Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File:                     wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier:          Gqgz+Jr6E8RMTL6sJhjgWuW85fDSPAlmARZ1ty3eu/g=
Subject key identifier:   DF:F0:36:D1:42:C5:4C:87:5D:98:F5:1C:0E:E6:59:61:40:72:8E:71
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer:       /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial:       019D3A53C3F43F1B484FDDBE89268871ECA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number:          0B06
Signing time:             Sun 29 Mar 2026 16:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:01 +0000
Files and hashes:         1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: TE2qRW7U45AAPM9lXkxAF67xqK22dMVYINburNAmLbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:c3:f4:3f:1b:48:4f:dd:be:89:26:88:71:ec:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
        Validity
            Not Before: Mar 29 16:01:01 2026 GMT
            Not After : Mar 30 16:01:01 2026 GMT
        Subject: CN=dff036d142c54c875d98f51c0ee6596140728e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:f1:23:5e:4c:27:ee:7f:60:09:c3:f4:1e:
                    9f:37:29:c6:7c:df:a9:9c:e9:b0:c8:34:10:b0:9f:
                    e5:27:48:df:a9:08:c1:85:08:8b:b3:3e:61:65:b0:
                    9c:a9:c6:cc:36:25:b3:4b:04:7c:cf:fa:7a:f1:55:
                    ca:80:6a:00:66:76:94:90:c1:6f:b7:0a:d3:0e:43:
                    69:c7:24:0f:dd:c1:20:68:f8:ec:f8:1b:41:24:e6:
                    3d:6d:24:93:fc:2a:ff:12:5b:a0:6b:fd:e4:0a:48:
                    1c:2b:75:a4:74:9e:54:1c:89:40:99:fb:03:dc:5d:
                    4a:f8:ce:4b:03:c6:d6:cf:6b:b7:a8:8a:69:0c:4b:
                    ec:7b:cf:6d:30:59:a6:72:56:b9:2a:db:b0:21:ad:
                    cc:c3:57:29:81:2e:30:31:71:0b:6c:f6:74:d9:c9:
                    9a:1d:c2:b0:99:bb:cb:2c:93:8b:07:2e:01:e8:6d:
                    a7:af:12:92:91:87:99:5a:3f:5c:7e:17:18:6e:f8:
                    81:83:00:25:a3:b0:3e:a7:64:c9:3d:2b:cf:80:c0:
                    81:e5:9c:73:55:a9:eb:ac:94:f7:2d:f5:98:5d:36:
                    bd:c2:90:0a:5b:98:28:fe:01:e8:b0:4a:5f:1c:da:
                    b6:98:e4:a0:c6:c5:b9:6f:5e:88:04:6e:cc:b3:45:
                    40:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F0:36:D1:42:C5:4C:87:5D:98:F5:1C:0E:E6:59:61:40:72:8E:71
            X509v3 Authority Key Identifier:
                keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a4:c2:dc:0b:01:d5:d8:38:55:17:f0:0c:c3:a9:44:6f:75:
         3c:4a:cd:d2:d4:af:fc:c5:d9:dd:5c:4f:c8:2e:48:22:65:37:
         11:76:d6:72:3f:c7:7e:d5:3c:10:4c:f5:c2:ad:88:ff:48:da:
         e4:3b:bd:68:0e:6e:4c:f9:e4:9c:c2:2d:1c:e8:39:62:06:ba:
         df:07:15:d9:94:cc:37:df:32:f8:d6:41:a5:3a:0f:f4:9a:f9:
         54:43:a9:0d:01:9f:33:ef:fa:3e:e2:94:c8:69:f6:26:dd:4d:
         43:af:81:d4:cd:12:4e:4c:42:42:21:c9:1b:27:b8:7a:67:19:
         92:cf:1e:3b:bd:16:3b:5c:6b:77:07:11:9e:f4:78:8c:58:f7:
         90:6f:e5:ff:d7:b6:fd:80:1f:70:8f:20:9f:ed:60:f2:cb:68:
         be:c5:91:d4:40:08:10:2b:c0:17:2b:96:30:52:d9:26:80:9d:
         00:68:90:49:9e:1f:79:3b:cc:a3:74:cc:3d:d8:75:59:ae:1e:
         bb:b3:b9:49:66:ee:e5:50:5a:0f:ac:3d:c2:15:22:2a:0f:4d:
         34:47:3e:06:c7:ee:49:3d:94:21:f6:61:be:ce:07:c6:08:39:
         a8:dc:e7:37:3a:5c:45:5c:28:ba:78:74:12:9f:f7:1f:25:f3:
         20:f9:bc:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06U8P0PxtIT92+iSaIceymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwODFhMjI2NzRkYzI1YWFhNTA4NTM2N2UyMGUwNzhkZTkw
NjRmMTIwHhcNMjYwMzI5MTYwMTAxWhcNMjYwMzMwMTYwMTAxWjAzMTEwLwYDVQQD
EyhkZmYwMzZkMTQyYzU0Yzg3NWQ5OGY1MWMwZWU2NTk2MTQwNzI4ZTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBbxI15MJ+5/YAnD9B6fNynGfN+p
nOmwyDQQsJ/lJ0jfqQjBhQiLsz5hZbCcqcbMNiWzSwR8z/p68VXKgGoAZnaUkMFv
twrTDkNpxyQP3cEgaPjs+BtBJOY9bSST/Cr/Eluga/3kCkgcK3WkdJ5UHIlAmfsD
3F1K+M5LA8bWz2u3qIppDEvse89tMFmmcla5KtuwIa3Mw1cpgS4wMXELbPZ02cma
HcKwmbvLLJOLBy4B6G2nrxKSkYeZWj9cfhcYbviBgwAlo7A+p2TJPSvPgMCB5Zxz
VanrrJT3LfWYXTa9wpAKW5go/gHosEpfHNq2mOSgxsW5b16IBG7Ms0VAdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/wNtFCxUyHXZj1HA7mWWFAco5xMB8GA1UdIwQY
MBaAFMCBoiZ03CWqpQhTZ+IOB43pBk8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMTM5ZDgtNjhlMC00ZmZhLWI0ZWYt
ZDczNjRkZDM1YjMxLzEvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lMTM5ZDgtNjhlMC00ZmZhLWI0ZWYtZDczNjRkZDM1YjMx
LzEvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6TC3AsB
1dg4VRfwDMOpRG91PErN0tSv/MXZ3VxPyC5IImU3EXbWcj/HftU8EEz1wq2I/0ja
5Du9aA5uTPnknMItHOg5Yga63wcV2ZTMN98y+NZBpToP9Jr5VEOpDQGfM+/6PuKU
yGn2Jt1NQ6+B1M0STkxCQiHJGye4emcZks8eO70WO1xrdwcRnvR4jFj3kG/l/9e2
/YAfcI8gn+1g8stovsWR1EAIECvAFyuWMFLZJoCdAGiQSZ4feTvMo3TMPdh1Wa4e
u7O5SWbu5VBaD6w9whUiKg9NNEc+BsfuST2UIfZhvs4Hxgg5qNznNzpcRVwounh0
Ep/3HyXzIPm8Zg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:03 2026 by rpki-client