Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
File:                     1-WoJAryYU7de0tsZaD7i86ImFUA.mft (raw, json)
Hash identifier:          5dtPflj8A5gEKhIsRaWTGWAp6/IaE3m1eKg/ohCa6Zk=
Subject key identifier:   60:82:12:8F:E2:9D:4C:22:E7:7E:D5:10:CA:2B:15:6C:9C:C2:E3:80
Authority key identifier: F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40
Certificate issuer:       /CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
Certificate serial:       019D25BABA742D78C53545C1F16E30D5AD63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
Manifest number:          0900
Signing time:             Wed 25 Mar 2026 16:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:27 +0000
Files and hashes:         1: 1-WoJAryYU7de0tsZaD7i86ImFUA.crl (hash: erVMMSKQJL0+sMM7Cf5VqViQLSn2y6oGX7EmG9HA3A4=)
                          2: lbIe2qyRrYfjB41x_s_oC0HIMV8.roa (hash: IbB04MSM8ZFCnQ8XX8Yub4xMYWMjSxvhyr9xWMdyxEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:ba:74:2d:78:c5:35:45:c1:f1:6e:30:d5:ad:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a0902bc9853b75ed2db19683ee2f3a2261540
        Validity
            Not Before: Mar 25 16:01:27 2026 GMT
            Not After : Mar 26 16:01:27 2026 GMT
        Subject: CN=6082128fe29d4c22e77ed510ca2b156c9cc2e380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4a:19:31:8e:9c:66:07:b8:17:36:9e:49:c5:
                    e9:da:25:cf:e9:36:69:4e:6c:85:e9:49:89:9e:cc:
                    cd:9d:ca:10:19:d2:6c:88:08:0c:7c:b4:97:d9:84:
                    fe:c7:39:bb:47:39:f6:94:a9:ba:bd:18:f2:00:c7:
                    8e:d8:52:a3:5f:13:d2:de:db:9f:bd:5e:d3:87:e3:
                    69:0f:94:9b:b6:00:ac:94:c5:e5:94:a2:f4:6b:3b:
                    6d:71:aa:21:fe:41:4e:f0:2b:ce:09:a6:c1:fa:bd:
                    c3:4e:2a:f9:4d:48:dd:f7:4e:9b:1c:5d:31:03:da:
                    64:53:0d:c9:99:f9:4d:de:56:d4:31:d5:ca:89:9e:
                    17:d5:17:51:b7:5b:6c:5a:ba:a2:f0:e4:97:a5:66:
                    6f:0b:29:bf:d6:ea:9e:d7:46:15:fd:92:6c:9e:b0:
                    a1:92:e7:41:ba:82:18:86:ea:21:1b:d0:e8:cb:83:
                    05:38:b9:36:1a:65:d7:96:70:2f:2c:0f:58:68:ae:
                    1a:ea:58:a0:95:b5:5e:5b:c5:eb:61:bf:06:12:da:
                    ba:0f:be:da:01:54:40:e0:60:ba:bc:23:dd:b7:2d:
                    c1:73:1e:5c:3c:81:df:f2:25:38:01:74:49:58:64:
                    30:74:e4:e2:44:da:61:15:ad:1d:c6:90:f1:78:6c:
                    8e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:82:12:8F:E2:9D:4C:22:E7:7E:D5:10:CA:2B:15:6C:9C:C2:E3:80
            X509v3 Authority Key Identifier:
                keyid:F9:6A:09:02:BC:98:53:B7:5E:D2:DB:19:68:3E:E2:F3:A2:26:15:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WoJAryYU7de0tsZaD7i86ImFUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb6866-bb60-4c6f-a00d-c4a77c192af0/1/1-WoJAryYU7de0tsZaD7i86ImFUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:45:c7:8d:9e:a7:fa:7f:49:f4:f9:f3:67:71:7c:a4:7a:6e:
         39:1f:8b:d7:3e:48:86:10:31:c0:1a:49:c2:6c:fc:8a:e7:18:
         a3:04:96:14:d1:ca:4f:9a:b8:c9:3b:2e:4e:d2:93:3b:c7:eb:
         f4:87:df:78:4a:5c:97:de:94:2a:b5:97:f7:86:e5:51:d6:f7:
         30:55:2a:69:ef:ab:5c:8b:f5:6a:3b:79:43:41:6d:85:51:3e:
         c3:ed:a1:ea:33:8e:d5:6f:5b:08:6e:b9:4a:0b:c5:e2:89:28:
         4a:47:72:53:d1:0f:a0:a6:a6:2d:58:84:fa:cf:cf:3e:69:ae:
         91:96:19:3e:8b:b1:bc:4a:1c:87:0c:32:4b:ae:ff:b1:1d:95:
         c8:0a:32:73:21:52:88:7a:03:d2:a6:1c:be:63:f8:81:39:d7:
         fd:40:44:d4:b1:b8:9c:e0:09:58:13:13:bf:a3:81:ff:8b:b6:
         57:fb:b6:38:55:ef:89:de:37:36:44:52:e7:e9:c3:bb:97:df:
         ca:ee:ba:b1:e6:15:81:88:1d:88:cd:f2:d5:77:3d:07:9a:46:
         db:5b:fa:fd:b3:0b:c2:1f:a1:f7:41:be:5b:c5:63:d1:10:aa:
         67:a5:e0:88:ca:7c:2e:f8:b5:c6:29:fb:72:4a:ae:e3:c0:62:
         a0:5b:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:02 2026 by rpki-client