Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
File:                     WXWCvD8LrbZhpp-5pIOzfskFgn4.mft (raw, json)
Hash identifier:          hN7vW0XXDWF1Suc2hpHdGLTQGy0TUPJkqS5sNXbm2tM=
Subject key identifier:   31:79:A1:DE:DF:D0:24:06:15:31:37:07:3F:AA:38:53:8F:75:E9:34
Authority key identifier: 59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E
Certificate issuer:       /CN=597582bc3f0badb661a69fb9a483b37ec905827e
Certificate serial:       019D382E136A52697C7C893A692422D3E05A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
Manifest number:          0A23
Signing time:             Sun 29 Mar 2026 06:00:36 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:36 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:36 +0000
Files and hashes:         1: BvmBDu9gUylydSFpdWFHr27-_DY.roa (hash: d2SU0ny5FTlBkZIC6ubpt8gy5sJqNewyGcnF2XElBAw=)
                          2: WXWCvD8LrbZhpp-5pIOzfskFgn4.crl (hash: 37uAv39yY7CQnaMaHyHHsYN7wRh+tTtSH6GPACjg6fg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:13:6a:52:69:7c:7c:89:3a:69:24:22:d3:e0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597582bc3f0badb661a69fb9a483b37ec905827e
        Validity
            Not Before: Mar 29 06:00:36 2026 GMT
            Not After : Mar 30 06:00:36 2026 GMT
        Subject: CN=3179a1dedfd02406153137073faa38538f75e934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:73:62:07:1c:6c:71:29:c2:b2:ac:66:2c:
                    2c:9c:0c:88:be:bc:5d:ca:11:7d:9c:68:c0:aa:76:
                    ea:ec:7e:28:5e:e7:96:15:18:d0:a2:cb:7b:42:58:
                    70:42:cf:21:d8:6b:f2:b9:80:d1:10:aa:15:35:dc:
                    ab:53:5c:12:e5:b1:96:cd:ce:88:33:12:c8:4d:fc:
                    80:6e:26:57:7e:a8:3a:d7:28:be:b9:91:32:bd:3f:
                    f9:a4:41:5a:d7:e5:76:e5:e9:bc:04:2c:a6:8d:52:
                    69:39:6b:8d:06:11:64:b8:86:ae:91:51:ff:2e:3b:
                    6c:94:e8:04:b2:28:e9:40:61:8e:46:e6:a6:89:44:
                    50:b6:cb:23:2a:62:61:1a:92:64:d3:4e:14:bb:8a:
                    23:8c:7a:d4:ed:62:0b:f9:a0:20:c1:ad:aa:39:6e:
                    e9:b3:7d:79:7c:62:de:a7:c9:b6:b5:95:19:5e:bd:
                    7b:ca:e2:09:e1:74:ab:92:31:5c:7c:ae:79:9f:95:
                    3e:e5:75:ee:20:69:7f:24:1f:82:13:41:0d:f5:7d:
                    6d:10:94:c9:7e:96:bf:9b:9d:78:a4:ec:19:9f:86:
                    ca:f7:4f:94:88:37:a6:07:dd:5f:60:9c:59:28:4d:
                    1a:2a:85:2e:c3:d5:c4:5d:9e:60:ac:a5:ef:80:61:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:79:A1:DE:DF:D0:24:06:15:31:37:07:3F:AA:38:53:8F:75:E9:34
            X509v3 Authority Key Identifier:
                keyid:59:75:82:BC:3F:0B:AD:B6:61:A6:9F:B9:A4:83:B3:7E:C9:05:82:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXWCvD8LrbZhpp-5pIOzfskFgn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/48898b-f9b4-45b4-993f-e8a1dc8e3ffc/1/WXWCvD8LrbZhpp-5pIOzfskFgn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:34:8d:66:cb:2c:ae:fa:42:1c:fc:13:6c:26:81:0d:3f:68:
         44:05:3e:44:47:3c:7b:d8:7f:1f:68:d2:20:08:f9:d2:cc:5e:
         fc:f1:9a:0f:e4:93:31:82:8d:87:4e:8c:84:9c:44:60:fd:e6:
         4d:7d:0f:16:6a:60:ea:14:6a:f5:d7:aa:fc:ac:42:28:c1:18:
         69:74:78:98:8e:06:4e:00:28:96:0c:ae:02:53:d0:36:86:d2:
         b0:53:68:8d:c7:7f:26:cc:86:af:48:39:b5:49:aa:9f:7b:1a:
         5a:5d:48:38:66:d8:b6:97:ff:7c:93:30:ff:78:27:ff:99:20:
         78:1a:da:67:7b:a0:30:0e:59:35:99:39:7e:7c:64:2e:90:d7:
         8a:b7:ff:ae:ea:ac:16:dc:b6:48:58:b8:18:9c:79:1a:88:4a:
         f5:8b:9a:ae:a0:10:21:31:03:c6:8d:a8:3a:df:bf:ce:3c:ce:
         77:c0:c6:c1:e9:6a:31:76:dd:51:69:55:57:de:b3:e9:a6:78:
         0f:ee:70:79:82:24:08:0b:af:cd:f1:0b:83:78:ff:04:39:a8:
         d5:92:ad:42:df:e9:6b:6f:05:63:f1:39:7a:12:7a:b8:da:4e:
         71:50:e9:c0:5b:91:a4:54:d9:d9:68:d7:d5:ac:4c:8b:a4:7c:
         e2:64:9c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:07 2026 by rpki-client