Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          WifOgnyGeicFnETYhLFR0/XUZwlwPnUUGVRosEf/fEA=
Subject key identifier:   C3:E9:7B:71:8D:B9:61:25:75:9F:4F:1E:F3:5B:00:F8:93:ED:7D:0E
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019D394176C7490064AE021B88CCB12F3927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          130D
Signing time:             Sun 29 Mar 2026 11:01:24 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:24 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:24 +0000
Files and hashes:         1: 0Y8N1-0fJLBE_HY8U_P2_6WVc1w.roa (hash: +jTSNuKfxuCvHo1F5dM5RaYN/hFX2mIW99lx2JVtRD0=)
                          2: kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa (hash: oKX1XUar7ntV2+pEAw7ilC7z6D/uvm342LvGsth66is=)
                          3: loJlqq3qXuCu-dkSIlY72SrCnbU.roa (hash: 5OLtUAD6inbOq/tzv2K1YJFeXJFtMDnKAXlws3rJ/lw=)
                          4: ryDpy6cdN2x4PxzZve738-RUKps.roa (hash: 7P6XIPn0h99li8ImXCuSS48Xd7ty7D1xcOSjTfq3Khg=)
                          5: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: vAoMZ41yE4MEfC1YMVOIESacmHBJf3WZ6kd1XfpbZCc=)
                          6: xF6DSfpWjHY3DSnY4quSmS7ktcA.roa (hash: odbQ9fjuabZiW5G2VLqBK8Bk/nuyTPF9z/+wCBqDPfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:76:c7:49:00:64:ae:02:1b:88:cc:b1:2f:39:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Mar 29 11:01:24 2026 GMT
            Not After : Mar 30 11:01:24 2026 GMT
        Subject: CN=c3e97b718db96125759f4f1ef35b00f893ed7d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ad:d8:ed:87:40:e1:c4:47:77:f1:8c:ea:2d:
                    69:65:67:37:d0:1e:7d:0e:41:39:c0:74:bb:1e:6e:
                    ad:7c:da:7c:47:93:c1:16:1e:4e:6b:cf:e4:76:42:
                    2e:5a:ef:4f:33:b9:8d:71:f0:d2:f5:0e:6c:0c:ac:
                    9d:82:cc:d8:b2:ef:2a:de:02:82:a6:2c:4c:86:32:
                    30:8a:93:1a:74:42:87:fb:b8:ba:c7:21:1c:be:5a:
                    cd:ee:4b:d1:69:c1:bb:ac:2e:25:08:ab:85:1d:21:
                    46:20:58:8e:46:e7:5a:1e:7c:6d:2c:8c:23:20:3a:
                    0a:33:d9:ca:ff:da:39:ee:61:e0:f4:89:4a:02:fa:
                    42:94:c1:d8:f8:0d:97:63:dd:e4:3e:20:6e:3c:01:
                    a0:bb:23:9d:42:e6:ba:1c:63:98:e6:8b:7f:a5:81:
                    6c:b2:6a:97:c0:64:35:66:4e:0f:c4:33:4a:89:fe:
                    cf:32:70:52:bc:ed:94:50:04:61:67:b7:20:8c:5d:
                    6d:a7:f4:3f:21:d1:4d:c1:ab:81:eb:25:de:63:45:
                    4f:8d:3c:bd:0a:8c:eb:30:6a:bb:57:b2:1e:98:34:
                    86:a3:1d:d0:73:ae:41:11:88:4d:91:3f:ce:16:96:
                    f2:66:96:50:6b:86:63:31:e6:01:02:c4:18:9f:f9:
                    bb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E9:7B:71:8D:B9:61:25:75:9F:4F:1E:F3:5B:00:F8:93:ED:7D:0E
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:05:85:cb:a6:92:b9:6f:50:14:c2:9a:0b:59:38:dd:c2:39:
         81:af:87:c1:4d:50:6a:8d:00:9a:e2:7c:55:48:91:78:7b:f0:
         60:45:e9:84:2c:95:fd:e4:26:0a:15:24:bb:db:5f:7a:23:13:
         84:b8:eb:58:91:bd:2d:37:26:74:97:80:fd:39:e4:46:06:d9:
         80:f7:4a:bc:b3:41:d9:74:dd:17:23:93:55:08:42:1b:d9:15:
         e8:9a:68:6e:64:33:43:29:a6:02:3a:1a:24:5c:68:b8:e8:75:
         1f:d9:4b:73:f4:90:0a:61:ab:ce:af:83:10:29:a6:a0:8e:b2:
         1c:ee:90:13:85:eb:f0:01:76:a2:bb:8e:60:12:35:fe:81:67:
         68:12:c4:c7:77:3f:04:c5:db:14:5c:b1:90:4a:32:2a:c0:5b:
         c5:c5:06:32:63:b4:6f:1a:78:da:fd:62:3a:ab:3d:d1:ff:4f:
         33:f2:83:3a:21:c9:d8:ec:8b:78:08:34:37:7c:ad:43:06:ff:
         b0:1f:02:1d:7a:c5:d0:0e:cc:c0:2d:e1:d4:ef:cf:96:4b:c0:
         95:fe:7d:e8:d0:5f:86:ae:ac:63:99:af:f1:2d:79:27:c3:fa:
         33:cd:cb:6b:74:8e:e0:f2:47:a8:c5:14:72:01:27:36:e9:7a:
         6a:75:1b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:38 2026 by rpki-client