Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
File:                     we6wu7y21HqENM9BEVHy4kh4CBU.mft (raw, json)
Hash identifier:          O2ZIUsQ5ATyjWHdWYeqINj1A/qnURvjNC3JaxjHhxS0=
Subject key identifier:   9C:1C:C0:5E:14:EA:D9:49:E0:3B:3C:6D:D8:BF:9C:10:76:F8:0E:DB
Authority key identifier: C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
Certificate issuer:       /CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Certificate serial:       019D37529AE3A7B470E4B9E47D3EF51E3655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
Manifest number:          046F
Signing time:             Sun 29 Mar 2026 02:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:53 +0000
Files and hashes:         1: nIGAZPIZq75kgcrqj-kuogdN73s.roa (hash: GHrH41oLr6pmMoS8h9CBSc1ZDtrVCueBn8VEhwJj8mA=)
                          2: we6wu7y21HqENM9BEVHy4kh4CBU.crl (hash: YEoL3k0Boung0tOiNkr2zdnKlBx+BoTd5yq/U8pKQBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:9a:e3:a7:b4:70:e4:b9:e4:7d:3e:f5:1e:36:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
        Validity
            Not Before: Mar 29 02:00:53 2026 GMT
            Not After : Mar 30 02:00:53 2026 GMT
        Subject: CN=9c1cc05e14ead949e03b3c6dd8bf9c1076f80edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:da:ac:f2:30:4b:c1:af:a3:73:16:75:be:ab:
                    f9:cf:4d:e9:97:13:f7:04:3f:9e:99:7c:72:d4:3e:
                    ec:eb:2e:c8:e3:e3:3b:97:42:93:55:4c:d6:9a:48:
                    9d:f2:58:08:f1:4f:e7:ba:8d:8f:fe:1e:81:7f:d4:
                    67:b2:5f:5d:20:e0:b8:4a:27:f2:5c:a9:08:69:9f:
                    66:dc:05:dd:09:68:a9:7f:a6:13:f7:21:3b:30:ea:
                    cb:66:9d:58:a7:5a:18:23:00:43:4b:1b:31:a0:96:
                    e0:81:e1:ed:cc:f1:e9:57:71:b9:47:1e:22:b2:d6:
                    7c:00:21:c4:61:cd:b3:fd:a4:8c:3f:2c:2d:53:59:
                    73:54:98:f0:8e:8f:03:55:9b:c5:2c:de:a7:63:c8:
                    db:41:2d:7e:c6:b0:35:bb:43:e0:40:50:91:c1:dc:
                    a0:11:f1:46:33:48:70:71:93:40:ca:c3:53:ca:aa:
                    5c:04:e5:86:b9:84:e3:ea:fd:d9:b6:3c:d5:56:f5:
                    5f:0c:44:5b:d9:09:bc:d0:24:b6:db:ad:c6:b2:86:
                    d0:ea:18:d6:eb:36:ac:77:09:fe:31:98:b3:72:af:
                    3e:8a:01:3a:dc:3f:9a:b8:4e:b3:81:98:42:f0:67:
                    3c:7a:e1:5c:b1:b7:9c:aa:2f:9a:c3:12:57:7a:e8:
                    f9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1C:C0:5E:14:EA:D9:49:E0:3B:3C:6D:D8:BF:9C:10:76:F8:0E:DB
            X509v3 Authority Key Identifier:
                keyid:C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:53:46:01:74:fa:54:17:cc:c6:4a:79:fe:dd:d2:5e:2a:a2:
         36:d1:0e:3d:49:0b:66:b1:69:97:54:a7:66:ff:38:77:ef:8e:
         9b:96:20:c3:aa:13:21:4f:70:8f:ae:d2:68:3c:33:76:26:4a:
         8c:e9:a1:33:7e:a5:51:87:b9:d1:a8:11:88:b2:97:a4:31:7e:
         19:80:e2:5b:89:86:87:09:89:20:2f:5e:36:f9:af:ca:c7:4a:
         f3:c5:30:ec:7a:ed:fb:d0:37:22:ca:f5:96:87:3f:b9:b6:30:
         17:84:bd:64:f8:25:31:15:db:28:99:b6:34:91:ff:26:49:87:
         b5:ea:11:93:ab:1b:f4:2f:2a:83:08:69:ae:e3:1d:d8:78:0b:
         ae:8e:82:27:d8:ab:26:08:2b:13:54:e1:af:5d:34:52:53:7c:
         3e:56:13:92:db:7a:13:fe:ff:87:df:a0:14:d4:09:ea:44:25:
         af:73:b7:96:3f:e1:38:e2:af:de:f3:27:4b:9d:ff:7f:ac:f0:
         ba:04:2b:3f:91:bb:62:64:3d:36:c8:71:13:15:34:7b:69:c1:
         85:7a:ae:d2:49:9b:a7:e0:a8:2e:88:f7:38:fb:14:2b:b1:90:
         4b:1b:c9:6a:76:f9:67:7d:bf:ad:4f:5e:21:b3:7d:0b:50:90:
         28:4f:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:34 2026 by rpki-client