Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File:                     2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier:          5Ke32+0yQvSl3eNUC9sG9Qcb2zHTgomU+Z+8q1MyOkI=
Subject key identifier:   07:06:70:E7:BE:5C:D9:4E:C2:73:74:F8:46:9F:5F:5E:3E:D8:ED:77
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer:       /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial:       019D37C04EE625D67532C311D7F0BD3F215E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 04:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:43 +0000
Files and hashes:         1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: n/xGK4LERmF3EKNv5FSAg9p96vlGuhqFxlcOQvhpYyk=)
                          2: shhYy56z_L8Lryb0eSAWTWJjZg0.roa (hash: wq6nVcRoqKZdcrByoBy3Jll3ZeZn4RTjcVn3BWiF//I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:4e:e6:25:d6:75:32:c3:11:d7:f0:bd:3f:21:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
        Validity
            Not Before: Mar 29 04:00:43 2026 GMT
            Not After : Mar 30 04:00:43 2026 GMT
        Subject: CN=070670e7be5cd94ec27374f8469f5f5e3ed8ed77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:07:1d:02:fa:f5:86:78:0b:b3:fc:dd:55:
                    24:fe:c7:0a:fd:e8:23:7d:80:51:81:da:39:7c:c6:
                    81:db:35:ec:85:4f:86:ff:66:a2:5d:6d:70:dc:39:
                    1f:76:53:11:78:98:66:2d:07:e7:33:8b:d9:9f:cf:
                    ce:9e:5e:7a:ec:4a:3c:d2:3c:9d:99:00:3c:10:13:
                    30:8e:b6:38:88:3c:23:71:03:03:c4:b4:d3:96:99:
                    62:79:6c:05:96:fa:db:01:57:f9:68:d4:a1:2b:b8:
                    47:25:1c:63:d0:3f:21:b0:90:1e:0b:e9:37:cc:80:
                    6c:20:6d:5f:3a:80:b9:06:b9:a9:e2:a7:fc:d6:7d:
                    71:5e:48:c0:16:5c:40:38:ca:c0:29:2e:01:c6:9e:
                    3e:3c:8b:70:9c:2c:76:dc:8d:3d:f1:6d:1e:3c:41:
                    07:e3:f5:4e:2e:70:ca:52:5f:ee:75:4a:9d:46:69:
                    e8:2d:d4:83:a7:ac:f3:54:43:01:50:a5:8d:5d:f2:
                    6e:91:60:d4:4b:2e:1d:8c:31:ba:11:fd:b2:e8:cb:
                    7f:e3:d9:2d:69:b1:a8:ad:a4:f8:dd:2f:a3:19:7e:
                    2c:b2:12:9c:a1:52:72:c7:c9:7f:8d:18:a7:17:36:
                    f4:1a:a3:0c:e9:e1:a5:04:af:49:13:2e:6d:fb:67:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:06:70:E7:BE:5C:D9:4E:C2:73:74:F8:46:9F:5F:5E:3E:D8:ED:77
            X509v3 Authority Key Identifier:
                keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:09:f4:9e:fc:38:4d:7e:c6:40:23:9f:fc:e3:60:22:ac:df:
         63:6c:ec:94:7f:4f:8f:94:52:a3:ba:33:aa:16:96:9c:ce:4b:
         ff:da:b4:7a:2e:86:23:ca:05:b8:24:b5:ac:4f:71:8d:bb:85:
         86:11:e5:33:7a:cc:dc:f9:63:1b:ec:da:34:bf:c8:ce:af:09:
         45:da:16:04:68:3a:48:25:7c:f1:17:59:75:96:05:c1:fb:30:
         bc:23:1f:cc:7b:f8:f2:7a:0a:d9:f5:6e:72:d9:91:00:10:74:
         0e:bc:23:e7:31:c8:f7:ed:c4:30:6e:27:71:6a:6e:33:49:65:
         68:0b:7f:56:b3:3d:43:82:ff:b2:3d:1d:e2:7d:75:d6:d8:9e:
         e4:bc:a7:38:2e:33:23:f1:31:19:75:0c:fc:e3:28:d8:eb:7b:
         49:da:32:8b:49:de:0e:3c:4b:03:75:26:9d:90:65:22:f8:b7:
         a4:2f:01:f4:d7:3e:0d:3a:de:27:f8:81:77:0f:1a:66:20:ce:
         8d:d7:b9:f2:5f:4d:34:04:0b:b6:cc:e2:a3:18:64:bd:fe:a1:
         f1:38:0c:ba:ea:5e:9f:86:66:d5:97:75:b5:3a:1e:55:92:4b:
         22:91:d9:da:79:de:65:13:6b:86:7a:f2:5a:7d:33:46:3b:f4:
         7c:48:ed:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:43 2026 by rpki-client