Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
File:                     wWorxbJu0grF0v3qnayGffkjIFo.mft (raw, json)
Hash identifier:          tlSOjsltVH5X1aNLsBgoRfze0CUF2cv2blZJMauO2To=
Subject key identifier:   B8:47:BF:AD:19:73:E7:22:EF:5A:D5:16:E7:BB:AB:39:AA:4E:1B:1D
Authority key identifier: C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A
Certificate issuer:       /CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
Certificate serial:       019D389BB58E7ACBEA3455F453238958FF76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
Manifest number:          0865
Signing time:             Sun 29 Mar 2026 08:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:21 +0000
Files and hashes:         1: wWorxbJu0grF0v3qnayGffkjIFo.crl (hash: 3oR/m+fZ92CdFm5w24XpyaXk6vYYyW/ALFt6hFP3+UU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:b5:8e:7a:cb:ea:34:55:f4:53:23:89:58:ff:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
        Validity
            Not Before: Mar 29 08:00:21 2026 GMT
            Not After : Mar 30 08:00:21 2026 GMT
        Subject: CN=b847bfad1973e722ef5ad516e7bbab39aa4e1b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:2e:11:dc:2a:f9:8d:e8:02:0b:fc:f6:dc:
                    83:09:c9:e4:aa:1c:51:73:1a:7c:a5:80:66:3f:56:
                    ae:f0:9e:48:3b:84:e9:fe:22:c5:f8:cf:c0:bf:cd:
                    13:53:32:80:aa:b7:d3:d7:ef:c3:9a:7c:ad:a4:73:
                    f5:df:cb:66:6f:b1:4b:36:c9:14:38:f4:d7:6c:c9:
                    b1:09:1c:31:cb:44:05:1d:f0:84:b0:7d:f1:c5:31:
                    b3:c4:4e:bb:5b:7e:6b:f8:3a:c1:59:a2:14:00:e0:
                    b5:f4:9b:bd:87:c0:7f:49:98:e6:e5:39:3c:f9:db:
                    d1:8f:6b:6d:f2:fd:41:d7:82:73:d0:05:42:eb:a9:
                    3e:a1:f8:cd:a4:58:57:6d:bd:da:e2:66:91:84:93:
                    95:a3:a6:8e:65:9d:4c:4e:9b:3d:d6:86:94:09:d8:
                    9e:42:f2:5e:44:72:4a:20:5c:f5:42:6f:d8:d3:18:
                    59:05:73:c7:1f:ac:e1:07:53:69:b6:fc:43:97:f7:
                    c1:d4:ab:8c:de:fd:6d:d0:8d:cb:28:c7:45:80:14:
                    98:d3:65:61:7c:89:a1:8b:b6:72:d8:0a:17:85:7c:
                    0c:b8:95:f5:71:ff:95:30:72:11:e7:38:fd:9e:56:
                    51:b4:23:1e:37:77:57:e2:e1:4a:46:57:6b:b5:5d:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:47:BF:AD:19:73:E7:22:EF:5A:D5:16:E7:BB:AB:39:AA:4E:1B:1D
            X509v3 Authority Key Identifier:
                keyid:C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:fd:b0:59:63:a4:62:58:91:24:91:88:1f:44:1d:94:b2:c2:
         29:ad:5f:64:f8:b7:e6:0f:60:2e:c0:d4:91:db:1c:84:1e:d9:
         43:3f:f8:4b:cf:94:d5:c4:84:91:d0:a2:a7:36:71:46:ad:10:
         58:1b:c6:e1:a7:df:bb:ea:f2:6e:e7:86:fb:b3:ca:17:80:06:
         0f:64:3d:e7:af:bf:e8:c3:d8:1a:c5:3e:d6:3b:aa:af:dd:e0:
         f2:6b:ef:fd:61:cb:eb:d4:fd:02:af:00:a5:25:1b:11:97:f0:
         39:a7:e0:81:30:f0:bd:ef:04:d4:04:a5:87:b2:4b:67:7b:9f:
         45:41:db:c8:d9:3f:2d:70:a9:10:30:3b:a1:99:9d:ee:50:69:
         8f:f2:0d:89:6a:66:8e:25:15:fc:f2:22:f2:94:86:35:62:a8:
         e2:c2:70:b1:92:c3:9a:ca:37:af:04:31:07:df:bd:b8:43:cd:
         ac:96:f8:fa:9d:43:fa:94:98:a6:e4:d7:97:c1:ba:f5:38:cb:
         8c:98:dd:df:80:96:b3:ef:84:fe:df:df:87:36:73:0e:bf:81:
         d8:6d:e0:47:a8:99:7b:bb:f3:90:10:97:50:6b:0a:1c:f7:02:
         67:27:22:fb:71:13:a2:4f:86:bf:00:d3:3d:d4:25:5d:cf:f0:
         33:a1:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:58 2026 by rpki-client