Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
File:                     WXWCvD8LrbZhpp-5pIOzfskFgn4.mft (raw, json)
Hash identifier:          Zh4eCuZO5LJ5nbe5C/6nvzr6e5MLj7QJm6Cu81bnPDc=
Subject key identifier:   35:AA:E2:FA:84:71:C2:BF:59:5B:6B:27:A7:C1:2C:79:6A:11:D6:D5
Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
Certificate issuer:       /CN=597582bc3f0badb661a69fb9a483b37ec905827e
Certificate serial:       019D2AA96D72B5674C3E88F2350B7F1F29D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
Manifest number:          0A1C
Signing time:             Thu 26 Mar 2026 15:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 15:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 15:00:39 +0000
Files and hashes:         1: BvmBDu9gUylydSFpdWFHr27-_DY.roa (hash: d2SU0ny5FTlBkZIC6ubpt8gy5sJqNewyGcnF2XElBAw=)
                          2: WXWCvD8LrbZhpp-5pIOzfskFgn4.crl (hash: SoT/uCis0DnHtxId1yYEbGpKicR28Z9kv4pCfvjcAbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:6d:72:b5:67:4c:3e:88:f2:35:0b:7f:1f:29:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e
        Validity
            Not Before: Mar 26 15:00:39 2026 GMT
            Not After : Mar 27 15:00:39 2026 GMT
        Subject: CN=35aae2fa8471c2bf595b6b27a7c12c796a11d6d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ba:95:81:bc:bc:2f:3f:fe:d7:1b:59:71:ae:
                    f2:3f:70:f5:70:e1:20:62:ce:3c:9e:30:d8:9a:e4:
                    6d:6f:d1:44:d3:95:9d:98:aa:3b:0b:80:64:78:09:
                    dc:9a:f8:0b:93:1e:7b:43:f5:69:2f:30:32:f6:28:
                    cb:4c:68:02:33:07:37:4b:7b:fe:d6:7a:76:84:80:
                    f4:55:e8:c1:41:36:38:f2:b4:9a:2f:37:a4:01:b1:
                    a4:12:17:02:57:a6:4a:b1:ef:b7:a2:ee:78:c2:43:
                    b9:7b:44:8d:83:8c:1d:8d:a7:a9:e7:b4:76:93:e6:
                    38:bb:51:e9:c3:ee:c5:03:8f:a8:67:e7:3a:f8:7c:
                    fc:cf:87:13:91:f0:11:5c:e9:c0:b5:5e:fd:1f:5a:
                    ca:e6:60:90:b7:3d:af:38:30:31:39:2e:11:ad:5b:
                    1c:bf:d8:62:60:43:83:81:0b:8a:9e:cc:eb:01:8e:
                    83:81:45:02:54:e1:c8:80:82:51:6f:2d:fc:85:c3:
                    95:ca:7e:ab:c8:1d:1d:03:53:46:2c:ec:6f:8c:73:
                    f0:a2:4d:da:be:c5:09:bb:85:f2:0c:ae:d6:17:de:
                    06:62:2a:69:3a:13:b0:50:a8:b4:68:13:56:3e:69:
                    23:9c:28:25:de:43:9f:d0:dd:27:9d:fb:f3:ed:87:
                    8b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:E2:FA:84:71:C2:BF:59:5B:6B:27:A7:C1:2C:79:6A:11:D6:D5
            X509v3 Authority Key Identifier:
                keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:76:1a:81:d2:ae:94:8f:08:f6:a2:e2:7a:9c:2c:25:b7:c0:
         f1:7e:7b:f0:36:7f:02:94:42:c9:7f:58:0f:4f:27:40:d3:44:
         33:b5:51:ed:bc:e6:23:67:b5:a1:a9:41:7b:be:d3:54:fa:0f:
         4f:d2:08:7f:0a:6b:c4:af:d2:20:d2:9e:97:52:72:5e:83:64:
         f8:f3:fa:ee:e0:da:5d:d2:d8:3c:88:d4:bb:cd:50:9b:d1:9f:
         35:c6:f9:43:59:cf:68:cf:b5:3b:6a:20:d4:af:da:d2:eb:fb:
         49:75:f5:18:a1:ae:a2:c5:19:e0:01:22:f8:48:4d:f8:85:1f:
         c0:cf:d9:43:e8:06:3d:9c:c9:a2:1a:49:3e:04:3a:92:13:e5:
         d6:39:c5:3e:e1:2a:25:7e:70:fd:67:c5:cc:ca:77:33:b9:a2:
         05:f9:a4:e7:c5:91:b3:a6:01:ae:09:77:84:3d:5c:72:00:ec:
         ed:36:b1:17:e1:e3:61:87:3f:a9:f2:15:13:e7:db:52:a6:4f:
         3b:05:97:2a:c3:c6:56:b3:ce:e8:aa:64:00:5c:71:39:9a:03:
         3b:e8:f4:9c:b4:c6:2c:6e:92:0e:49:16:df:f1:b8:d4:46:3d:
         fe:26:8f:9b:0a:a2:62:3b:d6:e9:4f:d3:7d:c4:0e:7b:0c:bb:
         cd:64:bd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:23 2026 by rpki-client