Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          7OGsvp9uIolSUlGlgGnY+ugUUpUov68tee4w51CrGec=
Subject key identifier:   8A:AC:5B:1D:57:E8:99:4F:31:D1:52:13:6A:D0:21:C1:F3:2F:54:CA
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019D25F1D6D6972F109494AC58479887C474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          068D
Signing time:             Wed 25 Mar 2026 17:01:39 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:39 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:39 +0000
Files and hashes:         1: 3-vvvwv4tUZPRVYLco5dYLcKOig.roa (hash: qd0VBxrvHFGJvFVcu73W5K8cFS+yhuHypJI01YtY3b8=)
                          2: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          3: _qfnh0B1Q9kr326hHKH4PHRx7H0.roa (hash: TtfUGrmkL3QzIvzYnYw9WDKqe/CRP54QUVhnblV7rQ0=)
                          4: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          5: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          6: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: 5N1EYjyhLr/pUeOg3LYCpT1WEdqzzoO5ahs7Uf16FzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:d6:d6:97:2f:10:94:94:ac:58:47:98:87:c4:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Mar 25 17:01:39 2026 GMT
            Not After : Mar 26 17:01:39 2026 GMT
        Subject: CN=8aac5b1d57e8994f31d152136ad021c1f32f54ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:c1:2a:bf:cb:4c:39:6b:b9:83:59:8a:bf:
                    05:6b:a5:dc:91:8c:51:12:ce:c2:9d:40:8d:a7:91:
                    9a:c5:9d:b9:ed:66:ce:ea:c7:1b:c6:33:e2:a1:ec:
                    05:c0:a2:89:b1:84:81:c4:f5:74:aa:2c:b3:f3:7c:
                    bf:fe:f4:2f:5a:39:a9:e4:33:dd:8f:f0:59:44:a4:
                    63:7a:82:98:fd:13:6b:66:02:cc:6c:9b:64:3c:91:
                    14:0d:f4:98:6f:44:d3:d8:17:77:93:b1:0b:d2:5b:
                    1f:c0:af:c1:87:c3:01:c8:4d:3e:b4:86:df:78:4e:
                    24:7e:84:dd:d6:52:86:a8:b2:32:d9:f5:8c:09:3f:
                    3a:b9:94:e5:db:19:de:b8:54:d2:d9:2c:d9:16:14:
                    8b:e0:bd:ce:0b:40:d9:f4:ae:1a:67:6e:f7:84:f7:
                    d1:3f:a5:b0:99:35:d8:a4:8d:cc:a4:c2:77:33:a0:
                    b8:2d:c0:8a:5d:ef:37:90:cc:2b:c5:e1:0c:f7:43:
                    a6:31:12:21:48:27:7f:76:5d:aa:90:e2:fd:9f:85:
                    19:27:02:33:a6:8a:45:2b:a7:50:cc:ad:a4:9f:d5:
                    f6:0b:f5:45:61:ea:93:30:8f:43:80:46:06:da:ed:
                    10:41:e5:d6:54:d4:f7:49:79:21:17:54:fd:9e:50:
                    e2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AC:5B:1D:57:E8:99:4F:31:D1:52:13:6A:D0:21:C1:F3:2F:54:CA
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:67:00:0d:9d:45:e7:d1:8b:6a:ca:a0:24:1d:16:0e:a8:22:
         d9:59:be:ca:3a:e3:62:33:96:1e:7b:52:1f:d3:fe:34:67:40:
         fc:f0:c0:c7:ab:ee:c8:ba:8a:29:a2:66:12:78:c8:74:5f:32:
         27:f9:c5:8a:c8:3d:42:30:a2:0a:dd:ae:a6:34:91:29:38:81:
         d2:82:2c:5b:d8:ca:39:4b:fc:c2:aa:68:be:49:fe:cc:d4:a3:
         00:29:94:02:7b:d5:a9:0c:9a:3f:26:39:69:29:2c:ac:53:d9:
         dd:42:97:90:6d:de:df:a9:3d:91:be:b5:c4:48:5e:ed:c9:b4:
         91:cc:98:fd:08:00:f2:ac:43:a8:6f:e0:b1:29:e2:9b:24:6a:
         af:39:b6:ef:7f:03:0d:cd:da:a4:a1:85:3d:d4:4c:3d:50:32:
         68:f2:ad:78:15:10:0d:c7:8b:b7:cd:ec:07:f9:10:ef:1a:c5:
         4a:57:96:76:cd:87:ea:ba:22:9f:d4:0b:7b:36:a5:5d:7c:93:
         e2:8d:37:86:91:e2:e3:8b:b4:fd:eb:81:b3:2f:79:aa:a9:2e:
         b7:71:6f:a9:9b:cc:dd:c1:cd:70:88:c4:b4:84:07:4b:c3:9a:
         45:38:a0:c8:81:b1:bb:a3:07:6f:df:0c:44:c1:53:5d:c1:9d:
         32:39:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:03:57 2026 by rpki-client