Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
File:                     WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft (raw, json)
Hash identifier:          44TE8uKRv0DMDeHSm4dm1ITHSX7+D3E7aAFRDcakUso=
Subject key identifier:   57:ED:6D:A2:E5:B4:FE:6A:17:11:B8:CB:B7:B1:78:4F:3E:A4:D9:86
Authority key identifier: 58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66
Certificate issuer:       /CN=58ec149761a5d84b8c49e2c9936bbb748033fe66
Certificate serial:       019D2772A5D4D4F5B159C9B20E3D8A6FD31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
Manifest number:          0993
Signing time:             Thu 26 Mar 2026 00:01:58 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:58 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:58 +0000
Files and hashes:         1: 25mArsav4GG3WtXno9imIubDQu0.roa (hash: Cg3JHKj2K2hfP/W6oR1e2hB6cuYdLQLmtsGZEIJI+LE=)
                          2: WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl (hash: xoVh2eGaRPa33G+f83DP9C6uacNFe+3TTYIMilw6naY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:a5:d4:d4:f5:b1:59:c9:b2:0e:3d:8a:6f:d3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ec149761a5d84b8c49e2c9936bbb748033fe66
        Validity
            Not Before: Mar 26 00:01:58 2026 GMT
            Not After : Mar 27 00:01:58 2026 GMT
        Subject: CN=57ed6da2e5b4fe6a1711b8cbb7b1784f3ea4d986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7b:c9:4a:83:7e:d4:17:e0:50:71:37:b7:bf:
                    ac:1f:9e:52:49:f1:35:77:23:4b:5b:6b:24:25:83:
                    87:48:79:42:53:d5:c3:ee:72:77:c2:1a:00:bc:51:
                    bc:59:94:ac:d4:95:23:2a:b4:f9:d3:cc:62:61:7b:
                    a2:c8:6d:9e:eb:e3:95:d8:22:2e:0f:27:63:27:fb:
                    1e:bf:e0:2d:3e:ee:fd:4a:a4:cb:8e:d1:41:09:fd:
                    06:42:fa:30:c6:7d:ad:08:5a:6f:c4:35:26:33:6d:
                    fd:e3:dc:54:9b:6f:32:c8:cd:81:10:ca:5d:34:b8:
                    1d:db:d9:b9:31:55:1d:19:71:99:1e:8c:e0:fa:8c:
                    0b:9c:f6:93:8b:07:00:b5:63:73:af:9b:67:78:e9:
                    65:75:01:e8:6d:43:7b:cc:ac:a9:5f:8f:ea:90:69:
                    75:0e:6a:f1:c9:11:3e:da:44:04:d3:81:60:19:25:
                    cd:bc:59:f1:ed:69:fb:60:ff:96:6a:73:0c:08:f2:
                    d1:78:71:bf:f9:fa:36:bc:7e:62:8e:78:98:88:8f:
                    7d:53:d6:bb:d1:df:a4:e0:cb:6d:5b:d0:61:76:9a:
                    b9:cd:6d:68:88:46:c9:44:17:ce:4d:0a:19:a6:36:
                    39:77:5a:48:fd:ac:08:e9:b6:7a:ae:72:da:55:be:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:ED:6D:A2:E5:B4:FE:6A:17:11:B8:CB:B7:B1:78:4F:3E:A4:D9:86
            X509v3 Authority Key Identifier:
                keyid:58:EC:14:97:61:A5:D8:4B:8C:49:E2:C9:93:6B:BB:74:80:33:FE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/b4ad9c-0d0b-4c3d-8533-dbf62fc5beb0/1/WOwUl2Gl2EuMSeLJk2u7dIAz_mY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:ee:21:3d:64:d0:dc:5c:b0:c0:61:d1:8a:b8:9b:a4:91:b2:
         7d:12:ba:af:2b:3d:fa:90:ff:de:1b:5d:4a:83:1c:4f:fa:32:
         35:45:66:35:bf:34:eb:a2:1b:2c:22:c8:ca:0a:35:08:6f:f9:
         df:d6:bc:bb:69:c8:a7:2d:94:ff:bd:b8:c4:fc:27:77:f6:d0:
         92:b8:ae:2f:fd:29:09:94:86:e3:81:4e:63:70:26:33:ef:87:
         2d:3c:f4:dc:c3:e6:75:5d:04:c6:c0:00:66:d3:f5:de:2d:d9:
         6d:29:89:37:a6:6a:fc:be:e0:6c:80:2f:65:90:ec:45:13:d3:
         05:b5:dc:e5:ef:de:22:40:80:13:eb:74:9b:9f:ab:cc:45:9a:
         bf:7f:a6:f7:82:af:86:c4:97:6c:ed:d9:09:c4:7c:40:80:80:
         16:f2:84:c7:fa:55:4f:27:a5:43:90:8e:2b:7d:c9:9a:bc:9e:
         61:e6:c8:f0:75:5a:09:1a:eb:5d:fb:74:33:77:18:50:7e:12:
         70:39:ec:e0:bd:27:7d:af:c2:24:f3:27:3b:41:89:1f:9f:78:
         a1:2b:2e:10:4e:02:55:d6:60:5c:e9:28:a9:5e:0e:9f:3f:3b:
         03:33:d8:93:c1:d0:3b:88:e9:ae:25:c0:33:28:80:42:2f:62:
         14:3d:88:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:16 2026 by rpki-client