Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
File:                     wvypREWGBrEBfibDyhdDD3_5JLM.mft (raw, json)
Hash identifier:          b1cGtaDU02FaNMZT4X4mVbcJsywEeNn5GMlTHFN7bU4=
Subject key identifier:   CE:A9:87:D7:05:B3:2B:5F:68:EA:9F:62:0D:DF:53:A6:77:AF:61:B4
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Certificate issuer:       /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial:       019D26282A7EBEF130890BEA2C3871792B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 18:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:59 +0000
Files and hashes:         1: 2eqhGMddc6o7FIDR3NGWx4Ow8E8.roa (hash: z5gVcRgK3Nn9nyPEEaZPlAeofGLHnrjmeBcu5Qk4JJE=)
                          2: mUJD4x2jM1tnziJJnzvezoEdIg4.roa (hash: CPeCrxpjCYKP3mqC1/d2mx1bSiUKrWLUwX4R4Tk1imA=)
                          3: wvypREWGBrEBfibDyhdDD3_5JLM.crl (hash: qr7t0VKZKr/oVTOW31F3impq9oXQg7+Tpgvm1FY8mvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:2a:7e:be:f1:30:89:0b:ea:2c:38:71:79:2b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
        Validity
            Not Before: Mar 25 18:00:59 2026 GMT
            Not After : Mar 26 18:00:59 2026 GMT
        Subject: CN=cea987d705b32b5f68ea9f620ddf53a677af61b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:79:ff:89:35:e3:29:7c:4a:ff:14:f6:7d:bc:
                    58:a0:53:25:b5:07:d8:93:15:1c:72:d2:35:13:e4:
                    ad:f9:1a:49:db:73:ca:51:bb:d0:1a:01:8a:d4:5e:
                    9f:75:3d:6b:73:a2:da:dc:dc:1c:aa:0b:fd:ac:5d:
                    ce:57:f5:a8:12:ff:df:0f:77:33:68:31:3d:65:b6:
                    7b:ae:06:1e:f4:46:a9:af:26:62:78:ca:84:05:15:
                    79:39:21:a0:26:2d:94:0a:0c:3c:b4:eb:67:9f:4b:
                    80:74:bb:9c:e2:78:ad:27:a0:6d:25:f4:bf:a8:a9:
                    a5:04:3f:e0:3f:9d:0e:7c:bc:0b:a5:5d:76:54:38:
                    5a:b7:a5:1c:0e:25:e1:ff:19:4e:03:68:97:ef:eb:
                    8f:6a:d5:a8:cf:77:a3:45:40:7b:fc:75:19:7a:d8:
                    fb:a4:73:f2:25:96:db:0c:52:27:fb:c2:49:6a:d4:
                    bc:e4:3b:a1:85:f1:71:2e:2c:6e:b6:d0:31:89:94:
                    a4:34:fc:01:f8:d0:e8:6f:8d:c0:1f:f1:69:88:a4:
                    aa:4a:e6:27:fd:d1:4e:6b:87:87:8f:14:1d:21:e6:
                    10:06:44:7c:85:0e:09:31:60:ab:b6:ae:03:7b:19:
                    d5:51:db:48:25:01:a4:4d:a7:f7:7b:6c:8e:cc:a4:
                    bb:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A9:87:D7:05:B3:2B:5F:68:EA:9F:62:0D:DF:53:A6:77:AF:61:B4
            X509v3 Authority Key Identifier:
                keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c5:cd:0a:b8:d1:78:0b:41:07:f3:72:32:98:11:cb:96:27:
         26:3c:c5:d6:7c:dd:d8:58:10:13:73:40:7d:88:8b:dc:ec:17:
         fb:de:0e:92:22:e2:f7:c7:2c:7b:d4:24:8c:2e:21:42:04:43:
         ca:52:4c:5a:79:d0:1c:66:50:60:63:54:ab:1c:f5:f5:ef:99:
         9d:d9:9b:7a:79:e6:bb:4b:f9:d5:b9:2a:52:c1:7b:42:34:fe:
         86:6f:61:07:f1:85:57:d2:75:83:66:31:32:d3:bb:9f:f9:47:
         bc:e7:18:47:d0:6c:44:ca:fe:9f:54:a5:60:d7:0e:65:c9:13:
         36:5f:08:02:2c:cf:0f:0a:cd:76:1e:00:cd:d7:a5:ca:2a:25:
         50:12:4e:23:56:10:43:c6:ed:cf:03:b2:95:db:36:1b:5a:5d:
         ce:fb:2c:79:52:ea:4e:86:5b:4d:22:a8:21:6e:fb:01:3f:87:
         8e:4b:c7:a7:26:29:0a:2b:79:6c:36:1f:c7:56:b6:3f:b4:2b:
         80:7d:6c:9c:cf:91:04:72:50:61:0b:8e:d3:fe:30:ef:29:71:
         67:b4:76:83:ac:a1:89:97:9b:75:61:98:05:83:4c:8e:84:aa:
         c6:b2:21:f8:fc:48:18:29:70:dd:71:e9:26:fd:92:7a:5f:7a:
         0b:60:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:12 2026 by rpki-client