Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File:                     DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier:          hE6rk3Qpyp/HU8R5t3EWT8hhzZ5BDb7FYnhuhaABDUY=
Subject key identifier:   D6:9C:E0:E0:0F:4B:F3:0F:0F:57:B4:63:84:A8:D3:7F:6C:99:73:6A
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       019D270490B839B5328B2DF9C7E0D394E062
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number:          0B97
Signing time:             Wed 25 Mar 2026 22:01:43 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:43 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:43 +0000
Files and hashes:         1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: VNB5oDnkiB8SEUu5WnvgwlKuHYLOm7heVNFtLley8NE=)
                          2: j8vNC93uxoh-4kk4cHhskKuIFe4.roa (hash: BN9kSSFWkYcPXBEGoOjVhdYG3iHtGqPP4CWGHkZ5iSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:90:b8:39:b5:32:8b:2d:f9:c7:e0:d3:94:e0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: Mar 25 22:01:43 2026 GMT
            Not After : Mar 26 22:01:43 2026 GMT
        Subject: CN=d69ce0e00f4bf30f0f57b46384a8d37f6c99736a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:4c:36:c4:d2:b0:1a:34:e1:65:df:c6:09:
                    2e:e0:a6:66:f8:b9:35:31:96:b6:29:e7:97:3c:b3:
                    c2:88:75:73:e2:b7:01:ac:e9:87:97:31:17:12:77:
                    29:ca:9d:05:32:39:95:55:af:e5:5c:c0:92:1e:a8:
                    ae:a8:4c:c7:e5:44:f4:f1:ee:32:ac:74:5d:29:09:
                    32:03:e4:28:96:75:d7:a7:07:61:ca:c7:1b:ac:38:
                    f8:cc:90:ff:0b:7a:79:12:7a:2f:3a:41:96:96:52:
                    c7:b5:fe:d5:d9:49:0a:d9:03:fd:19:86:a1:d1:26:
                    7c:50:3f:68:8c:c4:fb:10:a2:c7:d6:21:e2:16:89:
                    f6:a3:10:a6:f7:75:d9:48:07:d0:9c:4e:b4:d7:bf:
                    a7:60:8d:e0:d7:ec:04:4c:4e:14:9e:2a:53:74:3c:
                    30:49:bf:e6:d9:cc:e8:85:20:47:d1:a5:c2:d0:5b:
                    1b:d3:02:5b:22:76:89:8c:25:ba:5c:cc:ed:99:43:
                    da:5f:4d:81:5c:c5:7c:bb:e4:1f:2c:ca:17:c6:c1:
                    69:19:30:1f:f2:63:b4:74:d5:ea:46:fc:d8:b0:df:
                    95:0d:1a:7d:ff:e1:d5:0d:a9:01:f2:cf:6b:2d:3b:
                    11:a2:6d:27:8d:87:42:16:4a:fc:4b:c5:23:26:8d:
                    f0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9C:E0:E0:0F:4B:F3:0F:0F:57:B4:63:84:A8:D3:7F:6C:99:73:6A
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a8:c2:1c:36:6e:b3:37:01:92:ad:a1:19:24:6e:63:5d:c4:
         9a:da:55:eb:16:16:03:10:f9:8e:5c:09:56:bb:af:d5:a9:94:
         26:19:0c:58:59:35:8f:2e:ca:95:6d:95:4c:aa:cb:1b:f3:d9:
         94:a8:31:17:58:88:21:88:93:0e:0f:aa:e1:9b:66:19:ad:17:
         6d:ff:00:d8:98:77:5c:a1:20:f9:68:99:e8:ea:97:29:39:9a:
         17:e6:f1:2b:f3:3c:89:30:75:78:96:b3:4d:8d:ae:97:5f:bc:
         c2:78:bc:41:11:50:70:da:2a:09:44:e6:75:b2:77:5b:8f:0c:
         bf:87:0a:4f:f9:c7:64:6f:81:c8:06:23:37:37:47:3a:2c:c2:
         a3:a3:1b:e9:99:8f:63:cd:ef:c9:76:8e:a5:3b:a2:0e:68:b4:
         c1:37:b5:99:85:9a:cd:c8:b7:ab:c7:d7:9c:0d:e0:df:41:de:
         c4:5f:a9:dc:22:e0:16:28:4a:cb:08:ac:56:b5:a1:76:d7:a9:
         f0:96:1a:9c:bf:56:e4:0a:ed:fb:96:64:0b:07:56:9b:c9:a3:
         a8:ae:27:33:f3:ac:e4:67:98:a9:17:32:45:87:fa:31:1f:12:
         d7:b4:ba:59:0a:49:3b:a2:2c:b1:1b:7c:97:42:86:c6:29:33:
         ee:23:eb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:16:11 2026 by rpki-client