Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
File:                     W3Vj2-xwud00kXPXp3mNRDSg08Y.mft (raw, json)
Hash identifier:          NDv5oSNFZZeqUOAZrqAfZyZcivjJylT7nBSvrCwI7Kw=
Subject key identifier:   A9:3C:92:6A:DC:CD:B2:52:4C:23:A5:B7:53:22:5E:13:1A:CC:2E:C6
Authority key identifier: 5B:75:63:DB:EC:70:B9:DD:34:91:73:D7:A7:79:8D:44:34:A0:D3:C6
Certificate issuer:       /CN=5b7563dbec70b9dd349173d7a7798d4434a0d3c6
Certificate serial:       019D25F1FE844745E0345DF44FBB7C0FE3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3Vj2-xwud00kXPXp3mNRDSg08Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
Manifest number:          02D7
Signing time:             Wed 25 Mar 2026 17:01:49 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:49 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:49 +0000
Files and hashes:         1: W3Vj2-xwud00kXPXp3mNRDSg08Y.crl (hash: M1C4pr4ONTdxIRpRepyqawdK/OFBQyO+4OWPhihaGrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3Vj2-xwud00kXPXp3mNRDSg08Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:fe:84:47:45:e0:34:5d:f4:4f:bb:7c:0f:e3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7563dbec70b9dd349173d7a7798d4434a0d3c6
        Validity
            Not Before: Mar 25 17:01:49 2026 GMT
            Not After : Mar 26 17:01:49 2026 GMT
        Subject: CN=a93c926adccdb2524c23a5b753225e131acc2ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a4:ef:a5:76:d1:69:b1:8f:c5:46:3f:ec:c8:
                    44:e4:df:13:6b:1e:8a:cb:1d:fd:47:61:1c:10:da:
                    9d:9a:13:48:9c:70:c6:54:c5:88:ab:ac:6b:30:b9:
                    c5:4c:7d:b2:11:ae:a3:49:f2:21:6d:8b:8c:90:ef:
                    1f:4e:0a:06:c0:f1:4e:af:6e:f4:da:00:4b:1f:da:
                    b0:49:60:23:9d:06:26:3d:8d:47:1b:d0:2f:30:3b:
                    13:13:31:44:bd:96:2f:08:79:e1:dc:f4:4d:7f:93:
                    d8:50:c5:94:cf:e9:92:95:18:31:0c:bb:ef:f3:24:
                    14:3e:43:ac:4d:9a:10:e8:d0:87:ce:14:4b:67:0d:
                    27:48:c2:05:0f:1f:0b:ce:fc:12:61:f0:a3:a4:cc:
                    f7:3c:34:e0:9c:60:7a:63:4c:b7:8e:c2:d7:e9:57:
                    c4:bc:23:19:3c:2b:90:38:9b:fb:f9:51:da:ba:73:
                    bb:06:08:60:69:03:d6:9b:e0:86:68:c9:88:5a:fd:
                    ba:11:24:26:bd:66:e4:db:41:b6:e0:ec:b1:01:0a:
                    d0:81:8b:8f:ae:03:37:43:56:03:1b:72:4a:c8:e8:
                    53:91:61:ae:6e:5e:58:08:f8:f5:ed:4c:0f:00:40:
                    c1:58:5e:d8:f1:27:c5:82:4a:46:70:3c:10:02:70:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3C:92:6A:DC:CD:B2:52:4C:23:A5:B7:53:22:5E:13:1A:CC:2E:C6
            X509v3 Authority Key Identifier:
                keyid:5B:75:63:DB:EC:70:B9:DD:34:91:73:D7:A7:79:8D:44:34:A0:D3:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3Vj2-xwud00kXPXp3mNRDSg08Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/56b573-c7bb-403b-a36c-1a6d05569577/1/W3Vj2-xwud00kXPXp3mNRDSg08Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:02:cd:ca:c8:68:c1:7e:8f:8f:dd:1c:9c:b2:69:8e:f8:7f:
         41:5b:d3:27:f6:e1:53:46:38:8e:cc:9d:25:e3:29:35:2f:ab:
         13:0f:cc:f0:3a:d2:6d:b7:59:93:04:4c:f7:98:cf:3e:30:52:
         e4:76:da:17:fe:b4:ce:d3:31:78:7a:03:17:fc:d1:71:90:2e:
         9c:6b:c3:32:32:f7:7c:3a:54:94:e2:d0:e8:37:e4:38:a4:24:
         39:53:9d:a5:34:56:c2:cb:39:f4:0b:6b:de:a3:78:98:ec:dd:
         68:37:3e:d9:4b:1c:59:c6:7a:77:0e:64:f7:77:79:68:b3:bb:
         69:0b:0d:dd:42:f3:a2:91:13:7e:05:03:98:11:c3:bd:a8:fb:
         a7:5a:79:e2:1b:e1:e0:fa:a6:86:88:3c:ff:01:13:95:72:02:
         79:c5:93:4f:e8:6d:b5:51:bd:e4:51:71:4a:d8:39:28:8b:03:
         ab:2b:0d:f6:76:e8:67:77:76:3c:a6:b6:58:7e:e1:db:7f:46:
         c7:3a:8e:9a:73:ea:99:5e:ac:e6:e0:50:83:9a:76:01:54:35:
         2d:26:75:60:d7:57:a7:56:b3:ed:17:9f:7c:f7:61:77:70:73:
         91:db:7a:12:9e:58:06:c1:23:46:bf:f0:98:ac:77:96:cc:24:
         7f:cf:d2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:51:09 2026 by rpki-client