Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
File:                     WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft (raw, json)
Hash identifier:          g1HhmBIpN9/Ij5lVAKK953AEw2MXSK4inLtoFMMt39w=
Subject key identifier:   93:C0:08:08:1A:77:52:29:21:C0:D5:F1:21:6F:F5:BF:10:5E:9D:B9
Authority key identifier: 59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56
Certificate issuer:       /CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
Certificate serial:       019D2772D20FA25FCE3A55C5272D5AE81D4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
Manifest number:          08D5
Signing time:             Thu 26 Mar 2026 00:02:09 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:09 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:09 +0000
Files and hashes:         1: WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl (hash: A7NzFZp1nzAuy6TX36rTO4AwVIOgI2y83IaiETWiBzc=)
                          2: oWffLjaGq-IXRHBvQysDthZTD2Q.roa (hash: Tx5kDn4/vasHod+fSg/24219jw41rYyzwpaoioVB2Lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:d2:0f:a2:5f:ce:3a:55:c5:27:2d:5a:e8:1d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
        Validity
            Not Before: Mar 26 00:02:09 2026 GMT
            Not After : Mar 27 00:02:09 2026 GMT
        Subject: CN=93c008081a77522921c0d5f1216ff5bf105e9db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d7:a2:6b:6d:1b:9f:79:43:36:e8:6d:43:ea:
                    20:d9:09:f6:53:72:4f:e7:30:a8:0c:86:38:5a:08:
                    dc:87:ea:c5:4d:af:9d:5f:88:4e:16:e4:70:ec:25:
                    95:e2:a9:08:73:1a:02:3c:e4:61:77:08:17:85:29:
                    cb:37:19:48:ae:55:00:dd:12:85:46:9c:7e:7f:6a:
                    32:ce:03:4e:1a:4a:2e:0d:13:a4:4b:d2:43:f5:37:
                    e9:22:9c:b2:74:87:07:5b:b3:79:38:3f:f5:67:f5:
                    11:01:41:20:06:06:b9:32:fc:b5:5d:e5:09:b7:e3:
                    8f:f4:f0:8d:ef:3c:0a:2a:64:12:89:3f:f7:b1:29:
                    4a:fc:1e:41:65:82:a2:a5:be:6e:5a:9d:7d:ba:d8:
                    1b:39:11:f9:37:31:ae:6a:cc:bf:b4:26:c3:22:b9:
                    7f:c8:c9:33:06:18:47:f9:ac:70:2e:20:51:34:7c:
                    cf:ed:4a:b5:08:4f:35:d2:21:e8:32:19:6b:fb:9e:
                    4e:3c:1b:af:de:b8:30:48:fb:d7:7e:cc:12:22:80:
                    3c:93:62:8d:15:cb:09:d0:0d:92:d8:ea:3a:64:5e:
                    59:93:f5:57:41:60:96:1b:4b:5e:b2:93:14:aa:0f:
                    26:ba:60:3e:ce:d6:27:bc:18:b9:a9:11:e3:ff:bc:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C0:08:08:1A:77:52:29:21:C0:D5:F1:21:6F:F5:BF:10:5E:9D:B9
            X509v3 Authority Key Identifier:
                keyid:59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:59:06:ae:54:8a:5a:38:bc:4f:64:1e:66:6f:a4:72:b0:65:
         5e:ef:9e:8d:8b:6d:dd:ef:b4:20:88:9a:ca:e0:34:74:fe:6b:
         38:37:60:9f:1a:b9:f8:97:f6:60:bc:e6:1e:79:3d:24:3b:f5:
         de:cb:12:58:8e:6a:94:1e:7e:31:27:2e:af:d9:9f:e3:4f:26:
         b6:45:ad:f5:ce:b9:68:c0:7e:fd:da:19:81:94:7f:bf:20:0d:
         c8:a5:59:a6:75:cc:42:d7:5c:b0:86:2f:41:12:42:fb:77:c4:
         6f:66:32:8d:8e:c1:40:f7:ab:d1:c8:99:b8:66:04:aa:02:30:
         0f:37:23:ba:e1:f3:7c:b2:87:85:0a:1f:e1:62:06:6d:d9:ca:
         d2:6e:53:a7:3e:d3:c7:64:86:14:16:9d:58:1d:73:ff:45:e6:
         d0:5d:b2:af:36:cc:33:d8:50:28:c1:75:df:15:9d:28:2b:aa:
         3f:03:da:4b:58:5f:19:3c:a2:69:ed:d3:fe:28:2c:1a:c8:8b:
         7b:86:21:1e:a1:a3:4d:f2:f2:c8:61:06:da:54:4a:c1:98:d3:
         80:d7:ec:54:fc:c6:1f:73:57:14:33:53:58:e8:d0:8b:13:ad:
         ee:90:b3:94:7c:e3:d2:d1:31:68:93:5f:de:ee:f5:04:2a:eb:
         61:7b:6d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:54:30 2026 by rpki-client