Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
File:                     W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json)
Hash identifier:          ghZtBHOR+o7fA1AC+6j+HFNIZZpJSASGOmWx0aQYfUI=
Subject key identifier:   18:EC:9B:23:FD:C1:A5:A9:02:9A:7C:8B:8A:24:0B:78:2D:5C:E3:3A
Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D
Certificate issuer:       /CN=5bbd69d998484c139fac1265a645745f3333cf1d
Certificate serial:       019CAB6B2D079B1A8E7FF5654F3CC1913019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
Manifest number:          1844
Signing time:             Sun 01 Mar 2026 22:00:53 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:53 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:53 +0000
Files and hashes:         1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: mdMGS0z+mP5+lHQVEMovxmPM0KBmwpgQbBKpHxUYHhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:2d:07:9b:1a:8e:7f:f5:65:4f:3c:c1:91:30:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d
        Validity
            Not Before: Mar  1 22:00:53 2026 GMT
            Not After : Mar  2 22:00:53 2026 GMT
        Subject: CN=18ec9b23fdc1a5a9029a7c8b8a240b782d5ce33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:24:71:3e:2a:68:8f:ee:42:52:5a:47:8d:7c:
                    43:dc:f1:41:11:3b:f1:09:50:f2:29:7d:ab:68:cd:
                    97:c5:4d:d9:32:f2:77:46:9b:c6:b6:88:0e:d3:cc:
                    0f:a6:e5:ce:fa:e7:8a:58:9f:8c:01:a6:e1:69:69:
                    4e:51:4d:0f:2f:e3:d7:3b:da:89:03:6b:6d:f7:99:
                    22:e5:37:d3:b1:c9:f9:05:70:4e:ed:dc:f8:da:45:
                    1d:fd:6b:45:06:e6:46:0f:9a:f4:6e:e6:ab:b7:e1:
                    7e:78:13:03:62:5f:b1:02:f3:6a:fc:46:b7:ff:85:
                    fc:c8:93:b2:92:14:9e:56:fa:62:83:53:1c:dd:9d:
                    c0:6b:65:87:b4:a8:46:b4:a1:45:ea:25:86:72:7c:
                    0e:4e:43:d0:f5:06:13:8e:5c:46:78:c9:67:de:47:
                    75:df:c5:59:65:29:6a:a5:7a:01:bf:d2:58:6a:ca:
                    9f:b7:6f:62:e4:7a:9e:11:65:31:ad:08:63:1e:aa:
                    d3:99:a9:1b:fe:18:6c:f0:76:b4:94:51:3f:e8:3f:
                    de:39:7c:04:7e:6a:99:f7:e0:a8:67:c4:db:d2:c4:
                    50:1a:ae:04:dc:38:fe:91:b6:36:e9:bd:47:c3:3b:
                    20:0f:75:f3:71:9e:54:36:d0:de:b9:9f:bf:74:5d:
                    d5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:EC:9B:23:FD:C1:A5:A9:02:9A:7C:8B:8A:24:0B:78:2D:5C:E3:3A
            X509v3 Authority Key Identifier:
                keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:43:54:e3:84:88:3a:80:1f:90:59:1b:99:f1:8d:5f:0c:16:
         5d:97:46:bb:1f:c8:ab:32:c3:c7:6c:e1:ac:61:79:a3:18:84:
         7f:03:66:21:de:f5:04:19:7a:b9:37:a6:a2:e9:05:74:1e:63:
         31:ee:f6:94:12:af:41:df:5c:46:84:79:d6:4b:ed:97:9b:0d:
         5e:2a:c1:96:5f:bd:03:ae:08:81:d0:7a:29:bd:82:11:e6:58:
         e6:f2:46:b6:17:c2:d2:d2:89:d2:d3:11:62:66:43:3c:c0:0b:
         2b:3d:cd:ed:61:67:8f:3a:1d:9f:d5:67:ec:17:09:02:55:61:
         a1:2f:35:1f:ab:e7:5a:07:25:c3:85:ab:45:f0:d8:78:f3:e8:
         70:80:d8:a2:33:5a:f2:6a:c3:b0:16:1f:d6:fb:bf:c1:5e:89:
         22:a6:8d:97:67:da:f8:64:db:f7:95:1a:10:0c:3a:42:f2:cd:
         a5:b7:55:f3:a0:27:ae:f2:8e:16:77:3b:f7:94:e8:58:b3:a7:
         6e:5c:fc:75:b5:61:2d:fb:e5:84:71:1e:05:1f:72:bb:b9:4c:
         db:0e:8e:0a:00:6d:6c:6e:99:9b:c6:25:b4:8f:64:b6:dc:d3:
         d6:42:f2:ee:8b:43:fa:45:0b:3b:a7:71:3b:5a:72:2c:bc:c3:
         5e:33:6e:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyray0HmxqOf/VlTzzBkTAZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYmQ2OWQ5OTg0ODRjMTM5ZmFjMTI2NWE2NDU3NDVmMzMz
M2NmMWQwHhcNMjYwMzAxMjIwMDUzWhcNMjYwMzAyMjIwMDUzWjAzMTEwLwYDVQQD
EygxOGVjOWIyM2ZkYzFhNWE5MDI5YTdjOGI4YTI0MGI3ODJkNWNlMzNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCRxPipoj+5CUlpHjXxD3PFBETvx
CVDyKX2raM2XxU3ZMvJ3RpvGtogO08wPpuXO+ueKWJ+MAabhaWlOUU0PL+PXO9qJ
A2tt95ki5TfTscn5BXBO7dz42kUd/WtFBuZGD5r0buart+F+eBMDYl+xAvNq/Ea3
/4X8yJOykhSeVvpig1Mc3Z3Aa2WHtKhGtKFF6iWGcnwOTkPQ9QYTjlxGeMln3kd1
38VZZSlqpXoBv9JYasqft29i5HqeEWUxrQhjHqrTmakb/hhs8Ha0lFE/6D/eOXwE
fmqZ9+CoZ8Tb0sRQGq4E3Dj+kbY26b1HwzsgD3XzcZ5UNtDeuZ+/dF3VGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBjsmyP9waWpApp8i4okC3gtXOM6MB8GA1UdIwQY
MBaAFFu9admYSEwTn6wSZaZFdF8zM88dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAt
Y2ZhOTczODRiYzlhLzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAtY2ZhOTczODRiYzlh
LzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ENU44SI
OoAfkFkbmfGNXwwWXZdGux/IqzLDx2zhrGF5oxiEfwNmId71BBl6uTemoukFdB5j
Me72lBKvQd9cRoR51kvtl5sNXirBll+9A64IgdB6Kb2CEeZY5vJGthfC0tKJ0tMR
YmZDPMALKz3N7WFnjzodn9Vn7BcJAlVhoS81H6vnWgclw4WrRfDYePPocIDYojNa
8mrDsBYf1vu/wV6JIqaNl2fa+GTb95UaEAw6QvLNpbdV86AnrvKOFnc795ToWLOn
blz8dbVhLfvlhHEeBR9yu7lM2w6OCgBtbG6Zm8YltI9kttzT1kLy7otD+kULO6dx
O1pyLLzDXjNuSQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:40:49 2026 by rpki-client