Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
File:                     DWE_6YRKY0OerooaoMPKjGC0XUU.mft (raw, json)
Hash identifier:          SLNCVJ6U/e/E1rXuG7jYXSE5qrQPthKeVZPbOsWiE18=
Subject key identifier:   F6:A5:A5:20:7C:4B:EF:10:94:98:15:6D:17:2B:F0:63:2A:FD:27:E2
Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Certificate issuer:       /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Certificate serial:       019D26287E1037073DF22BE60C6C7BF45992
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 18:01:20 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:20 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:20 +0000
Files and hashes:         1: 70uwjS23ojWYkHOJF-QA_XGJ95c.roa (hash: CvnO7mT1jduzqhCIW8qOqSz+l6S7AQzxDDVic7aHm4s=)
                          2: DWE_6YRKY0OerooaoMPKjGC0XUU.crl (hash: av0HWrDA91O04vrMVDq33c5Q4CxbHXO2hB1+qUC0Wlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:7e:10:37:07:3d:f2:2b:e6:0c:6c:7b:f4:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
        Validity
            Not Before: Mar 25 18:01:20 2026 GMT
            Not After : Mar 26 18:01:20 2026 GMT
        Subject: CN=f6a5a5207c4bef109498156d172bf0632afd27e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0a:cc:3f:f4:74:f5:33:03:cd:89:e0:c5:1a:
                    25:fc:05:7b:98:7d:37:07:f9:f3:81:bc:17:4e:57:
                    93:6d:10:6a:3e:b7:b4:82:ff:6d:94:0d:7d:3c:bd:
                    c5:8e:12:8e:97:e6:2e:0f:49:87:7b:ed:15:21:88:
                    2c:73:76:dc:be:67:92:92:b9:97:7f:3c:7d:6c:4e:
                    4a:a2:d2:6e:44:57:ea:8b:3b:55:65:c2:78:3a:e4:
                    7a:9a:8b:3a:d8:1b:c8:0a:b7:28:5f:b0:16:9a:18:
                    fa:be:c9:fb:53:fe:e6:d2:a9:2c:ec:5b:e5:46:9e:
                    5f:8d:6a:eb:86:2c:92:ff:3d:7c:21:40:3d:b4:13:
                    24:d4:00:ab:43:05:2d:5a:a8:71:9b:74:f8:27:90:
                    3d:a8:a4:05:2b:1d:b9:5f:a1:b6:e3:be:d0:02:d5:
                    38:a3:a2:e6:8a:e1:7a:30:f4:8f:f4:ba:05:12:86:
                    e5:ec:84:64:1d:67:32:36:ce:36:28:4f:ec:8a:98:
                    54:e3:0d:63:31:52:a6:67:40:75:84:fb:d9:8b:ea:
                    86:16:f6:fb:fb:14:da:95:e2:c8:36:f6:a2:1a:b8:
                    f0:58:47:41:60:72:e2:a7:8d:87:39:e8:34:42:55:
                    d6:53:a6:05:9b:fa:bc:62:08:72:e9:7d:b5:e2:a0:
                    15:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A5:A5:20:7C:4B:EF:10:94:98:15:6D:17:2B:F0:63:2A:FD:27:E2
            X509v3 Authority Key Identifier:
                keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6f:b0:54:ea:e9:4f:e8:e5:42:00:c2:bf:b6:c3:d2:e0:88:
         32:68:a0:a1:12:51:97:11:ca:22:b2:aa:65:8f:04:2d:ee:3e:
         9b:b6:33:ce:39:fe:a8:3d:39:09:27:7c:3d:58:6b:ca:80:bd:
         58:42:27:cd:e1:f4:8c:97:6c:ac:ae:18:a8:75:ec:44:de:43:
         4c:08:8e:76:cf:56:cf:81:07:dd:ad:c1:f6:ea:62:67:04:8b:
         87:6b:51:53:69:94:f6:02:f5:9a:5a:85:10:3e:be:f0:1f:f6:
         2b:dc:c7:88:cd:31:da:e4:74:7f:15:cb:a1:01:ca:96:08:19:
         cf:bd:bc:a8:11:a2:09:5e:f7:a5:aa:db:27:29:d6:77:3a:e4:
         32:80:cd:41:59:4f:fd:bd:fc:10:9a:6c:a0:6c:ff:ff:6c:c4:
         6a:42:9d:5c:7d:5c:6c:bd:06:5f:96:30:d4:6c:54:d9:a3:4e:
         66:9a:2f:ac:1c:53:c8:d8:5f:16:c4:a8:c9:c1:9c:d4:04:46:
         50:53:10:58:59:ba:09:2c:6b:52:e2:d7:04:5b:0b:53:1a:9c:
         e3:a7:36:04:61:9e:06:6a:f0:ef:94:79:f7:fa:84:ea:6a:cc:
         c5:ce:c6:af:2d:67:5b:3a:a0:5f:af:c9:7d:05:7a:b1:f4:52:
         5d:59:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:27 2026 by rpki-client