Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
File:                     dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json)
Hash identifier:          dlU7KXf/3DDJF9Z/PZyE/JzI+hI8OjA/wZxsqM7yZmM=
Subject key identifier:   12:D5:45:68:35:06:C2:BB:A7:67:00:FD:DF:7C:A5:31:68:52:E6:FD
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Certificate issuer:       /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial:       019D37F6F4E97C34FB554A476B83A7621022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 05:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:24 +0000
Files and hashes:         1: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: GDRG2VcUxChBPkxb91tcbgmxQt09u8408hNf8w0bvxk=)
                          2: tPa9pSwrFvB1K6LXnFP7QgOZmQg.roa (hash: EuLOm9LNu+vdtWKW8xKy1jbrcq+2BOsoUg00XaJJYUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:f4:e9:7c:34:fb:55:4a:47:6b:83:a7:62:10:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
        Validity
            Not Before: Mar 29 05:00:24 2026 GMT
            Not After : Mar 30 05:00:24 2026 GMT
        Subject: CN=12d545683506c2bba76700fddf7ca5316852e6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b4:af:eb:19:89:26:71:6e:ad:fc:27:dc:1a:
                    92:51:05:90:2c:b5:dc:d0:71:ac:6b:ba:ec:4e:60:
                    df:b2:52:03:a4:c9:4c:cb:3b:f3:98:82:f1:d2:9e:
                    ba:c0:ae:a2:0d:4e:60:2c:8e:67:fa:8d:f2:ec:a8:
                    5e:7b:b3:f0:1d:65:a8:0a:35:59:b2:a3:b9:5e:0d:
                    18:38:b8:f6:48:74:e4:60:7c:51:69:b4:4c:4a:f4:
                    77:ff:98:f3:6b:79:45:ad:45:97:6a:db:5f:d8:16:
                    5e:84:0c:21:73:57:54:a5:12:09:8b:c4:ab:a3:d0:
                    63:19:52:21:aa:d9:a4:cd:08:f0:04:d1:02:82:32:
                    96:c1:08:5b:34:76:8a:bb:97:24:45:8d:cd:8c:bd:
                    04:20:72:3c:89:a9:b3:44:64:07:ce:fb:80:45:ac:
                    1f:bf:62:6b:11:1d:9a:20:97:24:83:6f:94:9f:2e:
                    ae:d2:b6:7d:6e:84:55:f9:46:c7:d3:fe:fb:12:51:
                    52:cd:1a:9b:d7:6e:3e:56:96:12:77:62:73:2e:88:
                    a5:6e:60:e4:4c:7d:02:05:cd:3a:9c:be:a2:ca:71:
                    a7:c3:6f:7c:e8:a0:a3:57:36:d5:f1:d8:1c:db:83:
                    86:ac:59:8b:47:57:2c:e7:db:20:44:57:d4:78:10:
                    ab:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D5:45:68:35:06:C2:BB:A7:67:00:FD:DF:7C:A5:31:68:52:E6:FD
            X509v3 Authority Key Identifier:
                keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:b5:9a:28:90:93:13:87:73:44:0f:e1:bf:52:8c:c9:69:
         93:ed:3d:9f:9b:ed:9d:dd:2a:51:31:8e:7d:4b:d1:5d:ff:d5:
         4d:de:37:c4:0a:98:76:9b:a5:82:c2:00:72:83:b7:0b:79:ea:
         0e:27:54:95:99:60:3c:1b:f4:05:3b:01:15:23:10:0d:70:52:
         88:d0:84:c2:f1:fc:ba:0d:da:f8:1a:40:c3:f3:3f:b0:71:84:
         b9:50:27:04:88:41:ed:23:4d:c5:0f:a7:73:d6:34:e6:40:66:
         2e:da:54:ef:fb:8e:0e:11:fd:cd:4e:0a:67:5d:9a:8f:fe:59:
         13:48:c6:54:83:ff:1a:32:28:b6:40:98:0a:e2:4f:76:59:c9:
         30:f5:92:f2:c0:8c:96:e6:71:e7:49:aa:58:9f:37:ed:44:d0:
         cb:e2:b3:c4:23:a2:3f:35:f0:17:2a:52:e2:9c:18:99:93:ba:
         c6:bb:9e:d3:8d:05:9d:fe:84:71:a2:d3:93:18:70:2e:ab:e6:
         13:3b:f5:47:f4:9e:23:46:b1:f8:19:19:a6:e3:8c:a4:56:95:
         98:cb:83:2f:74:94:45:31:97:05:d9:dc:c4:ea:d8:0f:e8:c5:
         3a:a0:31:9c:3f:4d:89:7b:aa:58:72:08:d0:ee:9d:b7:09:c4:
         22:11:e3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:53 2026 by rpki-client