Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
File:                     iWaGG-V9NtX22dn46_YoF2FqIfU.mft (raw, json)
Hash identifier:          Zx06OB9h2xZRuxe+tNJ2oA3KMYVmj9ioUXS70EEvZIE=
Subject key identifier:   53:3C:89:CB:26:46:06:D7:37:3C:66:FA:10:D4:B2:C9:7B:B5:D0:61
Authority key identifier: 89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5
Certificate issuer:       /CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
Certificate serial:       019D371B20AB1801EC5E08C3FE5DFE646D28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
Manifest number:          0C9D
Signing time:             Sun 29 Mar 2026 01:00:17 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:17 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:17 +0000
Files and hashes:         1: ISG7wd6pLCoSiDnLQmoPtvGHwik.roa (hash: 8ye3uM7bxUh3STzMCoYVpX9YPeampsjAg7+ykblDc/0=)
                          2: iWaGG-V9NtX22dn46_YoF2FqIfU.crl (hash: fLzCsyuh7yTqwHObRiLLAuoOAwhe+cIOJvbk6udYlmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:20:ab:18:01:ec:5e:08:c3:fe:5d:fe:64:6d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
        Validity
            Not Before: Mar 29 01:00:17 2026 GMT
            Not After : Mar 30 01:00:17 2026 GMT
        Subject: CN=533c89cb264606d7373c66fa10d4b2c97bb5d061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d2:b7:63:e0:80:51:a2:1a:ce:07:16:7f:1f:
                    f1:98:f5:8a:b7:bb:d4:99:5e:24:74:54:c9:51:55:
                    7e:b0:ee:ca:0b:a6:62:ba:d6:08:4b:3c:b4:08:f7:
                    0b:85:27:ae:9e:93:c6:4b:cb:b5:95:dc:26:7d:ec:
                    e8:88:fc:72:b2:2e:d9:21:65:90:29:20:4b:32:4d:
                    aa:00:62:cb:96:f6:dc:f0:89:21:35:c3:5e:4f:b2:
                    9b:5e:29:1e:2b:2e:8c:ac:4f:c5:5d:9e:93:dd:ca:
                    85:46:e5:9f:81:af:e5:0b:12:7e:d4:da:43:8b:1e:
                    9c:64:10:eb:c9:bb:b2:7d:99:c9:60:75:ab:7f:ae:
                    3b:9d:40:1e:00:9d:3f:48:af:28:60:f8:9d:0e:a4:
                    dc:a8:68:85:79:e8:88:11:57:c0:d8:e9:df:f1:4d:
                    f5:92:29:6b:cc:c8:00:90:6b:5c:f4:74:8c:d5:d0:
                    e8:f3:46:d0:00:34:e5:62:fa:7b:f9:40:29:28:18:
                    56:46:18:f6:83:b8:f8:73:ad:fc:7e:f1:16:93:fc:
                    09:a0:ee:12:d1:93:0f:32:a7:c6:fe:8d:b2:56:3e:
                    57:23:35:f4:80:fb:66:37:70:88:23:74:c2:d8:87:
                    9e:05:8c:47:bf:b7:e2:23:96:88:19:7b:6e:fe:4f:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3C:89:CB:26:46:06:D7:37:3C:66:FA:10:D4:B2:C9:7B:B5:D0:61
            X509v3 Authority Key Identifier:
                keyid:89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:4d:8e:40:a9:d1:f3:0e:d7:7d:ff:56:69:45:ca:0c:c9:ad:
         6c:a8:56:f7:de:d0:5a:21:b1:3c:38:64:4f:22:fd:ae:a9:20:
         49:02:86:59:a5:72:24:ef:17:6b:db:e9:8f:ea:54:63:1a:3a:
         64:7e:c7:59:24:60:1e:74:75:2a:91:33:5c:0e:fd:5f:48:7c:
         de:bb:07:4c:5c:12:d7:4c:1a:60:a4:c4:c6:47:35:89:f9:86:
         23:90:c4:f8:a7:e9:44:39:c4:56:39:ca:ec:4d:fb:3a:2a:e9:
         66:d5:8f:a1:e4:05:5c:ea:a9:fe:dd:79:1d:68:98:05:ae:45:
         2d:df:cc:61:c8:e9:fe:37:3e:a8:9b:91:48:4b:cf:e0:56:32:
         27:28:1c:38:90:f2:6a:e6:37:7b:d6:b7:09:f3:f5:6d:35:cd:
         34:17:48:0b:dc:8b:50:f2:2e:d1:4a:16:ae:a7:ce:ae:c9:30:
         53:a0:1a:bc:e7:84:81:e1:21:e2:00:5c:13:57:f6:4f:8d:d0:
         5b:d0:a5:43:1e:ed:06:19:52:05:5c:8d:e9:cc:8d:04:f0:35:
         93:9b:e2:46:a2:0e:74:07:54:9c:ed:da:53:c8:fd:2c:52:7d:
         9c:27:c5:e2:cd:9d:bb:79:2d:ba:28:ec:94:f5:46:7f:66:d0:
         82:1e:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:05 2026 by rpki-client