Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
File:                     vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft (raw, json)
Hash identifier:          H9Juyl1M2UEwgfvb4856zE+62VXkafPRNer6GwB3kJs=
Subject key identifier:   8E:8B:39:A9:89:64:86:A1:BA:2D:8F:F0:CC:E6:3F:52:14:5B:04:85
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Certificate issuer:       /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial:       019D25F191D9E5B6649BF112DEDE853B7499
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
Manifest number:          5E
Signing time:             Wed 25 Mar 2026 17:01:21 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:21 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:21 +0000
Files and hashes:         1: Cy4ORnC1-X4Fx6AyjRk3uSeT37M.asa (hash: hj9f3fuIAlpZ0je0ARycQth9i+/lW1QJkv0iiocWNgE=)
                          2: vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl (hash: OcMsupRyrLP52o5r3LuO9zuGUJTAEsTK3p23SWOBpkk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:91:d9:e5:b6:64:9b:f1:12:de:de:85:3b:74:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
        Validity
            Not Before: Mar 25 17:01:21 2026 GMT
            Not After : Mar 26 17:01:21 2026 GMT
        Subject: CN=8e8b39a9896486a1ba2d8ff0cce63f52145b0485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:73:74:de:f1:92:9b:c9:e1:52:95:f9:b3:1e:
                    8f:bf:ac:73:4a:9c:36:e5:86:48:be:92:3d:bb:1e:
                    77:ec:7c:34:9d:ef:8b:1d:d4:52:76:a1:44:4e:c6:
                    a4:1f:43:ce:11:02:34:93:e0:19:12:03:1e:fa:30:
                    83:ff:da:a9:9f:9b:b5:d8:d8:ec:ae:f2:db:5b:2b:
                    d5:36:1a:23:41:0a:34:44:28:f0:86:90:cf:9c:d1:
                    03:72:38:85:e1:7c:94:77:0d:c4:3c:f1:4c:d4:9d:
                    83:95:85:11:a1:2f:6f:65:e4:26:c2:75:6c:a3:2c:
                    6c:20:23:77:ca:74:60:d5:b8:86:6a:ac:13:ce:73:
                    05:84:7a:80:81:73:68:02:6d:84:d6:3e:14:cf:1b:
                    91:c2:16:bc:44:47:34:ad:a2:a6:a8:40:4d:e7:e6:
                    6c:4e:0e:df:fb:29:04:f4:11:92:c5:04:f1:ec:d7:
                    64:ec:d8:95:76:db:3b:fb:91:74:ae:39:fb:09:14:
                    d1:c1:e2:53:71:1a:36:53:87:5e:c8:81:37:3e:e3:
                    8f:08:16:5c:b9:c0:74:8a:cc:0e:cd:9c:17:db:9b:
                    d2:b6:d8:b6:db:3d:32:04:19:b2:fe:20:d0:d3:4a:
                    2f:a0:97:67:36:2a:46:c1:e0:35:44:4f:20:24:3c:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8B:39:A9:89:64:86:A1:BA:2D:8F:F0:CC:E6:3F:52:14:5B:04:85
            X509v3 Authority Key Identifier:
                keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2c:74:52:62:fe:c0:da:25:aa:77:67:af:50:86:09:a7:48:
         c0:e7:2c:8f:23:59:30:8c:0a:b8:80:99:e9:e1:76:65:55:3a:
         39:55:b1:79:a4:2d:46:c1:79:c0:f5:1f:89:cd:8f:ec:31:85:
         3f:c5:0d:70:44:2b:59:da:eb:e8:6e:9d:f5:65:f4:8f:b5:04:
         18:20:9e:8b:c0:74:98:87:33:9b:d7:f6:2c:23:67:96:23:c5:
         3b:8e:40:64:60:d0:f3:bd:ed:19:7a:8c:69:6a:b5:ab:87:f3:
         1e:3c:b1:a9:9d:a2:7c:5d:21:78:fe:12:cc:18:92:18:67:81:
         52:c9:e4:d7:ad:f9:0c:ac:6b:6b:e8:42:49:60:6d:c1:22:c6:
         90:6f:ee:20:00:3c:9f:b2:35:a4:4c:79:b3:5b:35:7e:1c:e3:
         1f:5a:55:e0:df:4f:f3:ea:c0:2a:84:21:45:04:18:4b:71:3a:
         af:16:d6:06:ea:99:81:fa:0b:18:71:ca:57:04:3a:b7:9a:01:
         c2:14:4f:ed:e4:0b:7c:e3:52:07:e5:25:8a:ae:ea:21:66:91:
         f1:95:10:68:aa:ef:e7:43:03:db:e8:d9:46:f4:d9:6d:11:2e:
         2a:a2:12:fa:82:91:e7:69:05:c9:cc:47:4e:aa:ad:9b:be:18:
         d7:d4:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:36:08 2026 by rpki-client