Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File:                     Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier:          6c11UlQt3goLkS04ynHOnbLTWP3oRsBosKfll7sAD80=
Subject key identifier:   DF:D1:31:65:32:DE:6B:3D:96:8B:A4:24:98:CE:69:6A:93:F3:9A:41
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer:       /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial:       019D24DF28EA7D9827AC00BEF675CD0C59F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 12:01:37 +0000
Manifest this update:     Wed 25 Mar 2026 12:01:37 +0000
Manifest next update:     Thu 26 Mar 2026 12:01:37 +0000
Files and hashes:         1: SjJDxlEOZqFpr4sE3EWgK4CYSjA.asa (hash: JVWvRpi7Ek1sEO/RRAifq7UkZoIwmRoiSo82BrozbkY=)
                          2: UzwdLveCar1NWysEG_gC0gmYs3s.roa (hash: etmZBELJl6TLC8YBGOya/Pd8fe5m9VWeBzGftoSy7jE=)
                          3: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: OuFZDf1/BK9IkksvD0ygSMWG09AkUVRe7X0N4H1UgFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:24:df:28:ea:7d:98:27:ac:00:be:f6:75:cd:0c:59:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
        Validity
            Not Before: Mar 25 12:01:37 2026 GMT
            Not After : Mar 26 12:01:37 2026 GMT
        Subject: CN=dfd1316532de6b3d968ba42498ce696a93f39a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f3:80:90:c1:60:15:15:6b:68:86:e7:69:41:
                    07:3e:28:c8:68:40:e9:a2:d8:e8:d7:ef:a9:58:eb:
                    75:d5:87:73:af:c0:76:9f:cf:9b:56:4d:32:26:b3:
                    1c:2e:83:08:81:3f:c5:fd:b2:20:74:c6:ac:a1:2e:
                    0d:ba:5f:38:4c:49:ed:d2:d2:de:38:be:37:a1:40:
                    26:cf:08:71:93:61:6f:3f:d8:7c:76:10:3b:c0:bd:
                    35:2e:81:92:b5:47:86:ce:ce:c2:b8:12:05:89:fa:
                    47:83:85:af:e8:fc:e2:f3:33:22:ee:ff:dc:6f:18:
                    ae:e9:fc:b0:08:66:10:c9:23:24:e4:dc:5a:60:45:
                    87:05:6c:42:64:27:a5:28:93:b2:49:b6:14:08:ec:
                    33:00:f0:b2:cb:5d:af:4e:3d:f5:53:bc:f6:37:28:
                    54:8c:22:19:48:e9:59:82:c6:b4:26:f8:e7:a3:34:
                    53:74:54:c2:d8:83:28:34:ae:a6:a9:a7:f2:ee:e8:
                    41:0c:0e:6b:62:2b:5d:a6:cb:11:75:be:5b:47:6a:
                    26:88:bc:9e:59:6e:81:15:73:6e:48:01:6f:53:83:
                    f8:f2:fa:41:07:a9:23:95:e7:e2:c0:a7:f3:f2:62:
                    f7:f3:16:b7:8f:c8:ca:c6:db:ca:87:c0:58:d8:63:
                    6f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D1:31:65:32:DE:6B:3D:96:8B:A4:24:98:CE:69:6A:93:F3:9A:41
            X509v3 Authority Key Identifier:
                keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:00:da:f0:2b:53:4c:9e:05:70:c8:be:f5:af:a8:12:8f:7d:
         83:5b:b1:6b:30:74:04:b0:b0:3f:af:7c:23:16:cc:d8:c1:b7:
         7a:a4:50:0b:5a:4f:0d:45:50:aa:2f:3c:96:4c:bc:3a:06:f3:
         4c:0f:ad:82:4e:35:be:59:a3:95:25:6c:d3:e9:8f:85:0d:a3:
         81:c2:59:66:ae:fe:50:ee:a5:a4:69:68:5d:29:55:ca:fd:21:
         84:b4:ec:42:7b:3a:77:02:93:3c:58:46:0a:a6:d7:71:c0:ae:
         3e:e4:29:77:c1:a9:67:b0:df:0f:74:b3:af:50:63:74:56:65:
         40:7c:b8:27:79:36:4c:71:2a:e0:4f:fb:45:b9:29:27:5a:23:
         9d:8f:5d:c5:74:45:fa:d1:ad:11:bc:ab:00:ac:04:d4:2a:9e:
         8a:27:58:42:6d:f5:fa:04:d8:25:38:93:96:fc:75:e4:0d:66:
         8f:33:8e:04:00:4b:91:a6:6f:ed:d9:97:1d:9f:5c:89:01:5b:
         a3:84:9e:b9:df:9a:9e:7f:33:77:ea:b0:2c:1c:31:c5:2d:d2:
         92:2d:70:61:ea:8f:49:72:1a:00:a8:71:c2:10:37:2a:66:fa:
         9b:5f:0f:1a:5e:87:df:8f:a8:64:61:63:09:60:68:e9:1c:1e:
         7a:0f:57:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:20 2026 by rpki-client