Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
File:                     wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft (raw, json)
Hash identifier:          e3MuGlbGNu0XhCTRXPqG190CCKHChNVmj6QAJ+9+rhQ=
Subject key identifier:   69:95:13:1B:6E:00:EB:B0:05:00:38:A8:7B:87:91:B7:69:E5:E9:83
Authority key identifier: C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3
Certificate issuer:       /CN=c273fff178ed52fd1de7093112423b6417cea2d3
Certificate serial:       019D389BDBE6AA4BA26ACA2C68253992A4C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
Manifest number:          8C
Signing time:             Sun 29 Mar 2026 08:00:31 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:31 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:31 +0000
Files and hashes:         1: euo56ZtX6v5B0AKUx9R-FKNO9EA.roa (hash: w3fmR0eCcrM0dELQMZ8IdSvLZfYhYkLBqG/PpUnPMls=)
                          2: wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl (hash: BpmKTw9Lio3TlefGFt/vbfsG27dqaNV7gQFuW+z0ScI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:db:e6:aa:4b:a2:6a:ca:2c:68:25:39:92:a4:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c273fff178ed52fd1de7093112423b6417cea2d3
        Validity
            Not Before: Mar 29 08:00:31 2026 GMT
            Not After : Mar 30 08:00:31 2026 GMT
        Subject: CN=6995131b6e00ebb0050038a87b8791b769e5e983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:0c:9e:61:23:4d:07:36:11:df:3b:54:3c:
                    a0:c7:a6:0c:b2:ea:e5:a1:35:ef:b6:0c:54:c4:3a:
                    82:0b:e8:36:04:46:b7:d9:d7:71:4b:b2:03:45:4c:
                    31:0f:a8:7b:33:1b:6b:43:00:ca:36:23:67:09:39:
                    32:fe:81:d2:46:eb:59:ed:f0:0c:00:fe:bc:ac:7c:
                    86:a2:36:71:76:4f:c4:3d:36:60:ec:ab:46:0c:77:
                    5b:3b:df:7f:6f:5b:8f:bc:18:7b:a6:74:37:f0:f2:
                    b6:2d:5f:fe:1b:df:14:d8:70:3e:26:3b:56:37:1d:
                    47:76:2a:e7:66:fd:8e:c4:4b:6c:04:ee:ed:28:cf:
                    8f:e8:92:03:0a:cd:fd:f4:6b:20:1d:54:9c:64:95:
                    a1:2f:49:38:0c:8d:46:c8:80:d0:cb:54:97:9a:92:
                    1a:1c:20:72:a2:c8:48:4b:fb:73:00:62:23:c8:b7:
                    4c:dd:da:76:ab:62:06:6c:82:4a:3a:59:a7:04:d8:
                    49:eb:a7:82:30:d5:df:fb:01:2c:20:7d:db:44:4d:
                    3b:e2:44:71:5d:54:fb:76:6b:59:62:84:91:13:30:
                    ce:a0:17:f2:7a:08:dd:3a:e8:6e:50:71:8a:28:32:
                    19:9c:5b:97:a8:a7:ae:a3:bc:2d:c4:47:dd:1c:e3:
                    e9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:95:13:1B:6E:00:EB:B0:05:00:38:A8:7B:87:91:B7:69:E5:E9:83
            X509v3 Authority Key Identifier:
                keyid:C2:73:FF:F1:78:ED:52:FD:1D:E7:09:31:12:42:3B:64:17:CE:A2:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnP_8XjtUv0d5wkxEkI7ZBfOotM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0996dd-7985-455d-bfb9-f61643fe9828/1/wnP_8XjtUv0d5wkxEkI7ZBfOotM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b6:90:70:94:99:cd:07:39:19:b7:e9:c0:01:c1:1d:59:67:
         92:51:bf:f4:c9:c0:89:d5:49:a0:52:91:5a:a0:a3:09:ad:a2:
         f9:0c:5a:e1:49:d8:f8:f2:e4:53:12:b8:79:a5:7f:4a:98:75:
         4d:8e:77:49:9b:4c:39:94:d6:a1:0c:d4:9d:7f:6f:80:eb:16:
         d4:c7:74:67:6c:2b:c7:cc:5d:7e:e9:7d:c3:13:e0:b7:38:05:
         73:e3:98:6d:4f:39:c2:4d:91:d9:10:76:c9:b3:56:fb:e9:48:
         c1:a8:5b:84:e3:e6:cf:49:80:30:aa:54:42:30:27:24:5e:26:
         68:88:5c:7d:0f:53:10:c4:45:05:7e:7a:58:03:f3:ca:dd:90:
         b4:1b:09:90:c8:b6:ab:60:02:5f:fb:a8:fb:3e:65:4f:d7:d6:
         83:42:77:93:db:47:a5:e5:a7:d8:34:ce:54:26:c7:f0:48:5c:
         a4:b0:48:5e:f4:ea:7b:51:c4:28:f4:62:83:0e:76:6a:5f:07:
         a1:10:5c:e4:c8:da:61:57:3a:20:52:67:f8:31:1c:05:63:3d:
         ca:a4:58:b7:67:40:0b:ae:48:8d:c1:64:0d:22:1f:87:e2:60:
         6c:06:2c:b2:2b:f0:fa:68:e5:18:8c:ff:fe:9a:88:8a:8b:73:
         0f:56:ae:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:16 2026 by rpki-client