Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
File:                     wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft (raw, json)
Hash identifier:          xJzkQKHX8GxfXGofQm/Kx2Kvf0RlXfQ2q0559jPw+xM=
Subject key identifier:   35:27:F4:C4:1C:94:97:2C:69:23:BB:0B:13:83:19:05:23:DE:99:B8
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Certificate issuer:       /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial:       019D390A2492C083FFE394C369EE338FD1C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
Manifest number:          16EE
Signing time:             Sun 29 Mar 2026 10:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:59 +0000
Files and hashes:         1: 0rveDYYcrT7zdZKuahwTECp3T4E.roa (hash: Pk8DvHsVkrqTdOHnSjdJSO+iO0nQzwivT/Z1Hgi2rpM=)
                          2: wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl (hash: pzlqLCh8dvVvEW/HMXW52cB6R+/hpPmInwtOCrz296E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:24:92:c0:83:ff:e3:94:c3:69:ee:33:8f:d1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
        Validity
            Not Before: Mar 29 10:00:59 2026 GMT
            Not After : Mar 30 10:00:59 2026 GMT
        Subject: CN=3527f4c41c94972c6923bb0b1383190523de99b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f1:fd:6b:74:fe:d7:59:3e:7d:cc:53:67:e6:
                    03:bc:0e:26:c5:54:ec:85:ff:cc:ea:93:e9:19:94:
                    3c:aa:e4:4b:cf:4d:99:98:24:8c:53:e7:2c:38:02:
                    92:91:12:b9:32:b0:0a:33:56:f2:0f:35:bd:71:42:
                    01:e3:88:08:1f:8e:52:c6:93:51:a3:0d:d7:a8:f1:
                    55:30:28:ec:b1:0f:c1:93:77:fa:95:98:8d:5b:bf:
                    50:03:a3:cf:ab:fd:73:11:4f:4e:ac:14:cc:39:36:
                    04:f6:4a:3c:5b:4d:af:26:82:56:bc:1b:ec:ae:da:
                    40:2c:a0:c7:bc:b6:2e:ce:2c:44:66:b9:97:31:42:
                    69:32:58:d6:2d:50:9a:f5:98:91:02:e0:da:41:02:
                    2e:64:9c:7c:7d:54:93:bb:f6:c2:93:e1:d1:60:1e:
                    d6:2e:85:69:cb:df:13:81:7b:bb:c8:cf:24:9b:91:
                    05:a3:49:71:da:01:50:aa:d0:16:f2:e9:9f:f6:36:
                    48:d5:28:57:69:f9:ca:e7:9c:06:e9:58:13:00:9a:
                    2d:89:2b:66:d3:72:fc:5f:ed:73:b2:55:a4:23:8b:
                    2d:9e:84:02:89:3d:7e:e4:9c:39:cc:c6:55:23:e4:
                    60:2b:95:c7:5c:75:d0:25:a0:30:60:77:42:1e:52:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:27:F4:C4:1C:94:97:2C:69:23:BB:0B:13:83:19:05:23:DE:99:B8
            X509v3 Authority Key Identifier:
                keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ea:b1:d3:4f:6a:98:92:36:6b:62:84:91:82:49:e3:f5:da:
         b7:3b:f4:ff:8c:0c:69:3b:07:02:d8:10:54:ba:ea:91:31:8b:
         a1:a0:68:af:5b:98:0e:98:f6:05:9d:66:e5:eb:c5:e5:38:76:
         a4:de:40:bc:2d:ee:7e:2d:0b:d2:79:ea:ec:ad:25:89:f2:03:
         9a:af:0c:b4:72:3d:65:d2:91:74:0a:19:d2:09:32:bd:26:bf:
         77:0b:3c:1e:fe:ff:f8:9e:3e:ec:68:d8:5e:b7:a2:79:8b:c5:
         cf:09:aa:ea:f1:f6:02:1b:18:17:9e:3c:cf:df:a5:d5:7c:09:
         e8:dd:c4:09:db:ba:70:b9:4b:73:1a:6a:27:f9:19:49:78:a4:
         77:93:fd:23:21:16:14:f8:0e:a6:38:c5:61:71:36:04:30:7f:
         58:ef:56:b0:67:91:0f:b9:bd:7f:14:bb:20:19:a7:3a:97:bc:
         9c:b4:f3:89:53:2e:77:62:c7:ae:b2:1e:d3:be:d2:2c:c0:c7:
         67:24:7e:ff:71:40:2e:50:6d:08:23:d2:17:67:26:8f:0a:3f:
         f7:42:0e:28:c5:b4:89:7c:15:ab:15:5d:d6:4e:77:97:c2:d1:
         ce:c5:20:2a:af:01:be:42:1d:b6:d6:86:e2:73:36:c7:bf:9a:
         7a:80:81:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:32 2026 by rpki-client