Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
File:                     w6VSge-EuxEeM-zHwAiJSP1KjbI.mft (raw, json)
Hash identifier:          kJACcjNVpdmiiQbeLQjAymk1ImY0IhDyOdplpddK0Oc=
Subject key identifier:   E8:BB:95:E4:F1:19:D9:95:95:B4:64:43:01:0B:A4:05:98:AD:9C:6D
Authority key identifier: C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2
Certificate issuer:       /CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
Certificate serial:       019D2695FB1C28141A2EA4EA51EE8F090653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
Manifest number:          1889
Signing time:             Wed 25 Mar 2026 20:00:56 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:56 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:56 +0000
Files and hashes:         1: GmCafxAEUvOXy6Xvita-Fy-S--0.roa (hash: Ifx+oHJPGcIANhZeyT+6sYmJnu849Sxqjk3P1GJE7vg=)
                          2: w6VSge-EuxEeM-zHwAiJSP1KjbI.crl (hash: jnPrFe0jwe52TEnWeTJZm3C/guHMl+Xex4qKlbprk4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:fb:1c:28:14:1a:2e:a4:ea:51:ee:8f:09:06:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a55281ef84bb111e33ecc7c0088948fd4a8db2
        Validity
            Not Before: Mar 25 20:00:56 2026 GMT
            Not After : Mar 26 20:00:56 2026 GMT
        Subject: CN=e8bb95e4f119d99595b46443010ba40598ad9c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:08:0b:57:30:50:91:e5:61:ae:99:14:58:77:
                    85:37:3c:80:24:84:dd:39:2b:6f:6e:47:5f:54:96:
                    3d:96:9e:0a:05:96:a5:bc:02:b3:3d:dd:e5:ba:b1:
                    17:80:3a:16:3c:e3:63:2e:7c:99:68:60:4f:9d:cc:
                    49:a8:b3:71:57:dc:15:ff:7f:11:8c:87:f3:1f:8c:
                    5b:f5:0a:da:c1:3f:02:98:62:45:2a:ca:90:59:41:
                    f7:b0:cf:c9:f3:fe:3f:78:47:38:f1:9f:69:b1:be:
                    2e:4a:99:7b:df:87:fe:5f:c2:a0:80:e4:df:8b:22:
                    2d:09:b3:f8:35:7b:c9:1d:81:a5:20:b0:65:d2:62:
                    bf:0e:67:de:fb:fd:ff:ee:64:1f:cf:81:4e:b2:f5:
                    d5:bb:7c:88:0f:78:6d:aa:74:5e:5e:94:48:b8:3f:
                    2a:37:b3:ad:a8:a9:b2:1e:78:59:b1:65:e1:7f:55:
                    49:99:ee:1b:76:a7:a9:83:2b:16:ee:86:60:e9:99:
                    e3:67:31:cb:c7:22:b1:3d:53:cf:11:13:e6:02:19:
                    b4:07:d5:dc:74:4e:03:e6:e9:62:8a:d9:de:04:9f:
                    1f:39:0b:e4:78:c2:8c:f6:ed:7e:32:f2:16:74:64:
                    e7:b6:35:a1:00:43:a2:cb:97:0e:60:86:24:d7:13:
                    59:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:BB:95:E4:F1:19:D9:95:95:B4:64:43:01:0B:A4:05:98:AD:9C:6D
            X509v3 Authority Key Identifier:
                keyid:C3:A5:52:81:EF:84:BB:11:1E:33:EC:C7:C0:08:89:48:FD:4A:8D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6VSge-EuxEeM-zHwAiJSP1KjbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/eba747-4ddc-4249-8ad2-7f8cb85ffdb6/1/w6VSge-EuxEeM-zHwAiJSP1KjbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:77:a3:a1:34:8b:7f:59:40:54:7e:c0:37:e1:0c:bd:79:35:
         ea:93:85:d9:19:dc:0f:14:59:2f:c5:41:3f:71:e7:e5:d5:40:
         2a:9e:a2:ff:6a:d2:cc:89:85:ed:99:3f:ad:fc:57:ce:79:55:
         c3:3a:48:9c:bf:08:96:88:09:39:df:c3:c2:88:f6:77:13:3d:
         7a:9b:ec:61:48:77:2f:f6:11:aa:37:e7:4c:03:32:4e:eb:aa:
         d4:b9:ae:bb:5e:fb:49:5f:05:83:f6:65:62:1e:84:e0:c4:15:
         de:6e:cc:fd:85:d0:01:c8:07:73:40:7d:5c:6a:f7:39:31:15:
         af:40:ec:55:c6:c0:d6:52:0b:bc:a9:93:41:c2:16:98:88:09:
         b6:e7:8e:c4:cd:3f:06:ca:b2:f7:1b:f0:fc:36:50:b0:4f:13:
         36:28:e0:5d:3b:86:15:2c:c3:ef:07:5f:b1:2d:20:72:5e:8c:
         44:5c:3a:c5:4b:61:90:4e:cb:02:40:ec:48:df:2a:f7:2d:1a:
         a0:2e:1d:e2:29:dd:66:77:c4:90:b5:3a:47:71:ce:5c:d2:82:
         1e:a4:36:f3:ea:3d:85:1e:04:80:c9:04:0c:25:79:06:46:29:
         f4:1a:b9:d8:0b:3f:51:d5:39:53:ec:c5:f5:c6:6a:c9:d1:2b:
         87:2f:c0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:13 2026 by rpki-client