Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File:                     1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier:          N+WwgoxRP+UoeqwhRVCCruZfkovUEH7cBBLSOqwVX/Y=
Subject key identifier:   8A:3D:7F:0B:3E:39:62:BB:7D:34:20:01:53:F6:4C:E9:50:F7:49:4D
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer:       /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial:       019D2A729591AFA148C442EB02352DBF207E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number:          0396
Signing time:             Thu 26 Mar 2026 14:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:45 +0000
Files and hashes:         1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: 9VPrmE/9w8Qg2GWamnf09YlLBOU4A1gsEw3pl57XfO0=)
                          2: Om8hYJFWIm8pdYISoMz7ReVcWUI.roa (hash: c7dJNXWNQCnqpXhattRk9ZyKNskwQkIBWvzcQA9kNBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:95:91:af:a1:48:c4:42:eb:02:35:2d:bf:20:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
        Validity
            Not Before: Mar 26 14:00:45 2026 GMT
            Not After : Mar 27 14:00:45 2026 GMT
        Subject: CN=8a3d7f0b3e3962bb7d34200153f64ce950f7494d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c4:87:20:0e:b6:8e:31:34:d3:33:39:65:81:
                    fa:62:c6:07:3e:32:ee:fa:ab:05:dd:c9:7e:3d:c1:
                    bd:c2:51:60:cd:e8:ef:66:e7:ba:a5:35:60:12:a3:
                    8a:89:a2:db:09:82:99:89:5b:30:1a:5e:90:0b:59:
                    66:9e:1c:b5:96:47:8e:01:79:75:d9:55:76:d0:a6:
                    80:40:e1:99:f6:4d:ab:a5:c4:b5:27:8e:d8:c1:93:
                    a6:1d:ad:3f:a0:fb:30:0c:ab:ac:2d:ef:70:85:ec:
                    3c:ee:29:10:79:5f:08:8a:cb:4d:15:b3:22:0b:64:
                    3b:60:f9:b1:e8:06:11:35:b3:a6:ad:6d:a0:b9:f0:
                    a3:cb:39:19:6a:43:b3:c9:86:8a:ae:f0:f7:36:70:
                    17:d6:0e:7d:7c:3f:94:39:c1:1d:de:37:ca:52:2d:
                    09:78:60:c4:8a:a2:21:4e:5c:dc:e8:c6:71:9a:ab:
                    b1:bb:2f:48:ba:71:58:83:95:64:ba:31:d3:ef:cd:
                    2a:68:a7:d2:2f:bc:ac:c4:0c:a1:ce:ca:55:5e:66:
                    9e:07:03:98:c5:fd:a3:9d:68:d6:cb:6d:07:a5:bb:
                    5e:81:52:4d:ed:58:9d:05:68:39:10:78:e2:20:f3:
                    f5:b3:8c:cc:d1:2e:30:eb:9d:70:f8:c3:7e:da:74:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3D:7F:0B:3E:39:62:BB:7D:34:20:01:53:F6:4C:E9:50:F7:49:4D
            X509v3 Authority Key Identifier:
                keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:9e:38:68:05:ce:c6:a7:1d:2c:13:e7:4d:78:c4:e8:53:25:
         2b:c4:92:79:db:cb:79:ed:35:11:d5:b3:bc:f8:f5:5a:04:df:
         3f:e8:e0:3b:f2:d1:92:e8:19:21:95:05:a3:a7:40:18:bd:19:
         f3:bf:27:4d:61:45:b2:30:0e:59:85:d6:c2:8b:11:9d:71:0b:
         5d:ae:c9:a6:f1:f3:60:b1:ef:54:79:a5:7c:db:b6:ee:55:2a:
         75:76:ad:65:f1:2c:a8:9b:28:a4:4b:6b:d1:43:d9:ff:a6:b2:
         a4:8b:3f:f4:c2:e0:5d:69:4b:bd:20:89:e9:d3:e3:ab:0a:09:
         f4:bf:b0:30:54:eb:7a:5f:51:3c:29:2e:7b:b8:8e:84:25:2c:
         07:4f:ed:3b:26:94:81:3e:6f:96:40:b1:71:00:1c:e6:f4:75:
         81:47:c7:1f:57:96:d3:a9:2f:39:df:20:37:78:a2:ba:87:f8:
         e5:cd:12:f7:e0:80:6b:96:58:0e:fc:3f:da:04:74:2d:d3:a5:
         d4:3d:cf:87:d9:25:72:ab:d3:af:b9:0c:44:93:e3:4e:94:da:
         47:8c:8b:87:20:bd:be:91:7a:19:64:cb:f2:6a:66:a4:ed:9b:
         85:11:60:44:59:19:a9:ee:f5:28:02:26:6c:1e:9d:e7:f4:16:
         ad:a7:67:57
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0qcpWRr6FIxELrAjUtvyB+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjBjN2FiM2M0YmNjM2ZjYTgzZTQ5MzMxNjc3YjQ0YmI3
YTk0NmYwHhcNMjYwMzI2MTQwMDQ1WhcNMjYwMzI3MTQwMDQ1WjAzMTEwLwYDVQQD
Eyg4YTNkN2YwYjNlMzk2MmJiN2QzNDIwMDE1M2Y2NGNlOTUwZjc0OTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsSHIA62jjE00zM5ZYH6YsYHPjLu
+qsF3cl+PcG9wlFgzejvZue6pTVgEqOKiaLbCYKZiVswGl6QC1lmnhy1lkeOAXl1
2VV20KaAQOGZ9k2rpcS1J47YwZOmHa0/oPswDKusLe9whew87ikQeV8IistNFbMi
C2Q7YPmx6AYRNbOmrW2gufCjyzkZakOzyYaKrvD3NnAX1g59fD+UOcEd3jfKUi0J
eGDEiqIhTlzc6MZxmquxuy9IunFYg5VkujHT780qaKfSL7ysxAyhzspVXmaeBwOY
xf2jnWjWy20HpbtegVJN7VidBWg5EHjiIPP1s4zM0S4w651w+MN+2nRQfQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIo9fws+OWK7fTQgAVP2TOlQ90lNMB8GA1UdIwQY
MBaAFPlgx6s8S8w/yoPkkzFne0S7epRvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XREhxenhMekRfS2ctU1RNV2Q3Ukx0NmxHOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEz
LTI2OTBiNTVmNTBmZC8xLzEtV0RIcXp4THpEX0tnLVNUTVdkN1JMdDZsRzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYyL2VlNDdkZS0zMzVhLTQ5OTktYjYxMy0yNjkwYjU1ZjUw
ZmQvMS8xLVdESHF6eEx6RF9LZy1TVE1XZDdSTHQ2bEc4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJ44
aAXOxqcdLBPnTXjE6FMlK8SSedvLee01EdWzvPj1WgTfP+jgO/LRkugZIZUFo6dA
GL0Z878nTWFFsjAOWYXWwosRnXELXa7JpvHzYLHvVHmlfNu27lUqdXatZfEsqJso
pEtr0UPZ/6aypIs/9MLgXWlLvSCJ6dPjqwoJ9L+wMFTrel9RPCkue7iOhCUsB0/t
OyaUgT5vlkCxcQAc5vR1gUfHH1eW06kvOd8gN3iiuof45c0S9+CAa5ZYDvw/2gR0
LdOl1D3Ph9klcqvTr7kMRJPjTpTaR4yLhyC9vpF6GWTL8mpmpO2bhRFgRFkZqe71
KAImbB6d5/QWradnVw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:57:29 2026 by rpki-client