Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.mft
File:                     wP7jP-yKG99GJgiXZPqOlilLSNw.mft (raw, json)
Hash identifier:          zfqz/dw+wVqJharRud/bPxruHtC+uTywh3bCl2o4Mog=
Subject key identifier:   75:3E:90:53:BF:3A:3E:BE:AE:04:00:C9:F1:8F:B6:98:C9:8B:F0:B9
Authority key identifier: C0:FE:E3:3F:EC:8A:1B:DF:46:26:08:97:64:FA:8E:96:29:4B:48:DC
Certificate issuer:       /CN=c0fee33fec8a1bdf4626089764fa8e96294b48dc
Certificate serial:       019D31BED6076CEA542F748D70EAB700270C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wP7jP-yKG99GJgiXZPqOlilLSNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.mft
Manifest number:          011D
Signing time:             Sat 28 Mar 2026 00:01:23 +0000
Manifest this update:     Sat 28 Mar 2026 00:01:23 +0000
Manifest next update:     Sun 29 Mar 2026 00:01:23 +0000
Files and hashes:         1: wP7jP-yKG99GJgiXZPqOlilLSNw.crl (hash: 7OUlJuxV9Go2KX54vDlr7I9zGjNLCc6bXIZgw8Abcsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wP7jP-yKG99GJgiXZPqOlilLSNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:31:be:d6:07:6c:ea:54:2f:74:8d:70:ea:b7:00:27:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fee33fec8a1bdf4626089764fa8e96294b48dc
        Validity
            Not Before: Mar 28 00:01:23 2026 GMT
            Not After : Mar 29 00:01:23 2026 GMT
        Subject: CN=753e9053bf3a3ebeae0400c9f18fb698c98bf0b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:00:0b:19:cd:ca:cb:db:f3:64:74:74:a1:
                    00:cf:33:5e:d7:d6:fe:8b:35:97:24:dd:a7:12:c9:
                    25:f0:9d:0c:f6:85:f0:e9:49:af:0c:94:88:0f:40:
                    54:41:37:b3:ba:4d:be:24:0b:83:6f:75:8b:93:f3:
                    a3:33:7b:25:bb:24:f6:40:c0:01:2a:8d:5c:5a:5c:
                    8b:21:50:3a:5f:e7:cd:fc:27:fc:00:fa:7c:c1:b4:
                    10:d9:ae:13:1c:ac:83:e2:21:94:a7:95:49:0f:3d:
                    f1:6a:73:c5:b1:3d:7e:15:42:29:95:ae:4f:ca:7b:
                    a6:c2:0a:3c:58:0e:d4:cb:0e:c5:1a:a8:05:26:4d:
                    25:a1:fd:73:35:8b:e4:0e:83:02:c9:e9:e9:1b:b0:
                    44:db:f1:25:3f:56:b1:3d:95:93:3f:de:75:1c:54:
                    fb:b9:8d:72:45:27:91:40:28:44:ce:e6:a5:07:07:
                    b1:4c:11:10:e1:9c:d9:6e:b8:c3:7e:86:91:b8:ee:
                    de:27:87:2c:cc:24:b6:2d:e1:12:50:04:60:6f:ca:
                    76:33:ea:30:4a:f4:d0:f3:ff:a2:dd:a3:36:ea:a3:
                    c3:27:f7:14:e6:01:9b:1b:25:cd:1d:b9:b1:d0:4b:
                    c7:72:4a:c4:b4:29:b3:55:3b:22:02:1b:6d:fb:1c:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3E:90:53:BF:3A:3E:BE:AE:04:00:C9:F1:8F:B6:98:C9:8B:F0:B9
            X509v3 Authority Key Identifier:
                keyid:C0:FE:E3:3F:EC:8A:1B:DF:46:26:08:97:64:FA:8E:96:29:4B:48:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7jP-yKG99GJgiXZPqOlilLSNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a04eb1-0729-4c3b-98f8-7981470e6d53/1/wP7jP-yKG99GJgiXZPqOlilLSNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:ce:c0:d6:ce:e0:88:81:59:f5:e0:5d:6f:50:d8:a3:dc:09:
         8f:7d:54:13:e6:01:dd:ef:ff:03:98:45:47:81:51:fd:17:dc:
         6e:f7:11:14:44:13:84:2e:02:38:8e:57:96:d3:bf:36:38:7e:
         f6:51:fe:36:36:0a:47:fd:c6:96:aa:03:f6:a6:a6:3c:1a:d6:
         26:dd:25:2b:d7:13:b8:47:b4:c3:08:4b:a8:c8:2c:da:4e:17:
         86:4c:62:c9:b5:29:77:0e:32:8b:cb:72:67:fc:23:70:77:aa:
         5f:30:08:ba:3f:18:1e:da:7e:16:10:97:ec:39:0d:17:14:7a:
         8c:43:61:97:68:ab:eb:66:1e:a4:72:e1:63:34:ad:e1:05:15:
         03:07:9d:77:f7:4b:37:de:c5:81:28:2c:7a:53:3a:c8:21:9e:
         71:3a:cb:b0:d0:35:07:0f:aa:80:a9:af:53:e5:bb:7e:cc:9c:
         0e:e7:3f:70:f2:fb:50:38:15:5a:a8:f6:87:19:b7:6c:4c:d1:
         1d:b2:00:c0:3d:55:42:aa:22:d5:23:62:ae:a3:84:31:03:00:
         cf:38:0d:e3:c3:10:cd:94:00:55:0e:95:aa:81:17:0f:ef:ea:
         ea:82:1d:c9:d1:57:53:e5:e0:eb:cc:81:b4:96:79:f5:d9:52:
         b2:68:e1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:28:05 2026 by rpki-client