Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
File:                     ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json)
Hash identifier:          nOMeHwZL/fc2aNg8jhphA4mfqpPrIFnVsvQdI9DDnVw=
Subject key identifier:   F9:92:14:F7:1A:89:C2:B5:E2:85:C8:5E:8D:20:34:F1:DE:6D:85:04
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Certificate issuer:       /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial:       019D389C1876216D43752EDB0E4392D2C38A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
Manifest number:          06F8
Signing time:             Sun 29 Mar 2026 08:00:47 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:47 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:47 +0000
Files and hashes:         1: gcIF_hdGqJ7_cAl4qBgM1TlFs_g.roa (hash: lNPpPOHEC/zdLkM4NKZLlqoEpC2gYzrZ7YoVYNwOZZs=)
                          2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: JsruwZbPMiuaoAg9qlLT0F+AdDPyF16HcJ96m7Uqrw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:18:76:21:6d:43:75:2e:db:0e:43:92:d2:c3:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
        Validity
            Not Before: Mar 29 08:00:47 2026 GMT
            Not After : Mar 30 08:00:47 2026 GMT
        Subject: CN=f99214f71a89c2b5e285c85e8d2034f1de6d8504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:74:48:61:cd:90:ac:91:7d:50:33:9b:cc:
                    8e:16:18:10:fb:a4:f0:39:c0:88:fe:dd:17:88:6d:
                    f2:9e:2f:e9:76:dc:c8:b4:17:35:77:c5:f1:b3:ac:
                    84:c0:64:43:eb:4f:d5:69:d5:42:94:19:36:2e:0f:
                    6d:e3:0e:05:19:3f:13:ae:08:1f:e6:85:84:24:08:
                    c6:77:86:1f:35:0b:19:70:ea:a9:98:d6:41:45:dc:
                    f6:ea:e9:86:f5:76:ad:ac:93:82:8a:d5:e4:51:7c:
                    fe:6f:db:08:ae:84:31:88:a4:56:99:71:9b:02:41:
                    c3:20:94:3a:82:74:48:f2:5a:52:86:fa:9b:b3:5e:
                    90:e6:4f:27:b2:31:97:20:fb:e6:7d:b7:4b:41:ff:
                    1b:b8:e2:67:d0:69:73:36:15:74:ec:77:ec:9f:b8:
                    bc:a9:08:34:3e:e2:29:de:63:8c:df:4f:ff:b1:46:
                    87:96:1e:3e:35:27:59:52:fc:0a:ba:b6:31:55:9e:
                    62:6b:19:82:aa:9b:51:86:64:7f:25:16:8f:9a:1e:
                    34:44:59:48:fb:ce:d6:0f:eb:c3:4b:f6:66:0e:e1:
                    e7:b6:50:31:c9:35:82:87:35:97:7e:38:d3:1c:14:
                    63:c6:d5:73:70:27:d0:cf:d2:5f:d9:bf:04:0d:eb:
                    54:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:92:14:F7:1A:89:C2:B5:E2:85:C8:5E:8D:20:34:F1:DE:6D:85:04
            X509v3 Authority Key Identifier:
                keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e4:1b:8d:26:98:d0:da:14:b7:a5:c9:54:9b:e8:9b:ca:ac:
         4f:d1:c7:57:6f:69:ca:ca:67:c2:9e:9c:c8:d9:0a:b5:9a:a3:
         44:77:59:97:e5:4b:27:d5:d5:32:74:2a:dc:59:a4:1b:d9:6b:
         45:e1:86:0b:2d:93:6b:77:3f:54:96:73:1c:1b:bb:5d:d8:01:
         7f:60:fe:09:10:87:84:d5:aa:68:6c:ec:cd:31:22:9c:a1:27:
         0e:25:e5:74:f7:00:e2:b4:e8:7d:3b:26:c9:b3:7a:73:18:f1:
         41:a8:ec:01:99:65:d4:e1:fa:22:c5:36:23:77:89:d4:b7:b5:
         46:22:5c:d5:37:3d:d9:c8:bc:72:9d:d6:ec:92:b3:1e:01:2d:
         a5:a8:13:88:e2:53:ea:2c:8d:98:11:ae:76:ba:1a:da:06:07:
         69:66:98:26:d7:05:d0:ba:54:06:6e:70:06:4a:24:f4:08:29:
         9c:be:3f:38:c7:7d:72:1c:36:58:65:0c:90:a5:38:e6:ea:57:
         e8:85:96:40:c3:14:f8:12:98:6e:48:76:94:e7:61:3b:03:8a:
         3f:69:12:03:f4:ad:5e:8f:89:33:00:21:ae:13:7d:2f:e1:9b:
         8b:27:57:ff:04:5c:0e:d7:11:6b:a0:c3:e2:4e:aa:f0:97:f8:
         fa:3b:65:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nBh2IW1DdS7bDkOS0sOKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMGQwM2U2NDY3NmU3MjBhNGZmNTUxNzllMTk2ZmVjNjU5
MTg4NmIwHhcNMjYwMzI5MDgwMDQ3WhcNMjYwMzMwMDgwMDQ3WjAzMTEwLwYDVQQD
EyhmOTkyMTRmNzFhODljMmI1ZTI4NWM4NWU4ZDIwMzRmMWRlNmQ4NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6R0SGHNkKyRfVAzm8yOFhgQ+6Tw
OcCI/t0XiG3yni/pdtzItBc1d8Xxs6yEwGRD60/VadVClBk2Lg9t4w4FGT8Trggf
5oWEJAjGd4YfNQsZcOqpmNZBRdz26umG9XatrJOCitXkUXz+b9sIroQxiKRWmXGb
AkHDIJQ6gnRI8lpShvqbs16Q5k8nsjGXIPvmfbdLQf8buOJn0GlzNhV07Hfsn7i8
qQg0PuIp3mOM30//sUaHlh4+NSdZUvwKurYxVZ5iaxmCqptRhmR/JRaPmh40RFlI
+87WD+vDS/ZmDuHntlAxyTWChzWXfjjTHBRjxtVzcCfQz9Jf2b8EDetUYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmSFPcaicK14oXIXo0gNPHebYUEMB8GA1UdIwQY
MBaAFMMNA+ZGducgpP9VF54Zb+xlkYhrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3cwRDVrWjI1eUNrXzFVWG5obHY3R1dSaUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zMjlkNDEtZjRhZC00MTNjLWJjMDct
Mzg5NTNmOWFkMDU3LzEvd3cwRDVrWjI1eUNrXzFVWG5obHY3R1dSaUdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zMjlkNDEtZjRhZC00MTNjLWJjMDctMzg5NTNmOWFkMDU3
LzEvd3cwRDVrWjI1eUNrXzFVWG5obHY3R1dSaUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuQbjSaY
0NoUt6XJVJvom8qsT9HHV29pyspnwp6cyNkKtZqjRHdZl+VLJ9XVMnQq3FmkG9lr
ReGGCy2Ta3c/VJZzHBu7XdgBf2D+CRCHhNWqaGzszTEinKEnDiXldPcA4rTofTsm
ybN6cxjxQajsAZll1OH6IsU2I3eJ1Le1RiJc1Tc92ci8cp3W7JKzHgEtpagTiOJT
6iyNmBGudroa2gYHaWaYJtcF0LpUBm5wBkok9AgpnL4/OMd9chw2WGUMkKU45upX
6IWWQMMU+BKYbkh2lOdhOwOKP2kSA/StXo+JMwAhrhN9L+GbiydX/wRcDtcRa6DD
4k6q8Jf4+jtlGQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:07 2026 by rpki-client