Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
File:                     W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json)
Hash identifier:          jVZ5mKmS/yD9KexhmNKwy3loWDicliX3Q32OkkqjqF4=
Subject key identifier:   6C:39:E8:8C:D7:54:6E:A1:F3:0D:5B:2D:F1:37:A3:60:34:10:3C:35
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Certificate issuer:       /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial:       019D2996E8BADE4591B041D19411F8351D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
Manifest number:          0CC4
Signing time:             Thu 26 Mar 2026 10:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:48 +0000
Files and hashes:         1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: BhOp9Qe7obi4rpZYgQFY7OzCKImAK/k0pAuPLJodngM=)
                          2: WOuvyP9Ru77CyyJtiwhA1HRONs4.roa (hash: DGYz+wXrRKUUvRHVz1HMcW0FlBydsx065+6uwjHzCuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:e8:ba:de:45:91:b0:41:d1:94:11:f8:35:1d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
        Validity
            Not Before: Mar 26 10:00:48 2026 GMT
            Not After : Mar 27 10:00:48 2026 GMT
        Subject: CN=6c39e88cd7546ea1f30d5b2df137a36034103c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a3:66:74:80:2c:fe:01:a3:5e:fe:27:7c:6b:
                    9a:cc:a3:36:4c:f8:14:09:56:23:8f:ca:39:b7:78:
                    68:69:c5:7c:0f:58:f1:6a:b5:9b:cb:ec:3a:ba:3f:
                    63:31:7e:4b:55:3f:15:eb:f9:7f:b1:3b:31:ba:56:
                    9e:05:9a:0e:0e:b8:b5:05:7d:bc:4e:11:f2:5d:1b:
                    ed:79:16:5b:42:75:d8:63:5a:a7:c3:8f:81:63:47:
                    55:4b:b6:d6:6e:94:fb:32:cf:c4:86:cd:1c:b9:70:
                    f4:e2:21:d8:12:cd:0f:f7:f7:e5:a5:47:83:31:e5:
                    13:ae:a2:a8:1a:24:be:bc:14:9c:83:22:56:5a:83:
                    8d:8a:f4:d5:44:8b:4f:90:ec:47:52:1b:57:b9:d0:
                    35:12:94:cd:80:ac:da:19:45:49:82:7e:e5:0e:bf:
                    6e:d3:3c:54:8b:42:ed:6f:62:38:92:57:67:ce:6c:
                    11:a8:81:5f:2e:35:7e:c3:00:08:c8:b1:e9:d7:e5:
                    4b:61:7b:70:34:f6:3c:38:f2:ca:a7:12:90:64:d2:
                    b5:bf:5b:b5:ba:d9:82:c1:13:c5:4a:26:fa:e2:7e:
                    e8:ae:86:5c:76:e1:a3:dd:ca:ae:77:59:29:ec:d6:
                    ed:a4:3f:8e:5b:f3:b2:76:13:f9:d1:d5:eb:c7:5b:
                    93:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:39:E8:8C:D7:54:6E:A1:F3:0D:5B:2D:F1:37:A3:60:34:10:3C:35
            X509v3 Authority Key Identifier:
                keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:21:85:3d:72:a2:de:c5:b6:db:14:f4:f7:1d:3d:9d:74:f9:
         c1:ef:f8:06:1c:9e:c8:f2:72:4d:0a:b3:d7:6e:10:2a:e3:21:
         af:36:c2:32:94:84:65:48:7d:5e:da:ef:4d:3b:11:1f:e9:9a:
         8a:56:62:7b:47:91:ee:77:8d:f7:87:cc:06:90:0c:93:6b:93:
         51:aa:c2:b9:0c:e6:b3:4c:f8:f9:fb:3b:2d:e2:c7:13:b3:18:
         36:ce:2a:bc:ac:69:be:47:56:82:24:7e:c9:a8:af:94:bf:92:
         46:31:ee:79:6b:61:c6:59:f3:a9:fb:94:7a:15:5a:2a:a3:37:
         dd:29:f7:16:0b:e4:50:e7:da:41:bf:22:00:c2:4f:6f:de:f7:
         a9:68:41:92:2f:c7:7a:d3:1e:58:78:dc:0e:4d:2c:38:b3:f0:
         a8:22:85:6b:fd:cb:81:19:1b:d3:40:58:1e:3b:d2:e2:76:88:
         89:3d:3e:65:7c:1a:36:b1:7f:ad:be:cd:6a:53:41:8c:fd:f5:
         da:8a:bd:51:09:30:0e:75:1b:96:5e:63:7a:f6:f2:2e:53:f4:
         5c:77:dc:08:fe:4b:f9:d0:73:d4:2f:57:71:ff:9b:21:9e:d2:
         0c:9a:9e:ad:1b:ac:22:6d:11:9f:e5:45:b1:0d:65:e5:36:d2:
         94:91:e2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:56:03 2026 by rpki-client