Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
File:                     wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft (raw, json)
Hash identifier:          iwL6/UUwJISEpstKlIHdk8JGo+sqLWOJ8hMsLiTAQIA=
Subject key identifier:   34:1F:D4:71:42:07:32:EB:E2:05:E3:2B:D9:6C:BD:6A:56:E6:47:71
Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C
Certificate issuer:       /CN=c334a35abfa82d549e490704d68bbe658005d63c
Certificate serial:       019D390A39BD1A5A06B618AE52E9B1BAF32F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 10:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:04 +0000
Files and hashes:         1: Cgd5Jfm0z8iU211-uSATka8FEqw.roa (hash: 6iFZepo1g13JI2QksLW8HVf91tLNVUbHxGnbKXKYWMo=)
                          2: Eijib8iYPDeplyoBLGAmPZORFLE.roa (hash: //KC1lCHcJET8STKi3XrrsGCkj88N/0LPLS69WfA2CM=)
                          3: lmh0HdtE8EG1HtIEfqG-CpL5lWE.roa (hash: iQDEvRLmeD/noBsclLg6BEdBH6bYdpCJwODCMRFPWi8=)
                          4: wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl (hash: uzl4W88ScR28kbntg7HIlJLANRTTesS7EL5b2cmpzHI=)
                          5: yjfBxV_rdwxlbtWbC0f6CXmYidM.roa (hash: cEHh1mv/vVXkxP03jyzCPQKZKyj1EccWurODavR3WD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 10:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:39:bd:1a:5a:06:b6:18:ae:52:e9:b1:ba:f3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c
        Validity
            Not Before: Mar 29 10:01:04 2026 GMT
            Not After : Mar 30 10:01:04 2026 GMT
        Subject: CN=341fd471420732ebe205e32bd96cbd6a56e64771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:2e:f6:8d:33:e3:f2:49:57:aa:71:f3:af:
                    e6:62:a5:b4:70:8c:dc:31:38:d9:af:23:62:a9:dc:
                    9f:6d:3d:1f:c0:e1:6d:9d:76:e2:37:41:56:2c:4e:
                    55:3c:40:0b:db:12:75:de:99:1a:ee:0e:3d:24:80:
                    1c:ae:f4:9b:44:f3:52:0e:b8:87:a7:88:08:52:97:
                    7a:63:5e:10:d1:a3:23:fd:3d:43:73:d6:4c:78:63:
                    c6:0e:eb:08:33:d6:ab:b9:23:21:58:21:d3:21:d5:
                    8d:24:69:ba:7e:db:ff:4d:24:12:5c:58:1a:f2:9e:
                    04:f4:d0:75:4f:ce:fc:b9:b9:c2:4f:e0:1d:71:10:
                    95:9b:df:2b:e0:4f:92:5c:93:ef:3e:32:69:9b:51:
                    71:20:c5:c6:ea:67:f3:91:16:11:ff:63:c9:3a:bf:
                    4a:69:c0:81:b8:15:c3:c3:ce:f5:a8:8c:8b:fc:a4:
                    2f:6d:20:27:3f:c1:75:a6:a4:18:43:ac:ff:4d:12:
                    ae:3b:c8:cc:e2:ae:68:9e:40:ba:36:72:56:6f:31:
                    92:9c:97:3d:f5:51:4c:9c:6a:dd:3d:9a:3e:78:43:
                    86:f5:5d:af:06:6e:4d:76:9f:23:0a:85:90:6a:12:
                    db:41:61:69:46:d4:85:14:34:0d:f9:63:66:20:48:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1F:D4:71:42:07:32:EB:E2:05:E3:2B:D9:6C:BD:6A:56:E6:47:71
            X509v3 Authority Key Identifier:
                keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:b5:dd:4b:ec:ca:f0:a2:ab:41:db:ef:e9:f5:b9:17:75:f6:
         70:05:b6:cd:17:bd:eb:04:05:ef:94:58:56:97:89:ac:04:e8:
         8d:e7:fc:f0:01:11:0b:4a:dd:b1:14:f7:59:e9:17:67:d7:b4:
         47:66:0e:28:41:83:9d:67:d6:05:29:16:ea:c6:a6:fb:a2:50:
         12:31:f9:bd:ae:d3:a7:75:62:b1:d5:c2:4d:45:46:de:9d:65:
         04:39:e8:0b:12:a7:35:cc:48:12:ef:78:c5:97:e9:24:fa:2e:
         ff:db:f0:bc:d8:58:d8:c7:9f:62:43:f3:17:bd:b3:74:bc:56:
         e5:cc:75:8f:98:77:67:00:e4:b7:d7:e9:17:ac:31:43:66:f9:
         7f:b8:2d:87:85:5b:48:dd:29:3c:2f:82:24:4c:f3:14:db:87:
         b5:27:4a:00:79:47:73:90:8e:f1:f8:a5:cb:3a:2f:8b:eb:a2:
         fb:3f:6f:52:39:56:63:8a:f4:27:4c:8f:81:2d:46:95:ef:43:
         90:d2:f1:9a:74:05:98:08:ed:f8:5e:7d:08:96:97:4e:dd:bc:
         f3:71:ce:8c:c0:69:2f:ba:2a:08:53:da:3a:01:96:48:0c:0d:
         76:da:db:7c:c5:f2:1c:f3:7f:e3:d4:5f:c4:e2:f4:28:7a:d3:
         2f:43:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:03:06 2026 by rpki-client