Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
File:                     wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json)
Hash identifier:          LtArEcCMZ0AcUAq3oDWgjHVc+Xsww4/J/9b3dVtlOJ4=
Subject key identifier:   10:44:CF:DD:5F:58:6C:44:10:B9:D9:DA:0A:23:87:A2:F0:67:F7:C4
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Certificate issuer:       /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial:       019D284E6081834BD06EFE2416BE1A4A3F3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
Manifest number:          04EE
Signing time:             Thu 26 Mar 2026 04:01:58 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:58 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:58 +0000
Files and hashes:         1: sESThJoImWepiHXICmCyiUQO13c.roa (hash: /EXA+hsAhf5yELjtFqrr5qslACb1l1qBz89KSCq1yVw=)
                          2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: F0yThCTNWrOmBTs6oePrfxfW14uBjHjA5ztwAs0KlrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:60:81:83:4b:d0:6e:fe:24:16:be:1a:4a:3f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
        Validity
            Not Before: Mar 26 04:01:58 2026 GMT
            Not After : Mar 27 04:01:58 2026 GMT
        Subject: CN=1044cfdd5f586c4410b9d9da0a2387a2f067f7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:63:1f:9d:c8:34:eb:5b:65:7e:e3:57:a3:
                    f4:b9:fe:ab:69:e4:41:e5:1d:22:4f:70:6c:89:3f:
                    a1:85:c6:cc:c9:6b:6e:03:6b:32:f8:f8:af:e1:f7:
                    70:8b:a0:0c:ae:92:92:81:90:a0:00:7b:55:40:2f:
                    41:c4:04:35:c5:4f:b5:83:fa:19:21:46:6e:6c:2e:
                    35:30:15:54:ca:5f:04:54:87:43:f1:3a:81:8d:d9:
                    75:94:7b:38:4c:8b:fb:92:62:3c:45:86:dd:38:15:
                    9c:c1:ad:2c:63:92:70:5f:54:1f:fc:ca:95:43:c5:
                    15:b1:9d:01:2d:34:2b:ec:cb:bd:16:bb:0b:95:42:
                    20:88:51:8e:81:16:0a:53:55:bb:80:67:e6:76:da:
                    92:b4:76:f3:c0:45:4a:27:50:b6:a0:6c:ab:47:dd:
                    82:86:c0:91:07:0c:9e:ab:14:88:ae:fc:59:4a:72:
                    5b:0e:40:4a:20:13:ac:67:b9:a3:9d:96:b6:ff:00:
                    d2:e4:0c:9f:63:45:c4:49:8a:80:93:f9:2c:f8:88:
                    28:2b:f9:a2:b0:45:df:87:4c:b9:16:0e:3e:52:da:
                    f9:9d:13:0a:b3:e7:a3:e0:c9:92:17:bf:5d:65:7a:
                    da:cb:5a:59:99:af:23:34:4b:ba:44:09:e3:a8:5c:
                    b7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:44:CF:DD:5F:58:6C:44:10:B9:D9:DA:0A:23:87:A2:F0:67:F7:C4
            X509v3 Authority Key Identifier:
                keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:22:53:3b:94:d0:70:5c:d0:10:db:0b:28:7c:8c:04:b7:28:
         1e:71:a8:ec:f9:ce:72:a0:bc:29:c4:c5:94:1b:0d:0c:24:26:
         2b:cb:88:3a:08:83:67:5a:b8:2d:98:a2:40:24:95:f3:7c:4d:
         5d:54:13:88:c0:6a:5f:dc:69:66:70:40:89:1e:5c:97:c7:e8:
         29:97:30:83:aa:4c:c9:9e:2e:97:a4:63:09:1c:31:fc:9c:fc:
         f3:c2:79:b3:27:b9:85:28:17:a0:1e:cf:da:42:6a:b5:34:24:
         de:f0:38:2c:27:ca:f8:37:9a:57:13:5d:90:5d:0f:50:cc:ce:
         28:67:6c:5e:f6:a4:de:67:0e:57:78:62:ed:6b:65:22:03:c7:
         b5:1f:6f:db:f1:16:fb:2c:39:e0:ad:98:8b:5a:0b:e6:b4:d6:
         8e:14:75:0e:a2:91:1a:2f:e7:5d:6b:7f:bf:69:1d:05:2c:2c:
         99:2f:a9:91:10:d2:e1:c9:5b:f5:f6:dd:ff:ac:6d:85:62:20:
         2b:60:c2:8f:cc:93:fd:62:2f:cd:32:47:c1:2d:fb:8c:1e:a6:
         64:3a:10:ae:99:8f:04:24:e0:be:f6:14:3e:47:12:59:c5:34:
         09:e0:72:f1:b8:66:23:31:9b:a1:01:5e:47:2e:cb:5a:9c:07:
         47:2c:30:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:37 2026 by rpki-client