Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File:                     wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier:          kLmrZvthodPedXfqAl+QayPnV7F41MCr64TrHAvDo3k=
Subject key identifier:   44:01:BB:79:3B:A2:66:DD:6F:DF:79:13:A7:26:A5:11:92:88:9D:14
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer:       /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial:       019D284D7F69839CB4046E5B46C396D52A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number:          1895
Signing time:             Thu 26 Mar 2026 04:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:00 +0000
Files and hashes:         1: P8JH6OtwnAcRCI_WtbVsia3-A3I.roa (hash: RdsjLEpKWvC5H1qPupN4JWM55Atr5/X0h0u7fxXJgQ8=)
                          2: QKoGnrzZyJUnshjGK5_Jad76Ogw.roa (hash: 0c6MRkupvxvEJxijmnnZObSDqIOoPzyi6m7hObhz2Hs=)
                          3: _V4_YA4wR5SE7qpfb2hnztoRewk.roa (hash: ELmIzuonMNS4lclnXe8fw37wusoYS3cVfewSiaMR2aM=)
                          4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: pFJj0kJ0h9jSpvDVM890flkhGMUsI6/nlta1V8uZjrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:7f:69:83:9c:b4:04:6e:5b:46:c3:96:d5:2a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
        Validity
            Not Before: Mar 26 04:01:00 2026 GMT
            Not After : Mar 27 04:01:00 2026 GMT
        Subject: CN=4401bb793ba266dd6fdf7913a726a51192889d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:fb:11:6b:55:8b:45:9b:d6:e8:82:31:7e:
                    20:6b:f7:5a:47:71:1e:b6:b6:18:5a:6c:34:fa:f5:
                    a1:87:2e:4e:da:89:c7:41:a8:8d:91:72:48:94:48:
                    3f:c8:b1:5c:b7:45:ef:6a:c7:ff:cd:a7:bf:a2:e8:
                    1e:cf:b9:3e:59:ea:15:af:78:cf:34:33:a5:f2:b2:
                    28:5d:0c:e7:5b:de:4d:81:76:3c:ce:5f:2b:bc:4b:
                    4c:c6:6e:18:bf:a8:b1:8a:d3:1b:0f:bf:c8:5a:d8:
                    ca:f8:05:76:62:32:07:73:35:b5:a0:a7:9d:57:15:
                    2e:aa:cb:ad:58:fd:25:1b:16:6b:6f:8d:19:3f:d0:
                    a0:da:73:4b:bc:99:31:7a:90:79:99:17:3e:d3:2d:
                    f3:50:f5:ac:a7:bb:d0:1d:dc:10:06:bc:27:7f:69:
                    37:ea:9b:0f:29:19:ab:0d:1e:7e:a9:6e:bc:67:50:
                    98:80:49:5f:34:2d:c5:ef:dd:75:07:d7:2d:f6:bb:
                    c7:12:5a:b3:84:5c:9a:27:66:24:1d:13:5d:0c:4a:
                    2d:6e:c7:91:ab:5c:e8:e3:4b:0b:bb:71:bc:f0:f0:
                    5e:99:7e:ad:2e:1d:f3:81:56:b4:2c:16:81:67:7d:
                    94:ae:11:26:46:b0:f3:37:aa:80:86:e2:6e:95:c9:
                    64:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:01:BB:79:3B:A2:66:DD:6F:DF:79:13:A7:26:A5:11:92:88:9D:14
            X509v3 Authority Key Identifier:
                keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6f:44:81:fd:62:3c:5d:f7:c8:fb:6e:a9:bf:d2:50:eb:d6:
         ea:e0:81:a9:0f:42:34:bd:c9:80:af:27:61:e8:74:67:91:d6:
         20:60:4f:be:22:9b:85:0c:da:88:59:54:f0:0b:77:e6:61:97:
         ee:88:68:8b:39:65:0c:e5:a9:99:11:54:3f:c2:e8:b9:8b:30:
         41:08:98:c3:c4:04:54:22:21:cd:73:cf:0e:1c:04:73:c9:f0:
         16:2e:b3:b6:b7:7e:78:58:a8:ed:15:44:95:2d:9b:d2:63:b1:
         fe:59:77:78:0d:d3:d0:84:dc:a2:90:e7:eb:8a:6f:90:53:13:
         90:7f:f0:64:78:93:2f:2d:17:ac:10:5d:64:ba:c2:c8:a8:7f:
         d2:91:8c:ff:3a:ae:41:65:a5:63:db:b8:d3:27:4b:11:c0:32:
         11:5e:7d:05:32:62:b8:74:00:5a:27:cc:e4:a3:ea:36:e9:7b:
         e8:84:30:82:c9:79:33:2f:72:84:89:39:1d:13:cc:f0:d6:01:
         1e:ff:36:01:4a:93:ac:de:1c:be:a3:9c:71:ee:5f:2f:76:83:
         53:7a:63:47:07:0f:32:c4:fb:65:9f:a2:e5:00:0f:06:2d:60:
         bc:c3:74:64:05:43:8b:1e:be:8f:5c:31:dd:c1:e6:dd:90:3d:
         8c:9a:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:16:12 2026 by rpki-client