Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
File:                     wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft (raw, json)
Hash identifier:          YLZPrcxAoktvGA/DjJaX0TPFpQoY6E4kQCfiyDn5Au4=
Subject key identifier:   EF:4E:7A:AB:DF:BA:DA:36:4A:C3:07:17:4B:FB:D2:EA:72:50:9D:74
Authority key identifier: C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84
Certificate issuer:       /CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
Certificate serial:       019CAB341258B028B1F16747A703EE1A6E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
Manifest number:          17D8
Signing time:             Sun 01 Mar 2026 21:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:42 +0000
Files and hashes:         1: 9pt5Bi5CAiW7TpMLmtUGaccMt8I.roa (hash: 77PFwHWJqDe9UTrzBkk6ZTKXRRD9iv6QhbadNXN0T+g=)
                          2: wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl (hash: /keHYqZSTiG65E/eO6OQi4BWyv7+Iex1KMNebTvCxtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:12:58:b0:28:b1:f1:67:47:a7:03:ee:1a:6e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a6e3b375e827ebd6e288d9e5532b3a1b684
        Validity
            Not Before: Mar  1 21:00:42 2026 GMT
            Not After : Mar  2 21:00:42 2026 GMT
        Subject: CN=ef4e7aabdfbada364ac307174bfbd2ea72509d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c0:89:4e:f2:61:23:93:8b:fb:9a:f5:59:b5:
                    a0:bc:33:5b:bd:b9:92:0a:09:7d:c0:75:70:6f:0c:
                    5a:dc:1e:3e:57:08:56:a2:df:94:7f:73:91:03:b0:
                    06:a8:b3:57:95:bd:76:1e:bb:f5:a8:ae:68:9e:78:
                    19:23:06:22:0f:28:69:60:0b:c9:88:bc:1c:ac:95:
                    cd:ae:87:ba:b4:07:53:eb:75:d6:25:1c:05:ae:36:
                    d7:a5:e2:a6:0b:cd:ae:04:28:4e:80:e7:0a:22:96:
                    20:7c:92:95:2e:01:94:40:f6:05:92:0d:4d:ef:00:
                    52:6a:54:9c:76:c3:5e:05:b9:0c:79:06:f6:8b:5d:
                    47:d5:ca:2d:ef:04:47:1d:75:8a:25:3c:70:d2:04:
                    a7:14:a9:95:53:cb:34:e7:7a:a5:9c:7f:0c:7b:20:
                    8a:b1:4e:79:41:b3:9a:e2:30:03:f7:9c:93:bd:46:
                    37:47:69:30:54:86:f3:5a:aa:7c:2c:38:7e:1b:ca:
                    75:69:24:23:d2:61:91:b9:c0:a5:35:f2:92:5d:57:
                    0d:f8:be:4b:c4:f2:39:8f:09:b6:95:25:09:55:21:
                    a6:a6:0a:44:ee:09:41:c0:e2:af:ce:86:49:a2:7c:
                    b3:95:8b:fa:83:4b:ae:a1:4b:e9:d1:96:8e:3e:ee:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4E:7A:AB:DF:BA:DA:36:4A:C3:07:17:4B:FB:D2:EA:72:50:9D:74
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:6E:3B:37:5E:82:7E:BD:6E:28:8D:9E:55:32:B3:A1:B6:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/f916bc-29b1-4f09-83de-d544ac062d1f/1/wuJKbjs3XoJ-vW4ojZ5VMrOhtoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:2c:0a:2a:76:f5:ae:e8:59:bc:72:98:9d:0e:cc:fb:39:f3:
         8d:a6:8a:02:c6:09:5b:ca:bb:72:39:95:12:d6:ac:c3:73:e6:
         f6:7a:cd:3f:18:2a:fc:95:f2:c7:ae:65:7c:cd:15:ff:67:d5:
         69:2c:2d:25:39:03:4a:09:0a:4d:79:75:51:11:3c:a4:44:72:
         8c:9c:49:31:38:00:d3:88:59:18:92:67:bb:c2:f0:c5:56:c2:
         fe:eb:f8:54:2e:f7:b2:53:af:9b:76:a5:2b:68:6d:d2:7f:17:
         5f:a9:88:9b:71:e9:9a:f2:14:b5:45:2d:a5:e7:24:b8:b4:d5:
         d3:d0:26:13:4b:49:84:f9:89:dd:31:12:4a:30:4c:10:72:f1:
         88:56:4e:ad:66:c9:c9:58:7b:00:6b:ac:16:e2:82:53:41:da:
         39:73:b9:e7:23:61:d8:57:b8:ce:af:6b:02:db:85:9a:9a:c0:
         b2:d6:e6:6c:c7:16:94:44:19:aa:27:76:bb:f1:8d:45:02:19:
         fc:2c:9d:f0:af:60:cf:76:0e:b0:71:2d:50:87:97:1c:98:b2:
         12:9d:4c:ce:e2:01:74:b0:91:7b:45:78:55:82:70:07:56:17:
         23:7e:2f:14:ca:78:f4:4d:45:3f:e4:0c:1a:da:f1:26:5d:12:
         b9:5b:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:56:54 2026 by rpki-client