjWxU4UFEQ7Jvrq8LabUBNuTqKPBWxIiwK2J2AqYL3r4mEjOx1sUBr
lgLAeDUNBVmPF23L7edxlkwfGQB2rnWwN4XnDli7lppOMN3R4yWA+rTYGAHfEiFz
K6j8hO9FXl0VGdaxu0Ixe8gT85YL3ELN6saywg2RYUctGmZz/wrC6UHCD91zYbBo
tZ6FNhbSrRwyNzC442jIfWZHMNPmhpspyDJ7A2vF696XycHuwc1kxt9VFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsNpFw0l5T6PgjWSL6NDLyOKU7RMB8GA1UdIwQY
MBaAFME7kPqsXvz5MZVhnaFvOkfv/pn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgt
YzEzNWE2ZWRiODYxLzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgtYzEzNWE2ZWRiODYx
LzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiRBQZoS
i+ZFEmMjxLafmt063FVmWZUpBOeWPSxN0p1ceRoaQ5QKcx+2auWzdt6h6BtJrpCg
lINOZvf+/ui8eX518w5sE75mHMYaM1ALqb4npsh+Xj7ST9xt4r01i404coyl5kjT
wDJDbYhWKGTlRuCJFuU3Adhg+IapG7PZAQZfIky+xDiFuoYJWCwW3PAWUdbIwqJJ
ZboB3iKxqvVi1bxDRg2KneeReCg1vixSpHVQC47aYsA7UYfMvgVuaAgzOxbkCfr3
gHbCp7d66PjDMa0EEYTEdds/+67hgf9xoDiGEHx3plRP5+qkn/SBRCP5a1LXd7Mg
QAoKZ0mxu9hHPw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:59 2026 by rpki-client