Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
File:                     wyzHqWT083CSkpHhn_995T8ZvkQ.mft (raw, json)
Hash identifier:          m1rfwbS9KZoXhgO/u4fFe9hZ2Y/LKnAqUmyY/u5WVTk=
Subject key identifier:   F6:7B:EA:2B:5C:04:B4:0E:E4:9B:55:BB:94:DA:49:4A:49:A9:D4:86
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Certificate issuer:       /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial:       019CC63D7EB35DE7D26419178E47D8DBF63A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
Manifest number:          138A
Signing time:             Sat 07 Mar 2026 03:00:44 +0000
Manifest this update:     Sat 07 Mar 2026 03:00:44 +0000
Manifest next update:     Sun 08 Mar 2026 03:00:44 +0000
Files and hashes:         1: Ad2BYNr4C8UGPtT46SLlPEvhYoE.roa (hash: iHuFlOzhqVh9TVA/RdSn3C6VoHbo7FF1nq7e3/ScdEM=)
                          2: wyzHqWT083CSkpHhn_995T8ZvkQ.crl (hash: +Hb+Jy1L2A3XLueULI65azmNa85AlXDSZ6Yk7wiF0w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c6:3d:7e:b3:5d:e7:d2:64:19:17:8e:47:d8:db:f6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
        Validity
            Not Before: Mar  7 03:00:44 2026 GMT
            Not After : Mar  8 03:00:44 2026 GMT
        Subject: CN=f67bea2b5c04b40ee49b55bb94da494a49a9d486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8d:ab:ed:0d:a7:a7:2c:c3:3b:5b:a0:d9:ed:
                    b2:f9:17:b0:c4:6e:b4:63:b0:42:e8:a5:f9:b9:fd:
                    b8:79:3e:7f:9e:38:9e:1b:b0:f3:cc:64:5d:5e:9c:
                    aa:7d:0f:15:37:5f:94:8a:5f:0a:ea:33:e9:c8:2c:
                    c5:c8:8b:17:9b:71:a5:e4:41:72:ec:ae:14:ea:ee:
                    33:76:e7:a9:5e:cb:ed:d4:ca:c1:bc:a0:fd:13:b7:
                    2c:de:3f:20:c3:74:01:1f:94:f1:cd:f7:0b:03:5b:
                    59:5d:f2:b3:90:f3:c6:85:ac:70:4c:52:c0:7c:f7:
                    b9:ff:76:f7:05:7a:8f:b6:dc:75:f3:fe:6d:1a:a5:
                    8c:30:96:21:df:ea:55:9e:76:73:24:46:0b:52:c8:
                    04:f8:b8:15:28:aa:0c:db:07:b4:68:bd:d5:85:cf:
                    fd:7d:b6:8f:7b:2b:27:4e:97:4a:cd:d5:67:e8:fb:
                    e3:0c:2c:6e:62:ca:dc:26:20:ba:b8:3f:9e:a5:c5:
                    a5:ac:66:fa:4b:30:a7:16:2b:9c:a3:bb:91:ed:b5:
                    39:16:f2:63:7a:10:4d:39:54:36:1a:a6:ce:46:2f:
                    e8:30:e8:1f:3f:15:f5:90:0c:5a:a4:6b:5d:c9:8e:
                    13:07:63:fb:32:05:10:75:55:80:cd:f8:0f:32:5c:
                    ee:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7B:EA:2B:5C:04:B4:0E:E4:9B:55:BB:94:DA:49:4A:49:A9:D4:86
            X509v3 Authority Key Identifier:
                keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:84:5a:4d:48:34:96:15:41:c4:5d:92:c7:d6:6f:08:21:b4:
         89:b1:09:25:a8:1e:7e:85:e5:17:44:50:8e:e8:8b:67:c1:ca:
         6a:47:de:cc:d6:73:b3:89:72:d2:39:a9:8c:8c:00:8c:01:b2:
         92:68:0a:44:6d:db:dd:df:cf:d6:94:84:40:a0:ee:ba:44:3f:
         d8:38:26:24:6d:d5:20:24:d7:1e:af:b0:30:e3:ab:32:19:86:
         8c:0b:f1:10:73:0b:11:a2:f6:40:f7:29:8f:94:9e:0c:c5:64:
         a1:37:ca:0b:77:4d:86:39:0d:2d:c5:28:f1:10:7d:3c:60:89:
         f6:c7:f6:86:b1:53:8a:d2:7a:09:a5:8a:9f:35:d2:35:8c:4c:
         ed:24:4f:5a:72:4b:3f:99:d4:ec:84:c4:47:e7:ed:0c:1d:f6:
         61:e4:b8:77:cb:1b:77:1d:56:af:79:40:4c:8f:7a:27:36:e3:
         02:d7:7a:79:4b:cc:2b:40:77:c1:3a:54:a9:43:90:25:c7:de:
         7a:dd:06:13:a9:b8:1b:1b:a2:dc:0b:f6:87:fa:55:e5:36:89:
         aa:e6:3d:58:ec:99:79:e9:b2:16:e7:36:18:4a:9c:3e:97:a1:
         af:11:08:02:d7:c4:81:9c:21:a9:0e:b1:a8:36:7b:00:d9:7c:
         01:41:07:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 09:22:13 2026 by rpki-client