Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
File:                     W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json)
Hash identifier:          u3VCPTTwT0kciWX18lYU9HvWv2MmTlnvLPveRhgcMac=
Subject key identifier:   ED:99:7F:B4:0C:AD:ED:B2:FB:F4:55:5A:8D:1C:A0:B0:06:A9:A0:E9
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Certificate issuer:       /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial:       019D26962630984C5FB071467CD76B71504E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
Manifest number:          161F
Signing time:             Wed 25 Mar 2026 20:01:07 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:07 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:07 +0000
Files and hashes:         1: 791fRILFqOtARsIN2F9txtCl0NI.roa (hash: S+jAsMzWDk2V8iCYU3ETgczWDfxmu6sl5GkhG0BZkaA=)
                          2: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: N8OTwRavEu525sMZLYf2N6Hhtkm7R0Hi3M4Ag7CwfnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:26:30:98:4c:5f:b0:71:46:7c:d7:6b:71:50:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
        Validity
            Not Before: Mar 25 20:01:07 2026 GMT
            Not After : Mar 26 20:01:07 2026 GMT
        Subject: CN=ed997fb40cadedb2fbf4555a8d1ca0b006a9a0e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:d4:43:d0:2d:93:aa:09:36:a7:32:02:7d:
                    9a:5f:79:81:d2:b0:7f:b1:91:d8:4e:fa:8f:0e:86:
                    25:7a:b3:13:35:02:17:bb:0d:f6:ad:6d:56:e7:c5:
                    46:fa:eb:f7:a8:ec:d9:3e:d7:d8:21:55:ea:c2:20:
                    23:9b:d0:fe:14:d9:e1:a1:86:a7:c4:3d:f4:e0:a7:
                    7c:4e:ea:0e:2d:53:54:2b:df:bc:ce:a9:9f:28:05:
                    8e:56:b0:4c:df:2a:74:c1:a7:7f:f2:80:27:f9:f5:
                    f8:ea:d0:29:67:be:19:a4:9b:d9:ae:36:33:1b:fa:
                    43:54:20:f5:a3:fe:3b:25:ae:3c:4c:90:0d:2d:05:
                    0c:06:de:a2:15:4c:3c:b6:12:eb:a3:5b:2a:ac:29:
                    5a:37:b2:2c:05:bd:47:fc:91:f0:99:28:54:8a:4f:
                    3a:c2:95:16:25:3d:cb:c8:93:0a:fa:b7:cc:f2:92:
                    9e:0b:ad:96:da:e1:6a:c1:80:c5:00:11:55:4d:02:
                    b2:17:9e:2a:c7:8d:ea:b2:92:52:99:db:65:22:05:
                    29:bd:3a:6c:38:54:95:4e:4e:b6:58:69:6f:86:95:
                    10:98:e9:40:26:6e:4d:79:e8:0e:d8:42:84:0d:11:
                    b7:4e:de:9e:4a:38:a3:31:52:90:9d:0b:2a:92:98:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:99:7F:B4:0C:AD:ED:B2:FB:F4:55:5A:8D:1C:A0:B0:06:A9:A0:E9
            X509v3 Authority Key Identifier:
                keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:9a:75:cc:8c:21:56:1c:4e:04:f5:4b:fe:90:17:39:53:1b:
         7b:42:33:23:00:14:cf:ba:9f:ae:c1:c4:1e:00:8e:b7:60:70:
         1a:78:b7:13:7d:21:cf:ea:7f:36:2d:b6:ab:d2:c0:e0:d3:2c:
         4b:2a:b3:fd:c7:f5:0a:c8:bf:b9:3b:00:e1:84:60:0c:ec:aa:
         9a:8d:b1:b9:74:ff:d5:72:e0:d3:69:41:5c:34:cc:3e:66:4d:
         a6:1f:e2:1b:46:59:f7:98:e1:1b:50:10:2f:b8:2e:88:17:67:
         f8:84:ac:ac:6e:42:1c:c2:1b:4d:ba:43:d2:9f:51:1a:4e:bf:
         6f:14:9d:7f:e6:80:45:28:15:f1:94:b2:42:6f:6b:f7:9e:6b:
         06:3f:3a:0e:07:b7:d4:ca:8d:ce:ee:99:ac:d6:1f:79:c1:12:
         78:37:1f:4d:91:3f:79:2f:7e:5a:61:d8:53:73:6d:a2:ff:88:
         6c:75:17:fa:a8:79:2c:76:77:cb:41:df:c7:0d:e2:2c:b1:7c:
         5a:95:7a:b8:6b:42:1a:26:0b:2e:b1:11:51:a0:62:16:00:6a:
         26:46:43:ee:d8:63:8a:ff:35:f7:45:d0:28:3e:42:1a:ea:15:
         62:22:0f:6c:79:a0:7d:f8:aa:34:1d:5e:df:30:c6:ce:d8:3a:
         d6:a1:ba:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:26 2026 by rpki-client