Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
File:                     W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft (raw, json)
Hash identifier:          JzK7HFdpTfxzxaJxBqlZzjO/UdelaAM6m2bJKbPjOHE=
Subject key identifier:   4D:D6:67:17:48:A2:2A:1E:A6:56:04:D3:E9:B2:6F:05:B8:C9:53:56
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Certificate issuer:       /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial:       019D382DE40A68BB304C07AEE4ADFA68DFB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
Manifest number:          118A
Signing time:             Sun 29 Mar 2026 06:00:24 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:24 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:24 +0000
Files and hashes:         1: OsfWj05c-iGN6l9IpGbRGk4oVig.roa (hash: YWjBM3xccwChcedJpDWQLAp5v1TPSpBbXsnMEo1paQ0=)
                          2: W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl (hash: KJtDKGSo50Z01aH4b9RxS61JUFSxzFIJPSA/VBxiCtM=)
                          3: ajon7HfMyCMWYs_XyTvW8ijDVT0.roa (hash: 6kA6NTDj4UuaXw9M4gCIjbYb1Ltp3bpLAiofee1qf4M=)
                          4: gPxz3AsvpazPSscQmOwXd8XHipo.roa (hash: IOFul4cQGXwnFtQ64s8onrLCe2V7iS99e1JtKsceQBo=)
                          5: h9nPAlU3s6KxTj5jBnBj5xZRCPU.roa (hash: 1Mi5lnnLXBxwQz2RK1kt7WBVIV9EaESr88qtKCm96w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:e4:0a:68:bb:30:4c:07:ae:e4:ad:fa:68:df:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
        Validity
            Not Before: Mar 29 06:00:24 2026 GMT
            Not After : Mar 30 06:00:24 2026 GMT
        Subject: CN=4dd6671748a22a1ea65604d3e9b26f05b8c95356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3e:62:a6:5f:ca:49:3c:1c:93:82:2b:82:a9:
                    25:0d:9e:d3:d7:2e:b9:6e:9d:8e:8e:9f:be:f0:b7:
                    90:20:c2:fe:2e:6e:83:13:e3:45:55:49:18:d3:17:
                    c5:96:8d:34:58:c6:89:d6:00:da:81:46:ff:40:b4:
                    2b:a1:19:e9:83:5a:cb:59:ab:72:05:a9:f4:3b:e5:
                    4b:a9:4c:f8:f4:22:65:c1:f3:f9:65:57:87:61:a9:
                    78:67:6b:90:16:20:0e:ca:35:cf:77:23:a1:43:8a:
                    f4:8d:75:31:0b:b7:8e:84:7e:fc:6d:dd:d4:e3:5f:
                    b0:f6:94:9c:d7:27:e4:93:8f:46:24:f4:1e:cc:cd:
                    a5:7f:e1:89:02:a0:8e:10:42:ea:e2:24:57:0e:c2:
                    5f:33:33:dc:03:6d:59:78:18:b3:b3:58:b6:7c:b7:
                    91:f0:1c:ec:a4:15:fa:91:38:4f:97:fe:34:ef:c4:
                    23:e1:b7:70:26:a4:d6:3b:95:40:17:90:0b:19:df:
                    78:69:af:29:12:bd:a9:64:fd:e2:11:6f:c6:57:d1:
                    c6:c5:0f:78:bb:b6:1f:36:59:1b:28:ad:18:a7:f3:
                    a7:64:b8:84:2a:b7:19:86:76:1a:cf:1e:68:5e:67:
                    49:b4:9f:bb:49:8d:90:a8:ec:74:2a:2c:39:8f:42:
                    af:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D6:67:17:48:A2:2A:1E:A6:56:04:D3:E9:B2:6F:05:B8:C9:53:56
            X509v3 Authority Key Identifier:
                keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:08:2d:91:f9:bd:8c:f1:13:a7:97:5b:3e:a5:de:8f:a8:b3:
         55:c9:21:54:66:63:89:ad:d8:39:3d:d0:fd:63:71:c0:62:34:
         6c:c2:00:c7:94:5b:58:4d:3d:05:bc:55:83:f4:0d:bb:be:3f:
         c4:08:d6:74:b8:8f:65:9e:9d:6f:dc:2d:6b:a6:5a:08:17:99:
         31:49:20:ca:53:b7:68:be:e9:29:6e:44:6e:f5:67:ab:16:2e:
         2a:94:7f:60:a1:4b:09:b4:5a:89:4b:00:d1:e4:36:ff:e5:2a:
         77:db:33:7f:c8:c5:a2:4e:cc:73:c8:d5:be:17:64:9d:dd:a5:
         8b:e4:0e:b2:f0:63:5f:d0:a0:ec:34:16:6c:7f:09:7e:b1:65:
         27:7b:d1:40:90:f6:ef:e6:91:f2:d2:9b:54:34:a4:74:9d:a9:
         04:d7:cc:04:01:ea:04:29:e3:bd:3e:59:cc:65:93:4a:b9:b1:
         ab:36:fe:cb:60:70:8b:45:66:57:16:b8:92:b3:8b:4d:a6:ad:
         4f:95:29:fc:e5:42:10:63:c3:18:f9:60:52:3d:19:92:ad:24:
         13:10:d1:95:42:47:62:27:23:e0:ee:86:2f:b9:1f:c1:42:d8:
         08:63:3b:77:1d:b0:d7:fa:c3:9c:a2:83:48:d7:16:71:f3:13:
         87:65:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:25 2026 by rpki-client