Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
File:                     wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json)
Hash identifier:          EKgjtC3FnOmfNK/TuT5BvEhchb6fTBvCywttQPFvK2A=
Subject key identifier:   16:67:A3:3E:C2:CB:A0:AC:4B:47:49:DB:E7:A7:5A:1B:06:EB:6D:41
Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4
Certificate issuer:       /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
Certificate serial:       019CE52366B1FA57704C2EDD79BF9C782BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
Manifest number:          148A
Signing time:             Fri 13 Mar 2026 03:00:28 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:28 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:28 +0000
Files and hashes:         1: T4jsL7kwRbLlNaXve_3W_32hFoM.roa (hash: FJOo/HtzqljN7o0xBJy+iby2rmXafKenU6CHkQkrrDo=)
                          2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: U+f+0Ra7j78ypW2FjjKB4gr07MBEFmEX8Z+7mjKv+BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:66:b1:fa:57:70:4c:2e:dd:79:bf:9c:78:2b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4
        Validity
            Not Before: Mar 13 03:00:28 2026 GMT
            Not After : Mar 14 03:00:28 2026 GMT
        Subject: CN=1667a33ec2cba0ac4b4749dbe7a75a1b06eb6d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d8:7c:87:38:a8:36:a4:19:52:a8:40:02:32:
                    ba:ee:f3:89:a0:31:da:4f:66:a8:35:51:dc:58:66:
                    17:d5:0a:5e:34:fd:8d:3e:ab:f3:b3:20:31:93:ae:
                    51:ae:e6:1a:ab:8a:2d:16:d3:9c:c0:1f:35:ac:cf:
                    e3:29:66:1a:52:49:2f:8a:9a:50:44:80:d4:47:85:
                    ad:b3:65:85:9d:f6:31:de:1e:db:09:b7:a6:f2:1e:
                    d4:3f:1d:a6:90:d8:87:fe:96:41:f1:2d:fa:26:ce:
                    95:56:fd:cb:aa:63:67:b5:c7:41:1a:cd:be:b3:68:
                    4e:c6:1a:15:49:fe:33:34:45:b9:2a:1d:64:63:c2:
                    02:9e:30:1c:4b:1b:51:0f:16:66:fd:41:69:c5:05:
                    e9:92:24:fa:fd:c9:5b:57:a9:14:e1:15:f0:b7:45:
                    5a:ce:f7:14:37:df:91:03:86:07:a3:37:34:50:df:
                    30:7c:12:e9:d6:fd:13:c0:d1:73:94:e6:e4:ce:37:
                    aa:2d:5b:20:07:91:9d:df:4f:c8:24:66:14:9a:57:
                    16:a1:3e:3c:9a:35:01:c7:e7:42:15:74:5f:8c:ba:
                    6d:3e:11:6c:d3:f6:62:b9:ab:35:88:45:57:a6:3e:
                    14:70:80:44:b2:bd:2c:0d:aa:ab:bc:4b:44:b7:e5:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:67:A3:3E:C2:CB:A0:AC:4B:47:49:DB:E7:A7:5A:1B:06:EB:6D:41
            X509v3 Authority Key Identifier:
                keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:83:95:05:4b:1f:19:79:65:6b:cf:7f:6f:07:61:44:f1:9f:
         f0:67:db:5e:d4:dd:e5:b6:45:69:39:5c:e3:7f:4d:e0:00:e3:
         5e:a8:a6:52:10:e2:9f:6e:ff:61:5d:5b:ac:fc:6a:a5:af:1e:
         5f:96:f4:5d:32:ca:0b:94:26:b3:d7:98:43:76:d7:40:d3:a0:
         5b:9e:fe:58:40:d4:f2:58:d0:85:13:d5:fa:61:f5:46:6c:74:
         34:49:3e:65:2c:63:3b:3d:94:d0:db:3d:3c:ba:5a:dd:b6:65:
         61:f8:c2:98:f6:5f:f4:d8:45:7b:4b:92:16:f0:e6:af:e8:dd:
         52:06:f7:89:e2:57:41:1f:dd:ac:2d:f3:d6:d8:1b:78:cf:ff:
         db:ff:3f:03:af:ba:81:a8:6c:e0:ad:09:56:91:ce:27:c9:64:
         e9:fa:ce:db:f9:a1:53:23:5c:80:aa:94:3b:b0:ec:b2:50:a1:
         df:13:03:8c:e6:e7:09:e2:46:9b:2a:ca:04:91:04:70:bc:54:
         28:33:1d:86:69:a9:5b:20:f3:db:ba:4a:b0:42:66:42:f3:60:
         13:ec:1a:94:2b:d8:af:52:90:b0:bb:f3:9f:af:ba:87:2e:e1:
         60:ac:28:ea:6e:a9:d2:c4:52:66:4e:39:d6:ad:e2:9e:64:37:
         1f:da:5c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:26 2026 by rpki-client