Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
File:                     WoZV6_lEUAAlpfB1unveZBWE_aY.mft (raw, json)
Hash identifier:          dd+sOzfWaH13UtS/bNCKnXMNNhcUx4gp7xl5y80SYPQ=
Subject key identifier:   ED:02:BD:91:3E:16:04:E7:BD:0F:63:19:D3:C0:8C:A3:B2:10:27:FC
Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
Certificate issuer:       /CN=5a8655ebf944500025a5f075ba7bde641584fda6
Certificate serial:       019D390A29942D905C179C6A405C5CC8CAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
Manifest number:          1339
Signing time:             Sun 29 Mar 2026 10:01:00 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:00 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:00 +0000
Files and hashes:         1: OvRiWl6aJnMMAf_Y11cKpyWtrGs.roa (hash: acAc33rPF2ddnrrVmw/BW6ayY7XOhe80s7zul9nM5JA=)
                          2: WoZV6_lEUAAlpfB1unveZBWE_aY.crl (hash: Z2CEiDEiFKlQaiJzcd4O7HIVZUxpYllSixEwKgfobgY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:29:94:2d:90:5c:17:9c:6a:40:5c:5c:c8:ca:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6
        Validity
            Not Before: Mar 29 10:01:00 2026 GMT
            Not After : Mar 30 10:01:00 2026 GMT
        Subject: CN=ed02bd913e1604e7bd0f6319d3c08ca3b21027fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:6b:31:90:23:e6:eb:2c:59:cd:a1:f2:68:
                    04:50:99:92:89:df:9b:25:b1:96:a1:12:8c:7e:d4:
                    92:28:d0:74:a5:dd:f1:21:a2:1c:12:58:ab:88:80:
                    b0:c5:17:52:9a:0e:36:3a:3c:34:d7:6b:42:37:e0:
                    90:ec:67:c3:a0:e4:bf:31:f7:44:fb:8b:a7:bb:f0:
                    7d:5c:4d:73:c1:79:29:39:68:fd:70:4d:89:33:44:
                    e6:ae:88:6d:7d:f2:0a:0e:47:0b:8c:07:14:0c:8b:
                    05:55:13:48:16:e5:cc:bd:fa:05:33:9b:47:26:6f:
                    49:13:8c:ec:71:62:b6:7a:40:aa:a5:af:2c:74:54:
                    70:94:4c:9e:12:c8:be:0c:5f:cf:10:05:1b:48:14:
                    8f:b2:e6:e8:f8:13:05:c9:c2:c2:45:82:79:1d:3f:
                    b2:69:43:f8:0d:db:27:4d:70:ce:1f:df:83:e9:27:
                    79:8a:9e:ba:0e:e2:7d:3c:fd:6f:8e:4d:74:b4:80:
                    01:43:2b:60:a9:e2:03:e0:82:c3:2a:94:90:8c:4a:
                    15:16:61:b1:ad:5c:9a:24:cd:e1:60:13:96:30:d2:
                    ec:b3:42:2e:64:30:e1:34:c9:ca:80:be:c5:e4:dd:
                    e0:42:c4:3a:64:c4:13:80:46:2f:fd:89:05:9e:c5:
                    62:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:02:BD:91:3E:16:04:E7:BD:0F:63:19:D3:C0:8C:A3:B2:10:27:FC
            X509v3 Authority Key Identifier:
                keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:e0:8a:e6:21:06:a0:3e:76:c7:5f:eb:e9:0c:b8:d0:d2:bf:
         e3:bd:64:71:47:b0:ef:fb:d5:1f:f1:b6:c3:1e:74:27:92:b9:
         34:f2:d4:c8:dc:22:3c:bc:9e:16:55:56:5b:88:c6:f7:39:03:
         4e:56:a5:ee:67:d5:c0:c3:82:df:3b:b6:40:b1:29:91:ab:8d:
         b9:e8:c1:84:4a:6b:44:17:46:4e:f2:88:6a:8a:3a:ce:c5:37:
         79:d8:3d:e7:ff:dc:b4:87:33:14:ea:f1:13:c1:4e:b8:1b:47:
         a9:35:d9:51:c3:a8:63:31:23:1c:89:74:b2:e9:d1:16:41:f4:
         13:e9:ac:fb:3e:4b:a3:15:ca:05:ae:94:e2:f5:0a:ab:d4:09:
         aa:b4:58:a2:f3:1d:46:88:53:f0:86:ab:71:5c:cd:5f:be:ff:
         98:d1:ae:11:89:28:f0:8b:d7:58:d2:4a:c2:f9:20:ce:45:3d:
         03:b4:75:71:17:1b:89:d8:f9:aa:b4:ee:33:d1:32:68:5f:58:
         2e:92:a1:24:52:b7:1b:81:20:c6:6b:f0:6e:d0:51:42:86:5a:
         cc:dc:1f:e4:0e:9e:e5:8a:13:67:f7:f5:eb:36:81:d3:2f:87:
         b8:6f:49:f3:19:18:69:4b:0a:79:9d:1e:d5:7e:5c:76:15:71:
         fb:bd:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:05:34 2026 by rpki-client