Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
File:                     wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft (raw, json)
Hash identifier:          wWHtL724GoGUOg5D17WzfsSRlZPdR3UD8OevS+uxdiQ=
Subject key identifier:   07:E7:30:40:D1:D7:94:C0:7F:BD:73:31:AC:CF:69:9D:DF:AB:92:3A
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Certificate issuer:       /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial:       019D2695BD68D55A854545FDBA80B8C33991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 20:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:40 +0000
Files and hashes:         1: CuOUP7K5FFs9hp6Y2PT6u5JckCo.roa (hash: ZsAGggLHZ5c9tfsaL3W8Tzgr18wNOwRPUVw/KIp0Zec=)
                          2: UTrB-eqS9W6US57i4mIaxwF_LT4.roa (hash: /qJvylYZag2Wv3AD9lsMVc7eYv0lH1eOQvu0T60dUUc=)
                          3: neQNKLpCfakNl9D-xr1vgggjRHw.roa (hash: fXE9P5Vbl/ZNMcrpupVcZ1b+IXnjJzLD2Jyf3B1lxGU=)
                          4: wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl (hash: xUXPozDhOqLmF1jAEUXlbBQtbWjE6C4T9rS6rt3NI2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:bd:68:d5:5a:85:45:45:fd:ba:80:b8:c3:39:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
        Validity
            Not Before: Mar 25 20:00:40 2026 GMT
            Not After : Mar 26 20:00:40 2026 GMT
        Subject: CN=07e73040d1d794c07fbd7331accf699ddfab923a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:14:92:c0:e0:9e:4a:17:e7:4a:95:54:1e:
                    fa:30:02:bd:01:57:11:33:e6:b4:17:f6:13:a6:4f:
                    7e:4c:1e:ea:a3:f1:c4:c3:3b:38:93:fd:54:f4:7b:
                    da:80:d0:fe:36:a6:e9:91:23:ac:9b:df:25:11:36:
                    f1:d5:88:aa:f1:78:f7:04:98:f9:60:aa:f1:69:32:
                    43:b1:19:83:b8:11:38:43:1e:eb:dd:4a:b2:ab:7d:
                    49:e7:88:c3:4c:ba:03:98:02:bd:70:80:a3:00:67:
                    77:26:e5:40:9c:eb:2d:b5:38:80:c9:dc:e6:04:77:
                    de:a5:c8:8b:16:71:9b:a0:80:6a:cc:a4:18:69:32:
                    77:a9:34:4e:04:88:f5:01:13:9b:ea:b5:5a:08:44:
                    c9:23:38:89:ad:da:25:2e:4a:bc:33:c5:0c:6e:ed:
                    60:ce:63:c2:af:27:de:a6:af:f0:de:e0:31:7e:56:
                    85:8d:16:fd:5d:28:bf:3a:85:26:cd:69:57:e4:55:
                    ee:83:27:2e:4b:ca:56:3d:a7:72:69:24:e3:28:1e:
                    d0:f3:4a:47:cb:c4:e9:d9:7c:89:da:4b:fa:66:63:
                    d3:ee:1f:50:3d:db:ba:37:00:54:7d:60:3e:13:39:
                    f4:67:fa:8d:78:c2:97:7e:bc:73:49:3c:fd:72:9d:
                    f2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E7:30:40:D1:D7:94:C0:7F:BD:73:31:AC:CF:69:9D:DF:AB:92:3A
            X509v3 Authority Key Identifier:
                keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fd:f0:f6:60:e0:3a:1d:20:e4:67:7c:28:6f:d3:22:27:39:
         00:e4:83:cd:29:05:b0:81:77:d9:32:6c:d8:fd:e2:bd:03:5a:
         57:b6:a0:91:6a:77:11:c5:ec:da:ea:f2:d6:b1:02:7d:50:61:
         f5:11:13:65:ea:42:ad:08:0c:eb:3b:c9:ca:c2:50:b5:6b:3c:
         52:30:d8:a1:b0:cc:cf:81:f7:c7:63:ec:f9:12:9b:94:7f:c0:
         8d:d4:6c:c5:89:75:c3:7b:89:49:45:0e:d1:ad:77:83:bb:13:
         7f:08:5c:73:c9:1f:c7:39:5f:af:15:58:d8:12:ad:b3:3b:9f:
         54:5f:e9:7a:58:8e:1a:1b:d5:c2:23:80:e3:7a:8e:05:05:eb:
         88:9a:c6:98:68:36:72:2e:5f:d2:37:ca:fb:3e:25:7c:20:2b:
         0f:4c:29:87:95:d4:9d:69:01:99:a9:09:80:f5:ff:4f:28:fd:
         0f:82:51:b8:3f:b2:2c:cd:bf:1c:67:cb:f0:39:6f:09:07:0e:
         9a:74:5e:86:43:60:05:06:f6:c1:02:92:ff:8f:d3:87:ac:98:
         43:27:d3:35:07:dd:fd:88:b2:51:0b:67:a6:75:87:01:ff:69:
         65:5d:c8:b1:c1:3d:c9:43:32:34:13:78:7c:a1:f3:87:a9:0c:
         c0:ba:95:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:53 2026 by rpki-client