Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
File:                     wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json)
Hash identifier:          1zy2XFZhNrxpqWX5TUC2Qm7QDirCmliI9vHRGzireTs=
Subject key identifier:   5E:0C:7C:B1:03:6F:BC:7B:D8:4C:C2:61:61:CB:AF:19:92:0C:A8:F4
Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3
Certificate issuer:       /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
Certificate serial:       019D394172A415A896EDEC971F9CF988F1E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
Manifest number:          0F72
Signing time:             Sun 29 Mar 2026 11:01:23 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:23 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:23 +0000
Files and hashes:         1: 98vr8W__XpPfxKb3oWjSNeB9O4g.roa (hash: HfCtLcixn47JEXRyfpP8IgjT4+bHM16DwTuzO5zQzKk=)
                          2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: 66oMOjHW5jOyHmx/KCYk+8g13ojKwYGKbFRIC5PLPP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 11:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:72:a4:15:a8:96:ed:ec:97:1f:9c:f9:88:f1:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3
        Validity
            Not Before: Mar 29 11:01:23 2026 GMT
            Not After : Mar 30 11:01:23 2026 GMT
        Subject: CN=5e0c7cb1036fbc7bd84cc26161cbaf19920ca8f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:be:80:fa:53:a3:73:21:4e:3d:45:e7:e3:9a:
                    ac:68:42:ec:d6:ed:7b:ef:8e:d7:e9:05:a4:05:8e:
                    c7:6b:c9:8a:22:23:86:eb:92:a0:c7:00:19:0f:ab:
                    2d:fe:5b:bf:29:70:f5:85:22:2a:a8:38:ce:97:4e:
                    a3:01:04:f0:98:64:ba:34:33:68:73:10:9f:d6:e0:
                    01:97:fc:b4:35:44:43:54:25:f1:94:3b:69:43:da:
                    d9:cf:bd:38:e4:50:28:23:cf:16:98:44:22:a4:95:
                    f4:f3:e4:af:e2:bc:e2:28:74:57:23:16:d7:d3:62:
                    f7:79:f2:6a:37:31:0d:f1:66:2b:7d:f4:60:b5:51:
                    f6:d0:89:4e:02:e2:40:89:91:f9:65:7e:43:42:35:
                    ad:45:03:cb:28:0c:e7:e4:22:ee:81:cf:34:40:67:
                    2a:ff:d5:0f:05:2e:31:61:fb:79:b5:71:e5:53:25:
                    89:40:f1:a7:97:2d:94:5f:44:de:3d:8b:29:24:f3:
                    c6:28:c4:f4:e1:8f:a6:e7:1d:39:75:59:5f:99:cb:
                    7d:58:78:30:af:ca:7f:31:80:19:c7:82:9d:c4:11:
                    fe:74:45:fc:52:bf:e6:03:d4:fa:8f:e1:53:cb:03:
                    fa:3a:64:50:4b:38:70:42:4c:ae:13:1f:4c:ef:49:
                    83:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0C:7C:B1:03:6F:BC:7B:D8:4C:C2:61:61:CB:AF:19:92:0C:A8:F4
            X509v3 Authority Key Identifier:
                keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d5:31:71:2b:9e:3f:08:31:4a:a7:34:19:41:1d:f1:65:4e:
         3a:c4:4a:db:69:e6:fd:83:dd:86:eb:4e:6c:4b:8a:ab:ca:96:
         82:8c:9a:e1:38:5c:cd:69:5c:99:b3:03:42:d4:b4:6c:11:19:
         6b:0f:7e:3b:48:ef:d2:5a:b2:6f:5d:c3:7b:d0:eb:bc:01:4c:
         ed:73:c4:5d:20:21:a3:b1:2d:37:15:fc:db:5d:50:5d:cd:fd:
         0e:1c:cb:05:1e:f0:fe:5d:f7:03:e2:3f:6c:1c:d9:1e:fb:9e:
         a5:6b:ab:1c:79:4c:8d:c5:76:c5:fb:d4:97:03:47:ee:39:25:
         b7:a7:4f:e9:5a:6d:5c:97:7a:45:26:a7:17:62:e9:f8:84:00:
         9f:3f:02:46:4e:c8:86:95:2e:0d:73:b6:6b:25:dd:e9:7a:89:
         85:b6:5d:09:e3:e9:c8:fc:30:ca:f6:76:9e:b3:f5:d0:55:64:
         a3:c9:6c:ce:1b:c7:5f:a4:67:b0:2f:3e:a4:e3:a5:77:12:ba:
         fd:3d:53:24:7b:c3:9d:8c:8f:3b:a1:0d:47:7e:dd:04:6f:76:
         f1:31:9d:c4:49:18:c4:fa:5f:f9:1d:a9:77:bc:de:c7:41:fd:
         61:15:62:1f:3f:82:28:cd:d2:74:a2:10:fb:76:46:f6:d7:8a:
         cd:8f:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:24:42 2026 by rpki-client