Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
File:                     wWorxbJu0grF0v3qnayGffkjIFo.mft (raw, json)
Hash identifier:          K+NWo9fRfLAO2QYjgwL0D4yD7neDP4kMVlwEoGQeQWs=
Subject key identifier:   3B:E7:CF:A0:B3:74:15:DD:A3:9A:53:D9:2C:04:05:52:44:BF:65:97
Authority key identifier: C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A
Certificate issuer:       /CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
Certificate serial:       019D29290B0EA4AFE7A72DD883415CA97945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
Manifest number:          085D
Signing time:             Thu 26 Mar 2026 08:00:48 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:48 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:48 +0000
Files and hashes:         1: wWorxbJu0grF0v3qnayGffkjIFo.crl (hash: ye2QHZDwy0meBhCnl/OgvQJhT9+bxfJNNJ8eNWA7Cwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:0b:0e:a4:af:e7:a7:2d:d8:83:41:5c:a9:79:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
        Validity
            Not Before: Mar 26 08:00:48 2026 GMT
            Not After : Mar 27 08:00:48 2026 GMT
        Subject: CN=3be7cfa0b37415dda39a53d92c04055244bf6597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fb:bc:f1:06:55:8b:ca:5e:05:11:23:bc:5f:
                    1a:f5:79:35:22:d0:37:71:84:a9:89:1a:a6:c9:52:
                    45:f5:ee:d9:54:dc:07:cc:a3:52:a7:5d:e1:5a:d0:
                    1f:fe:bb:ac:cd:7e:cd:96:38:87:07:7e:fe:28:8a:
                    21:de:e0:92:0b:47:3e:79:c3:5c:4e:a3:87:cd:37:
                    50:22:a8:0b:ab:9c:b0:1c:90:69:20:b1:77:46:9a:
                    f2:fb:e2:73:b3:64:2b:a2:bc:57:30:52:a0:df:40:
                    ae:98:72:91:1f:d5:93:6d:4a:76:c2:e0:84:44:a9:
                    4d:3d:1f:f1:c2:55:91:9e:b7:c6:e2:63:39:f6:82:
                    61:71:e7:af:e5:9c:7d:a0:26:97:9a:88:40:a4:34:
                    4a:fd:2c:ef:56:3c:14:4b:b2:5c:c9:e6:5b:2a:84:
                    f5:a6:e5:66:25:98:db:63:75:9c:24:4b:1e:51:ff:
                    83:d4:d3:2b:47:7c:5f:ee:f4:07:22:b9:18:ea:bd:
                    45:e5:9b:7f:70:90:df:d1:e2:9f:d9:22:ba:ce:4a:
                    a4:fc:52:84:c3:a4:9b:f8:ed:47:c0:8c:5b:53:9a:
                    16:2a:fc:e9:7d:99:49:a4:eb:ec:04:f2:ef:b1:7d:
                    97:52:cf:90:e0:a6:6e:04:46:ce:6d:f2:39:d7:a3:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E7:CF:A0:B3:74:15:DD:A3:9A:53:D9:2C:04:05:52:44:BF:65:97
            X509v3 Authority Key Identifier:
                keyid:C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:61:62:91:ab:e5:67:66:bf:b9:1a:58:47:fb:92:f7:a7:44:
         83:cf:c3:ce:d3:e9:f2:f2:e4:8c:3b:a0:13:2a:15:98:8e:16:
         bc:f6:1e:74:c2:d2:9e:60:12:2a:1a:60:cf:58:15:6f:99:32:
         e0:f2:24:57:d3:fe:a4:68:5e:d2:2e:48:a7:b2:41:88:72:ea:
         47:d1:e0:d4:9b:6a:93:01:7d:5e:aa:a7:69:12:30:59:53:62:
         fd:16:f9:3e:f3:2e:d0:72:ec:ac:f4:48:0d:04:5a:a0:ab:13:
         aa:ca:56:e0:ad:87:fb:16:0b:e6:3f:b4:ff:51:f4:e5:b2:fe:
         c0:28:b9:5d:9d:b9:6e:e8:20:7b:29:cc:a0:04:0c:94:e1:72:
         c5:f6:ee:f3:2f:8a:cd:88:28:fb:d0:06:51:ee:a8:39:ba:e1:
         56:ed:b0:bd:f2:a9:f1:cf:06:24:e9:02:ea:6e:7c:d9:d3:63:
         45:25:89:71:60:14:6e:3a:ce:50:3f:02:29:15:74:94:de:b4:
         e9:fd:df:88:ee:68:75:0d:21:a7:dc:e9:50:e5:a4:7a:a6:79:
         0e:82:99:62:1b:f3:2d:86:fa:67:d9:ac:ae:ba:48:2c:fb:d8:
         e5:dc:3c:66:ff:95:da:81:5b:15:b6:f3:47:94:e1:cc:42:a7:
         57:5e:68:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:05:51 2026 by rpki-client