Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
File:                     wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json)
Hash identifier:          A1vu2qrElC/sMe4reaPOL8k1vu/ilmZO+DomysrMupU=
Subject key identifier:   F5:E3:6E:38:59:7F:A5:CC:1B:8F:EF:03:00:10:EB:12:04:53:81:CE
Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5
Certificate issuer:       /CN=c01c50948f3737ffe0c3b76b241ce905628885d5
Certificate serial:       019D2997967AA2466C5515EBC971CDD42A6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 10:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:33 +0000
Files and hashes:         1: iT1-zXlrjYa55ZvQVt6NmIOQm5I.roa (hash: TsRJtIg/mzMDY+LVA2YyZfX1z4fLu7FY3DeWJy1KmLg=)
                          2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: v/gArA6WB1u5swv9sRYWdTjOt/ZRgTtZQ0M8zJ2+T84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 10:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:96:7a:a2:46:6c:55:15:eb:c9:71:cd:d4:2a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5
        Validity
            Not Before: Mar 26 10:01:33 2026 GMT
            Not After : Mar 27 10:01:33 2026 GMT
        Subject: CN=f5e36e38597fa5cc1b8fef030010eb12045381ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:f7:76:bf:a7:27:56:75:27:c4:c9:d7:6c:
                    04:54:04:32:be:63:99:bc:a7:c3:12:49:55:d0:1c:
                    19:57:03:0c:a2:bd:e2:f9:a0:55:c6:96:00:4e:33:
                    49:b9:82:68:a8:10:b0:74:db:83:13:5f:05:ad:89:
                    2e:8d:6b:52:de:fa:2f:ed:e0:06:0e:62:08:bb:f8:
                    47:73:0c:93:92:80:40:df:73:a5:cc:96:69:b4:83:
                    10:51:bf:2b:6d:ee:8f:97:fc:e4:b5:60:01:aa:e5:
                    86:5f:16:cc:1e:e1:94:4a:35:c8:f7:79:23:04:11:
                    76:42:47:6c:dd:2a:d2:87:dc:23:71:da:a4:d0:5b:
                    56:ea:63:94:6c:c0:eb:de:95:b8:84:83:08:dc:65:
                    c1:5a:ad:fa:b0:4d:15:4c:d1:9e:5d:b0:96:38:a9:
                    ec:3b:fd:01:f1:51:e4:fa:9c:e3:80:56:da:37:35:
                    ee:19:8f:91:8a:36:e6:63:a4:2d:22:ef:4b:96:ce:
                    44:37:fd:22:62:1a:6a:53:c9:cc:5d:ca:ae:90:07:
                    91:7a:cb:68:d1:f4:98:1c:ae:3d:c9:21:00:df:e7:
                    17:46:3f:77:d4:f1:6c:0b:2d:b8:e5:a1:d9:86:71:
                    ac:ee:e8:60:6a:b1:35:7d:60:c3:b6:f2:27:f4:10:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E3:6E:38:59:7F:A5:CC:1B:8F:EF:03:00:10:EB:12:04:53:81:CE
            X509v3 Authority Key Identifier:
                keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ab:4e:52:64:42:60:76:0e:cd:54:d7:cb:4f:76:77:49:d2:
         f8:38:97:54:9b:ed:5a:76:e0:81:92:d7:17:e6:cb:d8:1e:74:
         16:97:0a:85:a7:cb:5b:b4:ff:7c:86:f0:c7:b1:c6:fb:b7:89:
         03:63:37:b8:82:68:b8:a1:19:9a:e9:ff:e6:62:f6:26:9e:3a:
         3e:66:6a:0a:50:7a:b7:3e:48:ee:d2:f4:29:f8:71:34:30:ec:
         b2:3f:0f:74:30:62:2c:51:9d:32:82:78:47:0a:bd:f1:38:14:
         40:ca:51:cb:5c:fe:99:82:2d:04:06:df:19:9e:3f:97:91:c5:
         81:14:2c:c0:0a:92:15:e9:eb:01:37:0c:7c:4e:e2:76:38:ed:
         24:01:bc:3b:59:87:da:29:45:c4:f7:7d:d8:00:c8:f1:ad:fc:
         0a:5f:ff:ac:f4:16:80:95:70:1a:3c:f8:68:8f:cc:4f:04:b7:
         76:5b:24:03:22:67:c5:8c:ee:62:34:59:9d:6c:f6:ff:4c:45:
         1a:db:dd:d8:5e:3d:63:ce:10:9d:0b:87:83:0f:7d:67:5c:28:
         9b:fb:d9:db:4b:96:15:81:47:68:00:07:9d:fe:7a:03:b4:ad:
         07:9e:ac:64:79:c0:a9:d9:7e:0b:a2:f5:c9:e4:a2:b7:a9:28:
         9a:3a:72:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:20 2026 by rpki-client