Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File:                     DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier:          ZNxM/W7Yfgv8hCEg3TiAzQjNPDB5LjCpXeBwzsS2eUU=
Subject key identifier:   EF:3D:C0:B1:9D:69:FD:29:09:DA:8B:FB:67:87:F1:A1:27:FA:BC:B8
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer:       /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial:       019D37F6EAD3878A644E4B792E8E7EB4292B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number:          0E79
Signing time:             Sun 29 Mar 2026 05:00:21 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:21 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:21 +0000
Files and hashes:         1: 06cgoU7GyJzMyJR7nF3NCVCDDU0.roa (hash: kN3R1rOeDYfzsBK/+cPskIhYJ/5X5cYwuNm8G34vSmk=)
                          2: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: xkkomfJiqnHsUT4a9Tw4LdzD6/wRXb56filtEvfuV0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:ea:d3:87:8a:64:4e:4b:79:2e:8e:7e:b4:29:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
        Validity
            Not Before: Mar 29 05:00:21 2026 GMT
            Not After : Mar 30 05:00:21 2026 GMT
        Subject: CN=ef3dc0b19d69fd2909da8bfb6787f1a127fabcb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:30:5e:93:ff:78:9c:6f:b8:9f:8c:b0:af:1f:
                    3b:03:4c:33:83:93:4e:20:48:22:78:eb:69:2f:07:
                    39:58:d7:95:ef:2b:14:7b:cd:46:66:67:7d:4d:61:
                    bd:c3:5d:e4:d7:e6:2b:9a:4f:7e:e9:da:44:ef:ec:
                    a6:f5:f2:ee:3c:2c:2f:95:24:08:6c:76:51:b1:a6:
                    c4:28:5c:4f:74:bd:c0:bc:2a:0e:3e:0b:3f:03:90:
                    34:12:59:35:64:04:0d:db:4d:d9:28:c9:e4:b8:a0:
                    84:e5:1c:33:14:b3:db:da:39:77:f7:c7:42:c1:93:
                    58:be:64:13:d1:53:fd:22:0f:a6:bb:e8:28:cd:3b:
                    8d:a9:fb:45:ff:5b:f6:2c:1d:fd:57:2b:76:87:e1:
                    7c:fe:d4:3c:e8:f2:0e:2c:75:55:62:8d:27:04:03:
                    a7:3b:8a:d0:69:c3:61:d4:fe:b9:9b:71:83:ef:25:
                    03:bf:e2:11:77:29:0e:44:85:60:da:8c:52:49:1c:
                    ed:db:04:de:cf:7d:37:9e:94:c1:86:ad:dd:a3:05:
                    9f:cd:b8:8b:af:5a:09:52:70:97:e4:6d:55:40:41:
                    7f:1d:ca:64:f4:7c:9a:8e:d4:bd:4b:91:90:b4:40:
                    60:b5:1a:e9:85:2e:0e:dd:44:f8:4e:e7:22:98:fe:
                    da:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3D:C0:B1:9D:69:FD:29:09:DA:8B:FB:67:87:F1:A1:27:FA:BC:B8
            X509v3 Authority Key Identifier:
                keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:5b:56:dc:9d:91:81:33:3c:a3:48:3d:da:fc:74:be:4a:03:
         ec:c4:23:f1:70:29:7f:3c:5a:89:6c:18:50:44:ab:55:50:b8:
         77:b8:11:2f:c9:9c:66:42:9a:0b:fb:ab:00:b6:1b:39:d8:a6:
         90:a8:3c:a4:7a:af:1e:84:1a:ef:a7:b1:2f:1f:89:d7:c7:f3:
         62:eb:89:ae:e5:35:dd:3e:4c:70:23:d6:ff:52:10:9d:80:b5:
         26:be:be:ca:03:06:9d:7e:1c:b1:b4:f1:e6:a0:6b:5b:de:61:
         d0:db:41:02:3e:65:2a:ba:3c:ac:57:03:b2:4e:f3:b3:61:0e:
         47:0f:51:ba:5b:33:75:9a:8c:92:32:36:c1:b3:38:b3:19:72:
         3f:12:1b:a7:ba:21:32:93:2f:19:7d:97:5d:49:57:db:d2:86:
         b0:e3:36:ec:de:0c:9a:61:bb:9b:5c:04:94:65:d1:8f:41:47:
         6a:6b:e9:2d:fe:23:d8:91:f7:47:f4:13:d8:c2:a7:97:1a:0e:
         e6:e8:a3:3b:8a:21:62:dc:cb:47:4c:59:00:ba:ee:65:da:32:
         91:bf:39:b7:14:d2:99:46:3d:8a:e6:74:44:06:20:17:44:91:
         5b:60:a0:87:48:1a:b2:f5:6c:45:91:00:11:19:9e:cc:91:71:
         f7:95:98:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:19 2026 by rpki-client