Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
File:                     wRq5FoIcWjFIzhJSungByqKrSRQ.mft (raw, json)
Hash identifier:          JdsdarN+xEkT7bMu3mwDyAqYl2/sRAYmNKdBXxjHV0c=
Subject key identifier:   0D:B4:BA:0B:70:5F:B8:A7:76:36:B4:4B:24:E5:65:0A:B8:02:E3:1F
Authority key identifier: C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14
Certificate issuer:       /CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
Certificate serial:       019D28BB80A22616B9BAD5267593A42BDE82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
Manifest number:          1886
Signing time:             Thu 26 Mar 2026 06:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:09 +0000
Files and hashes:         1: LZ-6W0p7V-_FK2vNKbU1WckOSyQ.roa (hash: w9kLA3Gv8FlNVERrO2aaxlGZDvx7nVjiV7GPYUks7IM=)
                          2: wRq5FoIcWjFIzhJSungByqKrSRQ.crl (hash: ln8+PRU6zF1Y3XwG4v5u13WGpcfSmo6UCbd0TMxjD3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:80:a2:26:16:b9:ba:d5:26:75:93:a4:2b:de:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11ab916821c5a3148ce1252ba7801caa2ab4914
        Validity
            Not Before: Mar 26 06:01:09 2026 GMT
            Not After : Mar 27 06:01:09 2026 GMT
        Subject: CN=0db4ba0b705fb8a77636b44b24e5650ab802e31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:65:ab:0d:c2:79:65:c4:70:ab:6d:5a:64:
                    9f:eb:88:09:1a:05:97:30:0b:bd:42:5f:ac:8b:06:
                    2e:8a:9e:6c:48:6f:ea:f2:2f:5c:d4:ed:73:ba:9c:
                    e0:f4:eb:83:b8:8b:50:6c:fd:3e:ea:2c:e0:c3:4f:
                    2e:fc:99:dc:90:e3:18:cc:90:51:27:91:e2:58:a9:
                    d0:3b:14:69:ae:3d:c7:1f:fb:fe:53:c2:17:ab:7f:
                    24:92:a7:0b:a7:b9:0b:7c:1f:fe:eb:01:43:5d:27:
                    e7:66:04:50:9f:15:21:5c:6c:73:d8:3d:35:3c:86:
                    11:66:cb:08:a7:9c:5a:5f:a1:40:4d:ab:ab:18:e3:
                    4a:ce:11:d5:04:7b:87:46:8b:22:42:50:4b:98:e9:
                    4e:63:f0:eb:4b:9d:a3:eb:9a:88:fa:70:1d:0d:ff:
                    b8:65:92:61:e3:d1:10:c8:bf:d1:7c:ee:65:64:51:
                    c5:9b:f1:51:2f:8b:67:67:0d:fe:2b:59:0e:79:2a:
                    ed:d3:71:5c:84:0e:ca:7b:fc:54:d1:d0:62:ff:ba:
                    ef:9f:91:25:86:4a:c9:62:ff:96:01:06:8b:59:9f:
                    96:f6:b4:3e:b7:f4:18:5e:24:4e:7e:a1:f9:71:9e:
                    37:73:07:7f:4a:c3:d4:9f:44:68:d8:fd:53:e2:31:
                    74:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B4:BA:0B:70:5F:B8:A7:76:36:B4:4B:24:E5:65:0A:B8:02:E3:1F
            X509v3 Authority Key Identifier:
                keyid:C1:1A:B9:16:82:1C:5A:31:48:CE:12:52:BA:78:01:CA:A2:AB:49:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRq5FoIcWjFIzhJSungByqKrSRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d2362e-3256-4244-858a-ee56f1afc366/1/wRq5FoIcWjFIzhJSungByqKrSRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:6e:24:a6:21:bb:b2:a9:a6:be:ac:25:b3:23:6b:6c:c4:
         67:26:15:6e:8d:2a:33:b7:a0:68:b9:f5:07:88:b5:43:dd:e5:
         ae:7b:38:2f:f1:f6:e7:03:3e:5a:95:9c:b1:2c:79:77:3b:34:
         07:0c:af:fe:46:27:4c:fe:cb:9e:ed:2d:b8:aa:93:2e:c1:1e:
         31:d7:d6:4e:a7:5b:9b:f2:60:cb:7d:c0:3c:46:83:e9:6b:85:
         ce:aa:05:57:b3:b8:cd:ae:2a:16:c8:c2:97:be:96:3c:13:10:
         b8:2c:1d:c0:35:55:35:d7:70:6c:d6:08:d1:d9:93:92:c2:8b:
         43:65:b7:fb:0a:22:d0:24:22:09:01:7c:0c:85:47:e2:fa:4f:
         af:96:e6:c9:fc:8f:4e:65:16:22:2a:4f:21:cd:88:a0:d8:78:
         d6:74:27:bf:2d:00:56:06:0a:42:29:60:0a:2a:ed:36:5b:55:
         20:49:92:9c:11:c4:d8:23:18:bb:3d:9e:0b:c2:72:7f:78:a4:
         db:0d:10:07:b2:77:54:66:a3:6e:d4:e9:45:0c:0f:d3:09:c6:
         47:b7:48:e2:77:4b:c7:5d:87:9f:4f:4a:4c:35:e1:60:b9:49:
         0f:2b:c6:b5:de:01:2a:81:bd:90:8f:74:b2:fc:87:c8:e6:bf:
         2e:60:d0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:06:04 2026 by rpki-client