Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
File:                     nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft (raw, json)
Hash identifier:          IQfKya5HUlzxEAzxqCJp37uFa/+qe/wzZRwFLbrY/Gg=
Subject key identifier:   53:B1:3A:AD:51:CE:AB:4A:0A:14:97:C9:76:2C:38:AB:F5:27:84:98
Authority key identifier: 9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40
Certificate issuer:       /CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
Certificate serial:       019D26962FC685DE22C8450FDC501019A162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
Manifest number:          11B2
Signing time:             Wed 25 Mar 2026 20:01:09 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:09 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:09 +0000
Files and hashes:         1: K6ii7zwpTXAnLxoEd2L2cebqqYg.roa (hash: +Kg9QdSSLwTZgzwhWg2rJmNh8L6tzXz3oQ9EW3sf1KY=)
                          2: nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl (hash: Potv00WuDn8JAAZISw1hHRAiB0uRXg+7GCIDazbnAiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:2f:c6:85:de:22:c8:45:0f:dc:50:10:19:a1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d66a5cfa39cfa91e313443f613e73cce73f2140
        Validity
            Not Before: Mar 25 20:01:09 2026 GMT
            Not After : Mar 26 20:01:09 2026 GMT
        Subject: CN=53b13aad51ceab4a0a1497c9762c38abf5278498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:01:9b:6d:25:9b:e7:e2:6d:98:13:b7:09:
                    41:d7:79:1f:98:41:ed:ca:b0:86:32:ae:ea:e7:ea:
                    09:23:b5:69:a6:6a:30:3d:ba:13:d4:21:39:2e:1e:
                    28:fd:88:7c:e7:f2:a7:f3:75:67:2c:10:ae:20:fb:
                    a0:df:50:0f:f4:89:f7:26:60:b0:06:32:61:4f:34:
                    9d:92:ba:9b:0c:d9:6e:d6:96:2d:9c:b7:b5:cc:81:
                    2e:ec:ca:8b:46:16:fc:66:dc:f7:f3:56:7f:86:4d:
                    28:58:da:1e:f8:e4:ae:bc:20:af:c4:ab:58:97:4f:
                    88:86:47:08:e8:29:6b:3e:a8:f1:28:ce:4d:b3:4d:
                    94:91:03:25:9e:13:cc:5c:b1:b2:14:84:22:95:38:
                    47:e0:c3:23:93:e0:53:13:b3:5d:46:31:ad:8b:cc:
                    00:00:65:48:d5:7a:b3:66:ad:84:c5:dc:27:ce:52:
                    5a:94:1d:07:84:c9:b5:10:ad:05:66:b6:2a:ac:35:
                    bf:5a:a6:f6:5b:2a:d8:04:19:2e:ae:bc:a8:fe:ad:
                    80:b3:93:f6:69:0f:5e:0f:a3:f2:5c:c4:76:93:20:
                    11:8f:27:34:9b:1f:a2:f8:bd:3e:f9:fe:20:b7:2f:
                    7f:59:8a:05:ba:59:a2:84:c5:0f:c0:07:1b:1c:df:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B1:3A:AD:51:CE:AB:4A:0A:14:97:C9:76:2C:38:AB:F5:27:84:98
            X509v3 Authority Key Identifier:
                keyid:9D:66:A5:CF:A3:9C:FA:91:E3:13:44:3F:61:3E:73:CC:E7:3F:21:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/762743-7164-433e-8bb6-a19507de75b4/1/nWalz6Oc-pHjE0Q_YT5zzOc_IUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:34:4a:0f:6e:77:e6:06:56:98:df:fa:1a:cc:cc:70:fe:72:
         57:7c:a1:ec:b2:48:09:62:9d:b3:39:4c:35:e5:84:2e:1f:68:
         ad:5f:86:1d:34:ea:77:c9:d8:f4:16:f8:0d:c0:b7:6e:ad:f3:
         9a:92:da:b2:10:44:a6:0e:d7:e0:55:c2:47:e8:ca:df:57:b1:
         b1:be:53:13:82:1a:0a:5f:82:f5:3f:ad:0f:c8:a7:c2:7f:58:
         51:90:54:64:49:84:be:b2:5f:71:2e:f1:47:db:f9:18:de:69:
         65:45:fd:6c:9e:13:ce:16:cf:8f:a6:1a:01:18:23:2c:74:2b:
         d4:a2:57:f9:a5:03:6b:32:d5:c3:75:07:f7:81:13:e5:d3:e0:
         aa:62:90:27:4a:96:49:cf:ca:84:48:62:fb:ee:08:2c:af:87:
         af:34:74:af:17:eb:dc:10:f7:ec:eb:95:e6:c9:0a:2b:0a:96:
         90:6b:ca:80:9b:af:00:fc:72:2d:d1:98:99:aa:f8:cd:52:d2:
         82:fa:7f:2c:fe:99:44:22:ea:50:4c:5b:3f:08:33:bf:1d:ce:
         0e:d8:6d:fe:57:5f:55:ce:48:dc:12:d1:4f:34:0a:3c:a0:bc:
         1a:3a:bf:5c:49:4b:5d:33:8a:83:15:37:65:ca:9e:ad:9d:71:
         71:df:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:23 2026 by rpki-client