Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
File:                     pWGJNurjnydAQKDTMnz4gQLITG8.mft (raw, json)
Hash identifier:          lL/oHTUMfLQNp3OL1gWxCxCRiSxCLoyritVlWSrYH8I=
Subject key identifier:   82:0E:68:EB:2E:C3:22:AD:CB:A5:54:B7:7F:B9:4A:8D:63:C1:71:8E
Authority key identifier: A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F
Certificate issuer:       /CN=a5618936eae39f274040a0d3327cf88102c84c6f
Certificate serial:       019D390A183324F4B9AEF8A2FD6862FA4977
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
Manifest number:          A7
Signing time:             Sun 29 Mar 2026 10:00:55 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:55 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:55 +0000
Files and hashes:         1: pWGJNurjnydAQKDTMnz4gQLITG8.crl (hash: 4fJfl1gJ/YFJhfEpPAt5jIiODSR9KFvMyJ3D4P9w80k=)
                          2: vc4rQV1btws3GoUjJ72MXPBLjsA.roa (hash: vJx5UKv6BgNsvAF5bCtGkQAa0ljtx4RqY02ta/bz2CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 10:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:18:33:24:f4:b9:ae:f8:a2:fd:68:62:fa:49:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5618936eae39f274040a0d3327cf88102c84c6f
        Validity
            Not Before: Mar 29 10:00:55 2026 GMT
            Not After : Mar 30 10:00:55 2026 GMT
        Subject: CN=820e68eb2ec322adcba554b77fb94a8d63c1718e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:e8:b2:22:ca:1c:ea:9b:65:72:59:0b:15:
                    71:00:eb:0a:4b:1d:ad:64:a0:f2:d8:bf:7d:4b:3a:
                    a6:a8:be:43:51:e5:53:09:f7:aa:1c:96:0e:0b:43:
                    b4:e1:8f:3a:2a:17:3f:fe:2c:3e:28:eb:9b:3a:57:
                    4a:62:94:b3:6d:eb:9e:be:59:45:bd:be:0d:63:06:
                    e5:0c:e0:c2:a4:c6:34:83:8d:75:d0:e8:39:00:a6:
                    1a:61:70:20:96:de:5b:fb:7e:2b:79:e6:5f:38:a7:
                    e0:69:75:85:f8:5e:ef:48:5d:86:ca:b3:e0:e5:86:
                    a0:c9:25:9e:be:cf:eb:0e:64:47:d8:db:6a:d9:23:
                    a6:88:53:b1:4e:ce:9f:f3:82:a6:08:a2:34:7f:60:
                    0b:8d:64:b7:b0:fd:fd:05:9f:09:90:00:3a:81:02:
                    7e:d9:b9:f3:f2:c8:01:bb:bb:f0:0b:a5:3b:e5:67:
                    a0:1e:79:1d:74:45:3a:d4:3d:e6:88:94:65:c0:c2:
                    a8:0e:8c:37:ba:01:9b:2d:68:6b:63:bc:61:8b:ab:
                    d5:60:06:36:30:e0:6f:8c:29:26:ea:85:20:ab:f6:
                    20:d0:7c:71:ad:0c:26:9d:f5:34:e6:ed:e6:52:85:
                    84:28:15:43:29:17:aa:dc:ee:ec:94:b2:38:d2:61:
                    3f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0E:68:EB:2E:C3:22:AD:CB:A5:54:B7:7F:B9:4A:8D:63:C1:71:8E
            X509v3 Authority Key Identifier:
                keyid:A5:61:89:36:EA:E3:9F:27:40:40:A0:D3:32:7C:F8:81:02:C8:4C:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWGJNurjnydAQKDTMnz4gQLITG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9bed26-18fb-4ecf-a2a2-e4a31e79c9ce/1/pWGJNurjnydAQKDTMnz4gQLITG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:54:0f:3a:24:4f:cc:e8:25:51:05:83:ed:4c:96:0d:43:85:
         21:8d:ab:ac:7a:7a:2b:c8:c3:74:c1:d3:1e:aa:bb:46:41:cd:
         b9:78:1a:94:cd:06:ae:3f:7d:d6:7f:a1:69:4b:f7:6e:53:cc:
         e8:54:f8:f0:c2:ab:5c:22:28:90:e9:e8:8b:6a:d7:90:58:06:
         72:76:2d:c0:67:c2:b3:1f:93:60:68:d1:7f:88:eb:ee:a9:6e:
         ab:55:93:a3:b6:3d:73:e7:76:c7:43:b8:45:35:f8:07:46:47:
         a5:3e:c8:59:76:5a:74:9a:00:bb:77:f9:3b:36:74:00:b1:c1:
         01:1f:c9:84:b7:76:b3:95:67:bc:dc:61:ab:0d:75:88:e2:a7:
         5c:d3:41:03:d1:5c:d0:9b:54:6f:84:5e:74:24:65:39:08:7d:
         e4:98:d5:6f:6b:e3:95:f6:34:33:f0:41:2c:83:7c:95:de:c1:
         c0:3f:3c:79:7e:e0:18:8d:19:f5:bf:40:4c:cd:97:0a:e8:a5:
         73:45:8e:35:34:07:73:f5:4e:51:76:c1:c7:2d:0f:1c:4d:96:
         a4:ee:1b:3c:e9:ef:74:df:98:63:4b:d8:9c:25:b8:18:30:36:
         74:09:62:0b:c8:6c:85:46:49:3d:85:94:92:78:12:2b:b0:8f:
         dc:60:ce:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:16 2026 by rpki-client