Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
File:                     wR0IGGQzkDBptda7ZS-YQo9TyAg.mft (raw, json)
Hash identifier:          RZEZeBPKHHzeWIN9mi1Q6KgiRH/MzsDw401ukCtl0bk=
Subject key identifier:   19:97:BC:31:12:61:B1:C0:72:D9:BD:5F:83:FC:FC:1C:C1:DB:C2:35
Authority key identifier: C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08
Certificate issuer:       /CN=c11d08186433903069b5d6bb652f98428f53c808
Certificate serial:       019D2884AA7F04E09A70029679E6A40FF9D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
Manifest number:          0468
Signing time:             Thu 26 Mar 2026 05:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:16 +0000
Files and hashes:         1: a5e5m59VpFO4p4dy18WiGqkpZ8A.roa (hash: WRnLDwGlhFM7xAH4tskKGrHMj8+0GuB3ILEsnJKuHDc=)
                          2: nhi5PR9kkGjJU8TEuQ8xL20m7XA.roa (hash: eXjfHEORSrmx9j/3/AZZ7XF2KyD0yfbFG3RfIuUBXFk=)
                          3: sYaZQ3u2p7Idos9F2hdpdk29H-8.roa (hash: qUgIR43iEvfVLnAh9SKc6qTcZrxYuGi/KZLcH3UDKI8=)
                          4: wR0IGGQzkDBptda7ZS-YQo9TyAg.crl (hash: JZnwU2wRbQRRs2i0DK1QlCuEuF1BB0ZS7E+K6F9oxIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:aa:7f:04:e0:9a:70:02:96:79:e6:a4:0f:f9:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11d08186433903069b5d6bb652f98428f53c808
        Validity
            Not Before: Mar 26 05:01:16 2026 GMT
            Not After : Mar 27 05:01:16 2026 GMT
        Subject: CN=1997bc311261b1c072d9bd5f83fcfc1cc1dbc235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8d:b7:45:dd:f7:be:9e:77:6e:51:c9:b1:af:
                    ff:2f:b1:ba:77:03:6e:e9:37:d6:5e:9d:9a:d0:b2:
                    1b:66:57:e3:af:b8:65:09:f2:b5:9b:6c:86:f8:6f:
                    bf:a1:e5:b7:91:90:0f:55:7f:db:9e:ab:6a:47:49:
                    de:54:b5:c1:bb:01:02:ed:b1:36:68:a3:66:54:80:
                    88:94:c2:e9:0c:91:2e:e8:6b:af:22:33:49:93:54:
                    cd:7f:2b:16:40:63:31:66:38:96:79:32:da:f8:2a:
                    4b:fa:1e:1e:ec:f6:24:ec:ea:0d:20:82:6f:d6:dd:
                    af:c3:5a:46:9f:98:6a:85:22:24:a1:19:20:cd:4f:
                    23:da:4b:91:93:ad:65:30:a5:d6:7f:b1:25:50:92:
                    e3:ce:65:69:3c:9e:08:cd:c7:e2:04:49:1b:a4:e6:
                    58:c6:6a:f9:13:82:e6:a7:9f:47:13:69:99:67:21:
                    f1:d1:62:77:78:e9:7f:76:6c:4b:20:7b:84:f5:2c:
                    74:53:ea:57:0c:19:f6:40:d7:16:d8:a7:13:68:07:
                    f8:ac:88:f2:fe:60:8f:b1:13:bc:48:04:f3:55:f6:
                    6c:a1:00:2b:c3:4f:11:96:69:bb:a7:a1:6e:eb:34:
                    87:35:84:55:cc:81:c3:bb:10:b1:c0:39:0d:00:e3:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:97:BC:31:12:61:B1:C0:72:D9:BD:5F:83:FC:FC:1C:C1:DB:C2:35
            X509v3 Authority Key Identifier:
                keyid:C1:1D:08:18:64:33:90:30:69:B5:D6:BB:65:2F:98:42:8F:53:C8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR0IGGQzkDBptda7ZS-YQo9TyAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/263352-8088-4f5b-a620-aeb5cd8de15d/1/wR0IGGQzkDBptda7ZS-YQo9TyAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c4:3a:74:c3:46:07:72:a8:b5:bb:f3:ca:20:8e:52:e3:a3:
         c0:b5:57:09:40:2a:d1:f1:07:2a:e7:ec:97:71:f8:20:d9:60:
         dd:42:1f:58:a0:e7:d2:a5:df:b2:0f:b1:45:b7:a2:5a:56:94:
         15:37:9e:a0:cf:97:d4:86:0f:0a:80:e0:4f:21:fc:82:bf:83:
         35:27:2d:58:45:af:4c:58:4e:82:f5:6f:56:96:33:70:1c:a2:
         68:1c:4e:b6:da:7f:46:bd:d4:bf:e5:8e:a3:8b:a0:59:7d:28:
         0f:db:7d:0c:67:a6:34:bf:6a:81:1f:2f:bb:eb:ff:28:c9:07:
         02:1d:b3:8b:d2:75:f1:09:f5:0f:75:25:10:41:59:f2:e3:10:
         90:59:43:f3:22:1c:75:69:ed:92:2e:db:21:96:72:06:68:7b:
         8e:18:ed:af:66:c6:91:4b:31:77:ef:0a:82:ed:79:a1:87:0a:
         cd:e5:64:15:0b:c8:4f:d8:41:bf:32:33:0f:e0:6c:e0:09:4b:
         ab:09:8d:11:42:eb:c0:58:26:e8:13:db:00:2e:85:dd:3d:d9:
         5b:97:cc:8e:cb:b4:95:29:0a:3a:9a:31:b9:bc:6f:b8:c6:85:
         07:17:cf:9b:d3:bc:6b:ea:8d:d9:d1:78:a4:54:78:8f:6b:6d:
         9a:3f:07:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:36 2026 by rpki-client