Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
File:                     WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json)
Hash identifier:          4h/Oa+bd+zz8C49eQs7+JqdRp6d8BtBQVWLTB6dhjWw=
Subject key identifier:   EA:0C:C9:95:98:3A:97:70:23:6C:38:10:52:E5:BF:5B:B4:E9:F7:2D
Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E
Certificate issuer:       /CN=5a5125afc5ec978b2a321291c2a5570fe619159e
Certificate serial:       01A08A552D010E1CD16A21B7504129CEB689
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
Manifest number:          19DC
Signing time:             Thu 10 Sep 2026 08:00:32 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:32 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:32 +0000
Files and hashes:         1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: hWSaRYTq5Ab1AS9tfhebubtjjcATYh0IhttIc+fmiko=)
                          2: qTJkke2DmFNJyiG7jfJcZx_vW34.roa (hash: vKcHwa2tV+EZb/fHgrN6A1horjD1vZRSzMun772SEGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:2d:01:0e:1c:d1:6a:21:b7:50:41:29:ce:b6:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e
        Validity
            Not Before: Sep 10 08:00:32 2026 GMT
            Not After : Sep 11 08:00:32 2026 GMT
        Subject: CN=ea0cc995983a9770236c381052e5bf5bb4e9f72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f2:a0:bf:51:06:14:7e:d1:08:32:e2:ff:d9:
                    25:1b:87:3a:00:0f:d1:06:d9:02:e8:a3:30:95:58:
                    cc:7e:43:aa:4c:59:a4:02:fb:91:4a:0b:37:09:b7:
                    38:53:f8:84:12:9d:76:b1:09:34:f8:1f:f1:cf:6c:
                    50:7f:f2:13:ca:ff:15:93:47:ad:a3:75:13:cc:42:
                    31:a8:22:11:71:34:21:90:fa:ea:23:5e:7c:77:d9:
                    2d:fa:7b:0b:c8:79:b3:84:2a:92:1b:a4:e5:eb:f5:
                    24:f0:a8:eb:8d:14:a5:c2:1d:97:82:2b:44:ad:27:
                    d8:0f:4a:9a:21:1a:f7:66:a7:ce:00:9c:9c:1d:96:
                    4a:17:8f:de:b5:07:63:2b:23:c1:ef:f4:4d:9f:74:
                    d3:30:f4:e3:d2:a4:b2:fa:f7:a8:9c:44:e7:8a:26:
                    c7:1c:74:a2:63:23:90:ad:90:60:38:6a:9f:41:61:
                    38:b9:e0:61:f0:e3:d0:2d:4a:1f:c5:e5:f9:da:6c:
                    b8:ba:8c:70:4f:89:d0:84:2c:d8:28:8c:2a:25:43:
                    f4:e4:7a:c3:d7:44:ce:c2:de:c5:fe:95:7c:17:2a:
                    aa:f2:b8:a5:6f:5f:33:65:47:0c:8c:ca:79:7d:21:
                    c7:0d:78:6d:53:40:6c:6c:20:16:55:ff:4e:ed:c4:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0C:C9:95:98:3A:97:70:23:6C:38:10:52:E5:BF:5B:B4:E9:F7:2D
            X509v3 Authority Key Identifier:
                keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:68:4f:73:91:4d:a3:ee:5a:60:df:f2:41:d5:83:15:61:bf:
         9e:54:60:0a:20:a9:41:31:ed:4f:40:46:b7:4e:b8:3c:1d:49:
         0a:6e:d9:51:fd:8b:66:7c:30:8f:13:ea:7b:e0:b3:66:fa:ca:
         f9:32:4e:96:0f:1e:e1:7c:1a:05:a3:46:9b:2c:6a:4b:84:8e:
         e5:23:88:8e:f2:de:36:52:38:90:43:f4:e2:b4:9d:25:24:70:
         9c:0f:d0:b7:f9:a8:99:a7:fa:0b:0c:82:84:75:28:68:f1:d5:
         87:dd:f0:67:59:27:77:04:8f:66:6c:40:ed:8e:87:5b:aa:c3:
         49:fc:3c:d1:a8:39:a1:c4:c9:bb:a1:bb:62:93:f8:95:d5:64:
         57:2f:81:f4:c3:34:6e:63:15:f0:c7:6d:3e:84:69:f4:4d:13:
         59:82:a5:e1:87:20:18:bd:67:80:13:58:12:9a:cb:3f:ca:56:
         54:a1:d4:b2:76:c6:36:cf:5f:54:25:cc:c7:71:66:62:7a:8b:
         4c:ac:53:41:5c:5b:92:51:73:e0:4c:24:f1:a5:7d:ba:9a:24:
         46:e7:6e:5f:c7:1b:04:b4:a0:2d:d4:48:32:3c:85:07:3e:5e:
         fe:70:4f:7c:f5:a8:dc:fc:1d:1d:08:16:9c:20:a9:b7:ac:31:
         c7:5f:d7:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVS0BDhzRaiG3UEEpzraJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNTEyNWFmYzVlYzk3OGIyYTMyMTI5MWMyYTU1NzBmZTYx
OTE1OWUwHhcNMjYwOTEwMDgwMDMyWhcNMjYwOTExMDgwMDMyWjAzMTEwLwYDVQQD
EyhlYTBjYzk5NTk4M2E5NzcwMjM2YzM4MTA1MmU1YmY1YmI0ZTlmNzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfKgv1EGFH7RCDLi/9klG4c6AA/R
BtkC6KMwlVjMfkOqTFmkAvuRSgs3Cbc4U/iEEp12sQk0+B/xz2xQf/ITyv8Vk0et
o3UTzEIxqCIRcTQhkPrqI158d9kt+nsLyHmzhCqSG6Tl6/Uk8KjrjRSlwh2XgitE
rSfYD0qaIRr3ZqfOAJycHZZKF4/etQdjKyPB7/RNn3TTMPTj0qSy+veonETniibH
HHSiYyOQrZBgOGqfQWE4ueBh8OPQLUofxeX52my4uoxwT4nQhCzYKIwqJUP05HrD
10TOwt7F/pV8Fyqq8rilb18zZUcMjMp5fSHHDXhtU0BsbCAWVf9O7cSosQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoMyZWYOpdwI2w4EFLlv1u06fctMB8GA1UdIwQY
MBaAFFpRJa/F7JeLKjISkcKlVw/mGRWeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMt
YTZmYjRkZjU0ODFlLzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMtYTZmYjRkZjU0ODFl
LzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABGhPc5FN
o+5aYN/yQdWDFWG/nlRgCiCpQTHtT0BGt064PB1JCm7ZUf2LZnwwjxPqe+CzZvrK
+TJOlg8e4XwaBaNGmyxqS4SO5SOIjvLeNlI4kEP04rSdJSRwnA/Qt/momaf6CwyC
hHUoaPHVh93wZ1kndwSPZmxA7Y6HW6rDSfw80ag5ocTJu6G7YpP4ldVkVy+B9MM0
bmMV8MdtPoRp9E0TWYKl4YcgGL1ngBNYEprLP8pWVKHUsnbGNs9fVCXMx3FmYnqL
TKxTQVxbklFz4Ewk8aV9upokRuduX8cbBLSgLdRIMjyFBz5e/nBPfPWo3PwdHQgW
nCCpt6wxx1/XAA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 15:37:05 2026 by rpki-client