Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
File:                     wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft (raw, json)
Hash identifier:          XOGnXLEkn+4dh2YUZGIO/43JEHsqc8a6nqKsGR3gQDk=
Subject key identifier:   8B:37:73:C6:29:2B:1A:91:A7:AD:34:64:B2:78:6C:F2:40:AF:E1:48
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Certificate issuer:       /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial:       019D292950DFA03CF5FB560312F6E9D84C03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
Manifest number:          07D4
Signing time:             Thu 26 Mar 2026 08:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:06 +0000
Files and hashes:         1: 2SN63uiR84jB4gjJ1oeZd3LxGmw.roa (hash: +QrxXlt+PAoes4BS6/9AYSbkj6CREEueCsrUnrPMn9w=)
                          2: nT_nq2qZpg_e8A-QbT4bDV9sY1c.roa (hash: wsGgO59uuOrZNxO5czJq2eFvkiFHzzzuspwORnyBouk=)
                          3: sux632LKHtGX1EXDlRH988a1FGU.roa (hash: xXf8M6qicMrsGk7jlbi/KFdZjjGpVZHB2RA7AQ0CnCw=)
                          4: wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl (hash: GPgsL6GZafRS0233ZMhx4bpRMxw+NfEKOm8P+30/Oo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:50:df:a0:3c:f5:fb:56:03:12:f6:e9:d8:4c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
        Validity
            Not Before: Mar 26 08:01:06 2026 GMT
            Not After : Mar 27 08:01:06 2026 GMT
        Subject: CN=8b3773c6292b1a91a7ad3464b2786cf240afe148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:7a:cc:76:50:be:74:96:97:94:9d:ab:82:
                    f6:1c:15:f5:10:fc:e3:35:fb:79:99:59:fa:2c:65:
                    a7:47:ac:a2:4e:97:e7:8b:a3:c1:10:52:89:bd:32:
                    dc:53:77:6b:65:1b:26:d5:5d:af:d8:2d:b8:4d:5e:
                    29:44:c6:bd:4f:94:68:6a:0e:9d:8d:e3:b6:e5:d2:
                    2b:dc:bb:a6:5c:62:89:82:31:cc:fa:2d:1c:7f:80:
                    59:ad:8d:06:14:64:be:c6:b7:91:4f:70:5f:f2:17:
                    55:7b:84:d9:fe:0a:4c:fe:eb:90:99:a6:e0:df:8a:
                    2a:6e:21:3d:75:25:91:9b:94:0d:65:91:7e:4f:15:
                    a3:41:42:47:23:52:b7:f4:a3:ef:52:99:08:d6:3f:
                    6a:63:f3:3c:3e:59:19:b8:93:b9:1e:14:2c:d5:97:
                    c2:f2:c4:08:af:0b:91:4c:3b:f2:64:8c:54:f7:fd:
                    69:8b:a4:b8:09:bb:39:6f:e4:8d:d8:e2:cb:0f:13:
                    ac:f1:ce:aa:0b:1b:57:8c:d4:a3:0d:5a:1c:12:af:
                    c4:fc:52:ac:5d:5d:7c:5c:8a:a2:43:27:94:0c:65:
                    6c:50:ce:3b:86:3d:c9:e7:2c:af:7c:6f:fc:4d:30:
                    fc:cb:92:09:55:7a:05:05:25:df:fa:ea:35:3a:60:
                    94:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:37:73:C6:29:2B:1A:91:A7:AD:34:64:B2:78:6C:F2:40:AF:E1:48
            X509v3 Authority Key Identifier:
                keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:e8:75:4e:47:bd:fd:8f:20:ca:ec:5b:eb:1d:06:ff:a9:04:
         cf:6d:5b:18:ab:1a:57:5d:d4:69:77:34:fd:06:ee:73:c5:f1:
         f2:b8:f7:aa:14:52:19:fc:0f:d7:52:63:7a:c7:47:90:57:5c:
         59:01:65:7a:5b:d1:62:17:41:b7:01:ed:0a:ce:3f:d7:db:f0:
         6f:85:86:69:fd:71:19:08:74:0f:00:a3:f2:da:9e:39:28:b4:
         1e:10:c8:ac:e4:52:0f:8a:c5:61:36:49:55:cd:71:60:de:37:
         bd:cd:44:f9:97:95:41:01:26:02:ab:2b:48:37:55:39:5b:b2:
         35:9c:aa:e1:3b:f6:94:97:b0:78:d8:ed:3c:ee:20:cb:68:b0:
         f8:58:b5:c1:4d:4e:d2:93:c3:cd:fa:a4:8b:91:37:61:66:5c:
         95:ab:0e:ca:ba:5b:77:c1:f2:b4:4c:b2:db:66:8f:48:17:b5:
         fe:01:d3:bc:25:34:3e:b7:dd:20:d9:80:fa:e7:c3:82:81:f5:
         73:cc:75:c7:60:08:39:24:3d:fa:9a:68:c8:6d:9d:cd:71:77:
         68:9d:b4:9c:f3:22:59:d3:61:82:20:bb:85:ca:47:93:c6:77:
         bd:ef:27:4f:d5:15:5d:c8:5b:c5:55:29:4f:05:50:22:ab:c9:
         88:bb:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:20:59 2026 by rpki-client