Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.mft
File:                     wV2l51mD4hnpvXXA63aa3WpcPxQ.mft (raw, json)
Hash identifier:          70pemkmb/KbukfiiN9m5vUSauKYIeXOgA62KtO+P0pU=
Subject key identifier:   0C:BB:9A:8F:28:78:35:4C:4D:6C:8B:AD:95:4F:88:12:5C:18:8A:99
Authority key identifier: C1:5D:A5:E7:59:83:E2:19:E9:BD:75:C0:EB:76:9A:DD:6A:5C:3F:14
Certificate issuer:       /CN=c15da5e75983e219e9bd75c0eb769add6a5c3f14
Certificate serial:       019D3451D918715BD217893F8D9FC7FA94AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV2l51mD4hnpvXXA63aa3WpcPxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.mft
Manifest number:          39
Signing time:             Sat 28 Mar 2026 12:01:12 +0000
Manifest this update:     Sat 28 Mar 2026 12:01:12 +0000
Manifest next update:     Sun 29 Mar 2026 12:01:12 +0000
Files and hashes:         1: snyH0AH5dVgKf4UFPj1sRloyJL4.roa (hash: lYWkmS4ke6/CVFVLZxKpdxT0VNDZAvbyhDNV2kGc7Pk=)
                          2: wV2l51mD4hnpvXXA63aa3WpcPxQ.crl (hash: brVLwjk9znYj1LG/UNZkOl2IzgqRLiO5wV3Zf/Vy1ek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV2l51mD4hnpvXXA63aa3WpcPxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:34:51:d9:18:71:5b:d2:17:89:3f:8d:9f:c7:fa:94:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15da5e75983e219e9bd75c0eb769add6a5c3f14
        Validity
            Not Before: Mar 28 12:01:12 2026 GMT
            Not After : Mar 29 12:01:12 2026 GMT
        Subject: CN=0cbb9a8f2878354c4d6c8bad954f88125c188a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f9:a2:ee:6c:1e:cc:b6:b0:67:dc:0f:e6:66:
                    93:82:80:3b:55:b1:19:ef:1b:3f:af:93:3c:74:49:
                    d9:dc:e1:43:36:45:85:60:78:9e:0d:77:45:1e:75:
                    5f:c1:4e:0d:5a:0b:3d:94:fe:3f:7b:1e:58:b2:66:
                    03:c1:31:3e:37:53:3d:d9:97:a5:51:2d:4a:71:57:
                    94:ea:cf:20:f8:c0:48:f2:b8:5f:38:1f:20:d8:a7:
                    25:4a:60:68:f9:9d:95:0e:42:ab:23:e1:01:25:db:
                    51:b6:3e:f8:88:ff:b4:a4:a8:77:61:19:19:0c:b1:
                    3a:47:84:41:3f:da:00:42:14:db:a9:70:ac:c2:e2:
                    84:75:70:c1:b2:d9:06:03:e7:ff:77:a7:20:2e:d8:
                    8b:e3:6f:a8:32:98:8e:3a:b0:52:a5:74:00:4a:a0:
                    77:a0:0c:32:42:96:da:70:5f:23:7a:38:13:dd:f8:
                    51:81:d7:2f:63:fd:86:7e:fc:53:57:5e:ac:99:0d:
                    c7:bf:e2:05:e7:58:c1:65:86:6a:bd:1e:bb:e9:5e:
                    82:5e:f4:1e:28:43:5b:d9:f2:51:97:23:a8:68:e1:
                    7b:4d:dc:09:fe:33:ca:e3:10:98:2b:fc:6d:7c:6c:
                    3e:ea:27:99:45:bd:93:04:a0:bb:4f:57:f4:de:85:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BB:9A:8F:28:78:35:4C:4D:6C:8B:AD:95:4F:88:12:5C:18:8A:99
            X509v3 Authority Key Identifier:
                keyid:C1:5D:A5:E7:59:83:E2:19:E9:BD:75:C0:EB:76:9A:DD:6A:5C:3F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV2l51mD4hnpvXXA63aa3WpcPxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/92f7ab-d75d-46a1-bb21-df7a4eb6bf28/1/wV2l51mD4hnpvXXA63aa3WpcPxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b1:9c:62:7d:d4:94:90:72:66:d7:96:6f:9d:b9:2c:69:0c:
         c5:5a:c3:e3:f3:08:06:03:de:2d:6e:22:80:08:c7:39:be:5b:
         70:76:e3:ca:0e:50:c3:86:78:8e:72:93:2d:03:9b:45:7a:d5:
         f3:57:e1:4e:2c:2f:a7:41:87:f6:3e:e4:43:ca:de:16:76:9d:
         b8:0a:2b:fb:15:f2:cb:76:b5:32:41:72:ea:e5:8f:7a:ec:47:
         c2:19:5c:f4:b8:b2:dd:6d:a0:14:ff:0f:38:81:c6:5f:6e:b7:
         d7:49:9d:57:ad:78:36:9c:92:b2:94:bc:cd:ae:85:15:69:fc:
         fa:2f:8e:0e:35:f0:40:5a:0e:2f:ea:0c:db:d9:4c:30:d6:2a:
         a7:06:f3:42:a9:25:cf:32:fc:04:bd:80:c3:ae:f3:dd:e3:e0:
         04:13:c7:40:23:a9:24:c7:4e:53:8d:90:df:71:97:d1:73:94:
         96:08:81:87:22:ef:92:03:26:2f:16:bf:8b:cc:23:e4:25:10:
         ac:cc:3e:71:6a:c7:0b:05:e7:d1:ac:40:51:3d:41:30:8c:dd:
         c8:ce:20:10:b3:46:6a:f9:39:58:36:97:ed:c3:7a:2a:3b:8b:
         da:31:32:c7:ed:2e:1b:2b:64:c4:8d:b8:90:eb:a7:d4:1d:e2:
         7f:ec:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 14:29:50 2026 by rpki-client