Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
File:                     W1v_nUH3GfYmAMMtNBDduZ7Msww.mft (raw, json)
Hash identifier:          WEIFKc8wRRGokoWm4U9Byo0zwC8WzCeuCni8zVmTdng=
Subject key identifier:   73:C5:2C:6F:5E:97:8B:EB:97:B8:5E:2D:82:DA:BD:62:EC:2E:E1:C6
Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Certificate issuer:       /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Certificate serial:       019D27A93C735627706DC5F3EC018EF5EDD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
Manifest number:          12AD
Signing time:             Thu 26 Mar 2026 01:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:35 +0000
Files and hashes:         1: DIGCQbMEvX3S2DQ7VERDwaNmPgI.roa (hash: vrQP6CoSztwA+KPM4HiP9pP5zfEZ7MxF+t1JeC7UBYM=)
                          2: W1v_nUH3GfYmAMMtNBDduZ7Msww.crl (hash: NtgKZbKOu+RcRl9WdNVU4yAzOr4yF0d47Msu/FrDo14=)
                          3: ubWTx4s1XitX6PHQT8bII0Sr8VA.roa (hash: OkiBE/NUzkKV+xXfw7sua6AgcBbcZ2vjT39S06HxuOw=)
                          4: uhG95XF25QmjvzLstx1n9pIbB5g.roa (hash: nKE/loz1ortOdOeQYwJVvnlVW4oJD/w1eygAfQW6kko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:3c:73:56:27:70:6d:c5:f3:ec:01:8e:f5:ed:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
        Validity
            Not Before: Mar 26 01:01:35 2026 GMT
            Not After : Mar 27 01:01:35 2026 GMT
        Subject: CN=73c52c6f5e978beb97b85e2d82dabd62ec2ee1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:60:9b:8f:17:84:f8:ef:29:fb:cf:6a:81:
                    8e:89:b4:07:05:a6:6c:d2:0a:ba:a8:68:da:f3:2f:
                    d5:6b:e8:fc:a2:d4:5b:ef:8d:cf:00:3f:f1:62:12:
                    52:dd:3f:dc:16:7c:14:96:df:b3:9a:df:ed:df:ec:
                    8e:98:36:1b:96:f6:18:20:d6:b6:51:25:55:ce:27:
                    85:0e:84:57:6e:20:f4:25:1e:b9:20:9a:33:18:fa:
                    66:7c:1c:8c:bb:67:56:66:27:0d:45:3a:fa:0d:4d:
                    16:5e:72:d0:aa:06:78:1f:07:19:5d:a7:fb:be:aa:
                    9c:b7:36:ac:8b:a6:8d:fb:fd:74:37:79:3d:cb:cc:
                    5c:ac:3e:15:52:77:13:21:f3:f3:e7:ce:24:09:43:
                    9d:cf:ed:9b:e2:f8:f3:78:7b:ad:ec:fc:05:5d:81:
                    2c:c4:0f:83:a0:a5:71:a2:d5:ed:e3:49:11:84:b6:
                    d4:cb:99:3c:26:c1:1a:9c:ec:d2:3e:d0:48:6b:78:
                    23:82:c4:30:ae:55:48:f0:1d:e6:34:c3:34:fd:a4:
                    89:7a:97:2d:d9:f9:5d:5d:f2:dc:13:84:c6:f8:48:
                    5d:9e:95:03:ab:ba:e5:26:25:14:bb:2a:f0:cb:81:
                    12:1a:ac:d8:32:62:c7:4a:57:09:54:18:02:eb:20:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C5:2C:6F:5E:97:8B:EB:97:B8:5E:2D:82:DA:BD:62:EC:2E:E1:C6
            X509v3 Authority Key Identifier:
                keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f6:db:f2:6e:99:ba:0e:ab:26:63:bd:40:e0:1e:6e:e4:46:
         09:7d:6b:92:cd:8c:b4:23:d2:3e:2e:66:cb:2b:55:5a:24:63:
         d5:cc:76:77:14:9e:94:f5:a3:31:82:58:9a:9e:22:7e:69:63:
         95:8a:3f:5b:65:9f:37:e5:76:76:78:44:6b:d9:28:00:a5:a1:
         2c:4a:08:a0:f0:39:ea:a8:c3:f6:b0:e4:a7:5a:06:c5:eb:27:
         ef:cc:33:43:d1:1b:f7:8b:6f:3d:54:f0:7a:59:2e:cf:ef:80:
         08:b1:57:ae:4f:2c:87:be:a5:10:06:83:42:5c:22:04:b8:04:
         3b:39:95:01:08:47:35:97:01:db:1d:e6:3e:0b:19:2c:a4:17:
         9f:88:ea:a3:40:a6:70:61:d0:a8:b9:03:da:8f:e6:a5:f0:64:
         73:a7:db:2e:7e:8c:51:02:d8:0a:da:9b:79:cb:0f:d2:3f:4b:
         8a:32:e2:38:07:b6:7d:04:4f:36:97:9f:d5:d8:95:50:3e:86:
         2c:30:fe:02:20:76:bb:b6:30:21:fd:9c:ea:85:96:e5:83:af:
         92:5e:9f:41:a3:09:08:1f:e7:b9:f3:1c:b3:80:c7:ef:67:cd:
         8a:7f:b9:00:05:90:c2:fa:6a:72:82:d9:65:78:f8:46:d6:bb:
         35:f9:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:58:53 2026 by rpki-client