Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
File:                     dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft (raw, json)
Hash identifier:          b+zX0almnXVxuBcvK0Mre2gj4KPqnVZhs+tKe1xOePg=
Subject key identifier:   1A:15:11:EC:D2:99:0E:E2:12:B3:69:70:25:ED:90:DF:18:6D:28:9E
Authority key identifier: 75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7
Certificate issuer:       /CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
Certificate serial:       019CE523951761A8907D386DC474E2F56DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
Manifest number:          0CCF
Signing time:             Fri 13 Mar 2026 03:00:40 +0000
Manifest this update:     Fri 13 Mar 2026 03:00:40 +0000
Manifest next update:     Sat 14 Mar 2026 03:00:40 +0000
Files and hashes:         1: W67sJZlYFgIAjOqo8xpblWxBJvA.roa (hash: IVuhnw8j7o4RQ+rJmEoiYh1oIQYgyJIY5uLBiWowino=)
                          2: dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl (hash: U6p2LqktOW/B9bWK07VrewxNtDeZkQQn9fx/d1JCdJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:23:95:17:61:a8:90:7d:38:6d:c4:74:e2:f5:6d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=756fba46634d22b93db1bf46ec5a8d665e62dac7
        Validity
            Not Before: Mar 13 03:00:40 2026 GMT
            Not After : Mar 14 03:00:40 2026 GMT
        Subject: CN=1a1511ecd2990ee212b3697025ed90df186d289e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:90:d4:ca:93:09:56:65:92:61:91:f5:f6:
                    b4:dc:dc:0f:ec:61:52:8b:3d:ce:d0:20:30:9c:81:
                    95:f9:f3:2d:bb:2d:39:98:52:57:07:27:43:f1:1b:
                    78:ab:1b:88:a5:22:1b:71:69:c1:25:52:1e:72:96:
                    8b:c0:e7:63:29:76:c7:1e:6c:1c:07:b1:00:92:25:
                    05:25:1c:8f:c6:ee:97:ab:14:c6:60:44:aa:19:0a:
                    f4:ea:62:8a:b9:f9:43:ce:f1:9f:8b:dd:d0:97:5e:
                    fd:40:2d:c8:e1:32:fd:6b:44:35:a9:8b:9a:b9:45:
                    6b:68:48:a1:ed:a2:d9:55:80:be:84:14:85:19:7c:
                    7b:a2:b7:b1:61:36:b2:f1:34:3c:50:b7:3e:bb:8b:
                    c6:fc:52:d7:25:a2:7b:1f:6a:21:cf:2a:01:0c:65:
                    80:08:e8:79:ba:5a:f4:30:6b:50:75:e7:68:34:37:
                    5b:04:b7:4b:7c:21:f3:87:37:6d:d4:48:98:61:12:
                    66:a8:a6:5b:d0:16:e2:10:43:38:91:f0:87:e6:37:
                    da:cb:d0:b4:8b:35:44:c1:11:02:db:01:3d:14:e9:
                    83:2a:47:c7:7e:b2:8b:b7:d6:e1:e1:79:b1:12:f1:
                    6c:55:6a:f4:a2:bc:00:f8:29:4e:46:b7:36:90:a7:
                    2f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:11:EC:D2:99:0E:E2:12:B3:69:70:25:ED:90:DF:18:6D:28:9E
            X509v3 Authority Key Identifier:
                keyid:75:6F:BA:46:63:4D:22:B9:3D:B1:BF:46:EC:5A:8D:66:5E:62:DA:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dW-6RmNNIrk9sb9G7FqNZl5i2sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b68421-99b1-485e-b217-d3adc7449391/1/dW-6RmNNIrk9sb9G7FqNZl5i2sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7e:b4:17:8f:7e:8b:5e:c5:8f:52:bf:25:6f:2e:44:d2:e6:
         d5:d2:6b:9b:2e:a3:82:b9:2f:b3:68:af:ac:20:a8:2c:f7:8b:
         94:0d:46:8d:85:48:4d:0b:42:a3:78:d4:98:be:0f:cb:a8:ca:
         ce:5b:94:62:b1:f6:d3:44:49:98:40:5a:8d:57:11:b1:7c:ad:
         11:3e:0d:2d:c7:75:8b:be:c2:11:be:3f:35:74:d8:55:84:97:
         05:bc:e0:91:a1:e6:b0:20:41:33:06:c0:65:58:79:a8:dd:27:
         8f:ff:52:3b:74:5d:e8:0d:a6:65:d9:ae:22:1d:f0:52:11:53:
         59:65:bf:1c:e6:e0:4a:81:f3:aa:b8:a5:9c:34:29:8d:2c:72:
         7e:6a:21:42:aa:aa:59:d7:c8:05:ab:76:af:09:76:ec:8b:1c:
         45:1c:4a:42:12:24:24:f5:81:a7:4c:a1:c2:5e:6d:3c:ee:76:
         a2:84:bb:0d:5e:de:87:67:65:86:b4:9c:38:43:5f:44:83:da:
         42:3c:fe:0e:3f:a6:2f:96:24:de:a5:f6:8a:5c:4a:c9:b8:d6:
         f2:48:f2:0b:b0:4d:db:ba:f4:6c:5c:b9:03:1e:9b:24:ac:61:
         e0:78:70:f6:be:4e:72:bc:a2:25:bc:5c:5f:f4:29:4a:ad:d5:
         b8:59:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:37:27 2026 by rpki-client