Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File:                     WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier:          qnKt66uiBUyB76dMNAj4I3LlZ5hg9uSAkSY6K/OBD40=
Subject key identifier:   27:11:A1:C9:5B:B9:0F:B2:3B:D9:7A:20:B1:69:B8:83:E0:68:41:6E
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer:       /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial:       019CE5FF88158C96D9668822C3C270E204F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number:          1868
Signing time:             Fri 13 Mar 2026 07:00:54 +0000
Manifest this update:     Fri 13 Mar 2026 07:00:54 +0000
Manifest next update:     Sat 14 Mar 2026 07:00:54 +0000
Files and hashes:         1: MbmOe617Beb8ehTTf8MQ_smqn_o.roa (hash: 1oDwnPrpmz2JYgXg/Xbn/cWn31YRvP1U3oEbkfTev+U=)
                          2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: /1VjGxQzdkJU+LzWWUToFOGWVhlSasRHxSjFpsZRTtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:ff:88:15:8c:96:d9:66:88:22:c3:c2:70:e2:04:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
        Validity
            Not Before: Mar 13 07:00:54 2026 GMT
            Not After : Mar 14 07:00:54 2026 GMT
        Subject: CN=2711a1c95bb90fb23bd97a20b169b883e068416e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0d:00:7b:da:51:02:2a:e2:21:3e:cb:3e:68:
                    a9:d9:e3:46:29:bd:8b:2d:b5:fd:90:fd:3c:eb:4c:
                    a1:f4:6b:3e:6a:54:31:5b:56:9e:62:13:7b:09:b5:
                    ad:a2:54:37:04:93:de:a7:bc:25:bb:12:8f:92:50:
                    4f:85:1d:7a:b9:64:48:c3:e5:28:fe:59:0c:02:ef:
                    37:c4:ff:9a:ec:fc:a2:28:7c:53:84:d2:8b:13:0d:
                    32:de:64:9b:13:3c:2e:92:57:28:c7:69:d3:db:49:
                    8c:b8:09:2f:e9:4e:05:cf:07:a7:d2:b7:9e:24:0d:
                    1c:c4:3b:0d:72:c4:08:62:55:a8:f7:6f:b3:4f:d2:
                    9d:6b:46:81:7a:35:a2:1e:2c:e0:c1:59:71:9b:4c:
                    40:51:30:6b:df:7d:13:74:cd:ec:64:ee:61:0e:84:
                    2a:9d:ef:55:cb:a9:fa:e9:0c:b0:a4:a4:ea:c8:8a:
                    cc:95:06:79:ee:09:f4:60:d4:5e:37:7b:28:c6:81:
                    c4:80:93:d9:6b:98:40:de:ae:83:ba:18:4e:5f:87:
                    b6:d7:d2:12:c4:61:9e:b3:df:cf:a8:d4:cf:1e:55:
                    d4:63:87:f5:79:89:d7:e9:21:b4:d6:d3:77:1d:d2:
                    10:23:11:cc:14:da:1b:54:ad:00:08:81:6d:a0:ed:
                    40:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:11:A1:C9:5B:B9:0F:B2:3B:D9:7A:20:B1:69:B8:83:E0:68:41:6E
            X509v3 Authority Key Identifier:
                keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:47:d3:00:b8:34:29:f1:6e:08:0a:92:e9:75:4e:c0:12:7d:
         f7:c4:52:79:a3:d6:16:18:f6:a9:23:87:a7:b7:70:48:e6:15:
         d0:f8:a6:be:db:32:05:94:7c:4a:c6:b3:98:4f:9d:84:4b:4c:
         dd:b6:9a:74:df:78:2c:eb:ba:8b:dd:80:3c:c0:2d:e1:09:32:
         93:0a:e2:55:47:58:a7:35:a7:d3:e6:14:89:f4:e0:34:0c:89:
         61:75:8f:51:a1:5a:51:dc:92:54:1e:45:55:ef:f4:c6:5d:50:
         24:23:05:32:35:4a:bb:79:85:bf:33:7c:b0:32:e7:e7:59:d6:
         cb:4c:a1:16:60:25:3f:40:91:ed:fd:66:5e:cc:84:93:c5:71:
         57:63:93:c8:71:a3:c1:c3:76:1b:b3:7b:8d:c9:47:af:fd:e2:
         42:5a:21:fb:61:02:64:07:06:90:cb:f6:4d:45:5c:0e:05:58:
         94:05:61:de:49:35:0c:29:0f:9d:bc:10:c3:a9:5b:0b:8f:cf:
         63:33:76:bf:99:4c:44:c3:54:85:f1:2f:60:e3:d7:41:d5:88:
         da:13:9d:27:7e:5c:98:7b:d9:4d:c9:6c:99:af:65:c8:40:74:
         ca:86:10:0e:6b:d7:29:7e:93:0b:dd:ac:20:50:2b:45:5b:f0:
         d1:f8:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:18:38 2026 by rpki-client