Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
File:                     wy7UX86pxxu-9WpTJcKXyvrpHm4.mft (raw, json)
Hash identifier:          2VKBaSkwEKPCiGyecOC2Lwm/ETI3gEiiJYouQD+VpvU=
Subject key identifier:   45:08:F9:6F:54:69:9F:12:03:53:EF:2C:77:3B:25:2C:57:48:25:9B
Authority key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Certificate issuer:       /CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Certificate serial:       019CE5237F90BC1DD0F9292738AB32B18729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
Manifest number:          1866
Signing time:             Fri 13 Mar 2026 03:00:34 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:34 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:34 +0000
Files and hashes:         1: k5xccdAgWXUIBYQzUy_Y_5kVFBM.roa (hash: G3OJEnXc7wLE0YQ5zBZyEB+XHB1m/x2BVeVnHOMikX8=)
                          2: wy7UX86pxxu-9WpTJcKXyvrpHm4.crl (hash: XhUX7S17of7gPgZOg8J/25xq9gYf1m0R3yhrr1gc9tY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:7f:90:bc:1d:d0:f9:29:27:38:ab:32:b1:87:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
        Validity
            Not Before: Mar 13 03:00:34 2026 GMT
            Not After : Mar 14 03:00:34 2026 GMT
        Subject: CN=4508f96f54699f120353ef2c773b252c5748259b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:6c:47:4f:76:2e:f0:f1:90:00:81:dd:58:
                    99:2e:b4:a8:3a:17:1a:94:b7:7e:5d:7e:54:41:c5:
                    0d:98:c5:37:b5:4b:41:4a:4b:48:54:f5:77:ce:88:
                    01:30:74:c2:dc:82:c5:e0:48:aa:2b:94:54:49:c5:
                    c2:c7:f8:a2:b0:de:bd:11:4c:64:b2:9b:3d:4c:66:
                    d5:26:0b:dc:52:4a:c2:bf:4a:58:e5:07:c0:85:72:
                    e9:c7:8d:8a:ee:f6:7a:8a:0e:ad:73:c9:0c:fd:20:
                    2f:ec:09:93:4c:4c:c5:d3:90:e1:0f:07:f2:7e:ec:
                    f0:d6:9c:c1:77:d0:55:2f:59:57:5a:c8:c2:00:27:
                    cf:05:89:3a:ed:2b:d4:ff:7c:4c:86:1f:5d:58:e8:
                    08:cd:0d:31:ed:82:29:6d:46:4e:e6:2b:f8:63:50:
                    07:ff:0b:5a:95:f5:92:4f:7f:30:2a:6d:4e:6f:7f:
                    f5:88:cd:a7:0e:e1:27:38:43:61:5b:d9:a9:78:b8:
                    5e:43:89:9a:ac:b4:38:30:88:ad:73:97:4f:5e:b5:
                    5d:74:d2:8f:a1:e5:72:c6:c5:ea:fa:78:a1:a2:8d:
                    d2:1e:ae:a5:6b:4d:ad:45:29:b7:84:09:19:9d:4b:
                    8e:6b:a7:c1:9f:bc:0a:c1:2f:ab:2e:c0:2c:a3:3e:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:F9:6F:54:69:9F:12:03:53:EF:2C:77:3B:25:2C:57:48:25:9B
            X509v3 Authority Key Identifier:
                keyid:C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ec:a9:8a:48:77:94:34:ad:17:b7:05:6c:b3:45:2f:c6:aa:
         89:68:b6:71:9b:7b:4f:02:2f:cc:43:dd:36:11:d2:07:b2:06:
         7c:0f:e1:5b:e2:44:0b:a4:af:ac:34:0e:5f:81:83:fa:eb:d0:
         11:d6:3d:63:4a:37:a8:12:69:13:c6:91:88:ea:a8:ae:a0:97:
         e5:83:2f:55:62:30:ed:4d:53:9b:77:7b:7b:4d:eb:c0:9c:42:
         95:63:d1:41:e5:d2:a7:d4:53:e4:ad:99:07:c6:69:90:80:e7:
         89:5f:dd:4a:15:f0:2d:07:5b:16:42:83:ad:40:fa:2a:3a:96:
         ea:dc:5b:6b:d6:9c:5d:10:fa:17:90:b2:ab:c5:59:7f:ea:64:
         2d:59:e1:3d:4b:1d:88:6a:2d:36:72:80:ab:d6:a5:b6:e8:53:
         77:f2:69:ab:08:31:f3:bb:57:9a:b4:f7:2b:9b:c4:67:49:fa:
         6a:09:29:63:dd:43:1a:f6:72:00:2d:66:4e:7a:b1:78:12:ce:
         4e:68:b8:8b:9a:5a:fd:26:3c:2e:05:76:89:3c:5f:35:69:30:
         e7:96:3d:93:dc:c3:ff:22:f8:c9:b5:06:cf:1a:4c:00:fd:9c:
         90:9f:2a:ae:2c:c1:8f:f5:65:f6:ed:0b:24:f6:43:d6:56:fe:
         fd:62:21:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:34 2026 by rpki-client