Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File:                     WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier:          mV2H93WFW61CzjVBjA7vL41endTr4Hql2TfS8sT+8Ks=
Subject key identifier:   08:60:90:82:21:B9:9C:40:D9:39:0D:BD:D8:96:3F:75:47:5E:27:2E
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer:       /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial:       019D3753357CA4ACACD68F263EE55703C628
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number:          0D07
Signing time:             Sun 29 Mar 2026 02:01:33 +0000
Manifest this update:     Sun 29 Mar 2026 02:01:33 +0000
Manifest next update:     Mon 30 Mar 2026 02:01:33 +0000
Files and hashes:         1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: u6MvhPY1IJOL9SGb4w1o/NcspTAujrLwYJxUO03JcpE=)
                          2: el19n5VFJI2Td0uzZZckW_YpTo0.roa (hash: DpjOrLRCltZRLAqBNQKYh5WLON/qWjFe342eyMeNeHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:53:35:7c:a4:ac:ac:d6:8f:26:3e:e5:57:03:c6:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
        Validity
            Not Before: Mar 29 02:01:33 2026 GMT
            Not After : Mar 30 02:01:33 2026 GMT
        Subject: CN=0860908221b99c40d9390dbdd8963f75475e272e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:6a:2b:0b:9a:a1:f3:9a:16:3d:f6:83:9a:
                    c1:24:4a:ac:80:3c:5d:a7:fc:44:ff:f5:ac:de:18:
                    6e:d7:02:26:f0:79:86:39:c8:7e:b7:6d:e1:3a:96:
                    ba:5e:d9:38:2a:e0:cc:1f:84:46:95:ef:6e:f9:aa:
                    ee:e1:99:24:dd:92:69:bd:5c:80:1b:64:9c:bb:a8:
                    64:70:cf:24:dc:95:b8:c5:94:f9:54:69:ff:1e:61:
                    21:32:88:fc:73:d4:ed:f2:6f:1d:dd:af:29:b4:e1:
                    ab:ad:07:10:d7:02:5e:03:61:6d:18:bc:1f:57:15:
                    52:02:0d:a4:8b:15:8c:33:80:3b:b1:36:07:68:75:
                    58:20:a2:10:8a:f7:49:bb:a6:67:54:6d:61:91:6e:
                    b3:a4:82:5d:ea:59:b9:be:35:41:79:33:3c:0b:2e:
                    8b:28:0d:07:56:39:7a:00:e1:d4:6c:ed:f1:8c:ba:
                    20:d6:57:4b:fa:cd:63:9a:b0:2d:12:37:f2:2a:86:
                    d3:92:b5:3b:46:f4:7c:cb:ed:86:8d:5a:5e:19:12:
                    f1:55:47:69:92:9d:84:7c:31:1c:a4:0f:eb:6b:4f:
                    64:d5:20:f4:f4:7e:48:7a:8f:c5:c7:c5:7b:e4:ad:
                    f8:1e:b2:2e:62:ba:e4:60:d4:42:53:73:4a:85:13:
                    f5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:60:90:82:21:B9:9C:40:D9:39:0D:BD:D8:96:3F:75:47:5E:27:2E
            X509v3 Authority Key Identifier:
                keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ba:f6:ba:4c:d7:2c:10:26:e9:71:e0:75:70:44:80:5a:d2:
         26:d7:bc:80:44:23:b5:c0:33:fd:f6:af:09:9e:cf:98:e0:ca:
         43:51:57:b1:61:f2:30:52:a8:10:80:a5:bb:6e:5b:25:9c:83:
         ca:38:87:12:0a:b1:a7:7e:28:74:81:ae:08:1b:c2:7c:33:2b:
         ba:04:82:92:a5:54:7d:6c:c2:8e:0a:d5:07:b7:1d:1a:91:1a:
         f1:e1:92:04:f5:bc:16:4f:b5:f0:4a:6f:6c:08:fe:d5:67:da:
         2b:ed:3e:78:26:ce:24:9e:cb:8c:e0:79:c9:b2:61:83:3f:85:
         22:f9:c1:80:28:f2:2d:67:f9:e8:62:cb:75:c3:99:a5:b5:7a:
         c7:11:56:0c:72:6d:2b:82:6c:ce:8a:6b:15:26:b3:d6:e2:34:
         f0:f4:6e:c7:75:95:40:81:43:e4:b7:e4:a8:8e:4c:92:8a:5f:
         42:3e:70:21:72:3a:39:0d:69:70:d1:29:23:95:13:39:30:82:
         37:60:c8:29:06:79:e6:4e:6a:2b:8c:b6:13:f5:20:f9:98:6b:
         c9:8f:60:4d:f6:fd:ff:5a:11:ad:55:a5:dd:98:16:ae:ea:88:
         10:5a:3a:74:e3:83:a5:ef:11:7d:aa:7b:53:6e:31:9e:cb:4f:
         f5:75:3e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:41 2026 by rpki-client