Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
File:                     Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft (raw, json)
Hash identifier:          xZexUaIxiGjrHGWyi0HOS3QJFvz+u6qyhwWbwZ6eyMI=
Subject key identifier:   A4:F8:85:10:C9:9E:35:F9:1D:83:E1:55:37:55:39:4D:40:78:50:CF
Authority key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74
Certificate issuer:       /CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
Certificate serial:       019D37F7401D9082800F94014E62F9CCCEB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 05:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:43 +0000
Files and hashes:         1: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl (hash: VyIX8R6Fz8SEHS0ij+1aXtN+uohv5VQC5OQD/ySe1WU=)
                          2: t9yzXj9IkLEOWLc9xcwlhBFkG8g.roa (hash: +W8dztnmYQdC4cm96ghABWrij2U/BNP7WSR+9tFEBZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:40:1d:90:82:80:0f:94:01:4e:62:f9:cc:ce:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
        Validity
            Not Before: Mar 29 05:00:43 2026 GMT
            Not After : Mar 30 05:00:43 2026 GMT
        Subject: CN=a4f88510c99e35f91d83e1553755394d407850cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:e4:c9:95:72:e6:29:70:34:40:bd:b4:2b:
                    26:3b:4a:3b:72:70:e2:69:93:bd:fb:40:09:05:27:
                    27:15:9c:96:44:fb:da:40:ae:3b:1c:93:c7:ad:17:
                    a5:21:b5:64:15:96:93:9e:0f:bb:98:ee:cc:59:c7:
                    a1:4b:34:b6:66:02:41:f6:d0:78:3d:97:d5:e8:19:
                    95:fb:85:37:22:b8:ff:f9:e8:1d:ac:e5:4b:29:e3:
                    9c:66:10:69:b4:12:51:d3:00:a4:59:d6:61:e2:79:
                    94:05:3e:42:3d:1a:34:a1:f8:39:6d:bf:ad:bd:55:
                    f2:80:81:8e:45:40:37:2f:bb:77:c0:ca:63:44:1a:
                    6e:81:d8:bc:17:c0:27:ad:25:e1:a3:13:c8:14:47:
                    c8:c6:20:69:81:4e:97:73:9d:30:8e:10:06:94:85:
                    31:da:05:21:a0:35:c2:6c:aa:c6:37:6d:1d:db:0a:
                    40:aa:7d:90:59:36:01:17:5c:d2:6c:ba:30:c1:8c:
                    45:84:eb:e6:9a:ca:20:aa:05:ed:4c:f0:6c:96:9b:
                    fb:6b:47:2a:3b:88:90:67:83:4b:05:95:62:ff:e2:
                    3c:4f:c6:12:45:bc:76:86:34:0b:3c:8c:b3:81:9f:
                    88:96:ff:87:53:4c:b5:1e:66:06:2c:fb:45:21:35:
                    f0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F8:85:10:C9:9E:35:F9:1D:83:E1:55:37:55:39:4D:40:78:50:CF
            X509v3 Authority Key Identifier:
                keyid:5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:9f:c9:16:2d:73:2c:3c:bb:e8:c6:75:3d:95:9b:10:dc:
         f9:75:6b:25:e1:24:88:5e:8b:5f:14:d3:53:0a:c0:9a:11:96:
         a5:b4:94:53:04:6d:72:17:74:a0:74:85:13:20:4d:a8:c9:fa:
         24:ef:c7:bf:21:93:11:7d:35:b6:86:b8:f8:64:22:fc:21:68:
         14:5d:c3:5b:5e:d0:6e:09:2f:3a:98:c4:44:1f:00:df:9a:c1:
         7f:66:b5:a9:2e:9e:4e:d9:52:07:88:2a:b1:25:78:d6:1b:db:
         e4:45:ac:e0:af:0b:31:c4:75:67:8b:40:4e:01:d8:5e:c7:ed:
         79:af:0c:62:7c:15:ca:49:21:73:99:f4:70:2c:c8:c1:22:c7:
         c1:ca:c9:10:9b:af:35:3a:03:e3:80:ad:1e:87:6f:8b:43:b4:
         e3:75:f6:60:8a:d8:13:fa:a9:09:24:73:a8:87:e6:63:10:3f:
         65:5b:b6:2c:1c:92:dc:08:a2:3c:9d:35:cd:12:a6:87:7d:2a:
         d3:b7:08:02:9a:64:ac:ea:c2:c2:35:80:d6:e5:36:d8:5e:02:
         38:0c:b7:ba:d6:4d:8d:36:98:61:b5:97:24:cc:1a:23:97:5f:
         8f:6c:f5:9e:0e:c1:ae:71:ad:9b:09:10:73:8f:dc:b8:6f:b2:
         92:25:e8:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0390AdkIKAD5QBTmL5zM64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOGY4MTM2NmZmYzQzYzcxZjViYjUyMWY4MTUwMTc2MGVi
ZWIwNzQwHhcNMjYwMzI5MDUwMDQzWhcNMjYwMzMwMDUwMDQzWjAzMTEwLwYDVQQD
EyhhNGY4ODUxMGM5OWUzNWY5MWQ4M2UxNTUzNzU1Mzk0ZDQwNzg1MGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAXkyZVy5ilwNEC9tCsmO0o7cnDi
aZO9+0AJBScnFZyWRPvaQK47HJPHrRelIbVkFZaTng+7mO7MWcehSzS2ZgJB9tB4
PZfV6BmV+4U3Irj/+egdrOVLKeOcZhBptBJR0wCkWdZh4nmUBT5CPRo0ofg5bb+t
vVXygIGORUA3L7t3wMpjRBpugdi8F8AnrSXhoxPIFEfIxiBpgU6Xc50wjhAGlIUx
2gUhoDXCbKrGN20d2wpAqn2QWTYBF1zSbLowwYxFhOvmmsogqgXtTPBslpv7a0cq
O4iQZ4NLBZVi/+I8T8YSRbx2hjQLPIyzgZ+Ilv+HU0y1HmYGLPtFITXwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKT4hRDJnjX5HYPhVTdVOU1AeFDPMB8GA1UdIwQY
MBaAFFqPgTZv/EPHH1u1IfgVAXYOvrB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMt
ODAyZDA5Y2ZjODM1LzEvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMtODAyZDA5Y2ZjODM1
LzEvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAig2fyRYt
cyw8u+jGdT2VmxDc+XVrJeEkiF6LXxTTUwrAmhGWpbSUUwRtchd0oHSFEyBNqMn6
JO/HvyGTEX01toa4+GQi/CFoFF3DW17QbgkvOpjERB8A35rBf2a1qS6eTtlSB4gq
sSV41hvb5EWs4K8LMcR1Z4tATgHYXsftea8MYnwVykkhc5n0cCzIwSLHwcrJEJuv
NToD44CtHodvi0O043X2YIrYE/qpCSRzqIfmYxA/ZVu2LByS3AiiPJ01zRKmh30q
07cIAppkrOrCwjWA1uU22F4COAy3utZNjTaYYbWXJMwaI5dfj2z1ng7BrnGtmwkQ
c4/cuG+ykiXo7Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:28 2026 by rpki-client