Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
File:                     WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft (raw, json)
Hash identifier:          ZgmYSB1Hb6uRhWNyeBpRe0ESoBJKWlju4zKruVg44gE=
Subject key identifier:   08:2F:4A:3E:6E:E9:3A:82:8B:42:B0:B0:A6:0A:4F:6E:C1:1E:E0:64
Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A
Certificate issuer:       /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
Certificate serial:       019D38D317A13874A3D546E87C632E26A2E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
Manifest number:          08F4
Signing time:             Sun 29 Mar 2026 09:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:51 +0000
Files and hashes:         1: LCyWWE7WYBlWYXA9A8WiaxxbTU8.roa (hash: R6ey8Uqth1/igLWVfN/TR2Eu26hppMIiB0ByyHlPk3A=)
                          2: WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl (hash: r+CY0ZpezoSAU0ZwNk4BqnjjNHoZ31lCLlstRkBLqqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:17:a1:38:74:a3:d5:46:e8:7c:63:2e:26:a2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a
        Validity
            Not Before: Mar 29 09:00:51 2026 GMT
            Not After : Mar 30 09:00:51 2026 GMT
        Subject: CN=082f4a3e6ee93a828b42b0b0a60a4f6ec11ee064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:93:30:a9:1e:fd:fe:f7:af:87:d2:c5:b8:47:
                    b0:9d:25:a9:cd:e2:51:c2:10:78:db:85:ec:de:a6:
                    a2:c2:8e:7f:7a:91:e3:ad:07:b0:b7:b1:f1:73:29:
                    c0:a4:76:f4:fb:c4:3c:d6:c8:f4:9d:80:4f:c4:64:
                    41:07:82:2c:c6:d3:b2:f5:3b:64:f2:6a:69:7a:6d:
                    8e:44:16:cd:c6:b1:6d:67:2b:3e:c4:50:d8:e7:91:
                    09:d9:46:19:4b:bd:2f:40:e0:43:41:4a:ad:c7:fd:
                    c5:5c:1b:3a:0d:93:fe:04:9c:7f:04:fe:7e:9d:9f:
                    db:11:03:81:80:ee:a9:14:90:6a:0f:b1:dd:85:a4:
                    e5:68:ff:8d:df:64:95:70:b6:0a:e9:02:97:e3:20:
                    5d:b5:49:17:2d:86:c8:8a:03:25:2f:4b:e0:01:ad:
                    19:0a:d0:27:c1:1e:b0:7a:78:15:ed:71:ff:83:46:
                    18:0b:ce:cc:ba:d6:4a:ac:a9:09:79:72:4c:2f:99:
                    6e:52:6c:02:c9:04:2c:bb:eb:fe:26:ce:15:ef:74:
                    73:7a:11:58:1e:06:86:ac:ad:db:d8:2c:be:1f:1c:
                    5b:a5:2c:ff:91:12:bc:a8:f1:8e:92:81:bd:c5:48:
                    f6:6c:44:5a:22:9d:08:fa:72:65:31:74:56:a9:6c:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:2F:4A:3E:6E:E9:3A:82:8B:42:B0:B0:A6:0A:4F:6E:C1:1E:E0:64
            X509v3 Authority Key Identifier:
                keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:36:d2:7b:69:e6:2f:55:cc:25:f3:84:f0:06:1f:ac:24:c2:
         3e:92:fa:31:12:27:a3:03:c0:9e:a8:6a:16:bb:b3:5f:85:42:
         37:86:fe:64:45:3c:8c:f2:38:67:3c:ed:1c:24:dd:db:06:a2:
         e0:33:4a:88:84:9e:45:29:2b:6b:30:ed:af:78:15:6e:42:76:
         19:14:7d:51:8d:b1:86:fb:4e:9e:e6:8e:71:a1:7d:83:3b:89:
         47:69:d6:3f:81:9f:74:90:03:9d:b8:9a:67:a8:e9:a3:1f:c2:
         06:25:79:2a:b4:df:cb:47:a5:5d:96:c0:48:4d:44:50:29:b5:
         27:2c:d7:ec:3b:55:a3:aa:ad:8c:08:81:c3:7a:2f:c1:f0:75:
         32:f6:ea:df:13:73:06:28:3b:3c:3e:ed:be:cc:f8:c9:14:80:
         c0:96:6b:99:31:6a:b8:65:5b:5f:72:a4:eb:2f:e4:cb:6c:68:
         9b:ef:bb:1c:ee:95:97:63:8d:1d:ce:e9:14:47:db:19:a0:85:
         2b:fe:86:ba:b4:42:83:bc:2b:82:d7:f4:34:14:f6:c5:b2:e1:
         e8:69:4b:08:38:45:cb:7a:ed:44:d3:60:48:f2:63:28:80:37:
         d7:f4:d2:62:2d:c0:be:88:27:f5:fc:c1:b5:41:cc:1a:be:06:
         94:19:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:37 2026 by rpki-client