Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          niJl7b4CvPGDtoskmVv0yeBBlHVorUsfh9BFHPakspg=
Subject key identifier:   F2:56:BE:DE:BE:11:FA:88:A6:C4:63:B4:56:75:46:92:30:04:6E:DB
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       019CAA21A04C9778E6D92AA15E19C264F4BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 16:00:56 +0000
Manifest this update:     Sun 01 Mar 2026 16:00:56 +0000
Manifest next update:     Mon 02 Mar 2026 16:00:56 +0000
Files and hashes:         1: 80PdpdaZu0agDCN9RQnDf0bgfeU.roa (hash: DH5ZQA3PWXrg29JH5F4jHegGPMYQINXJvtbDzJXlSLo=)
                          2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: rhh+HrVXPWB/jvd0V3YrtyN3Uv7ZNPVNqEVOqzZUKbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 16:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:a0:4c:97:78:e6:d9:2a:a1:5e:19:c2:64:f4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Mar  1 16:00:56 2026 GMT
            Not After : Mar  2 16:00:56 2026 GMT
        Subject: CN=f256bedebe11fa88a6c463b45675469230046edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:10:f0:ec:43:8f:44:63:2b:cd:ac:9a:2d:d1:
                    3a:55:7a:53:e2:e5:cc:ad:28:20:b2:53:1d:49:73:
                    26:0b:49:c0:86:15:a6:5e:86:a3:a6:97:ab:66:f8:
                    1e:96:b5:4a:7a:10:0e:8b:c0:92:6e:85:39:db:d4:
                    4e:de:82:42:aa:2e:d3:5f:b4:49:43:6e:11:86:69:
                    85:ac:c9:e0:bc:b6:78:21:cf:84:37:9f:b2:ca:21:
                    73:1c:5a:fc:8e:c2:f7:2a:2c:3e:06:8b:b4:f1:d1:
                    f2:43:3d:ec:33:eb:dc:86:9e:a0:e7:65:c9:50:4f:
                    12:02:b1:48:b0:f3:98:0e:50:ae:81:4f:08:79:e8:
                    a7:f4:54:20:c5:8e:b1:12:71:5d:ae:38:47:46:7b:
                    6e:3f:50:8b:0d:4d:e1:db:b7:45:22:b6:df:2c:4d:
                    41:66:42:81:34:b6:8a:b0:99:e6:8b:40:3e:bd:0e:
                    de:16:9a:c3:eb:d5:a9:74:c8:30:4f:99:7b:c2:aa:
                    e9:3d:90:0e:9a:db:43:41:c2:34:2a:f4:77:3c:39:
                    5b:6a:f5:fa:9c:80:64:37:1f:57:72:dd:9c:1e:d6:
                    75:93:94:b7:9b:94:71:de:5e:a8:59:28:23:64:69:
                    f7:a6:38:34:f8:a7:2c:9b:84:39:3d:0e:c4:9e:2b:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:56:BE:DE:BE:11:FA:88:A6:C4:63:B4:56:75:46:92:30:04:6E:DB
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:cd:d2:ab:38:cc:d6:e0:89:2f:ad:8b:3f:50:7b:4c:05:a2:
         0b:8d:4e:2e:0b:34:31:04:40:f4:5a:9d:69:3e:9f:a2:31:89:
         d5:3a:78:47:a1:df:13:2b:8b:87:0c:2f:73:9f:d3:5d:bd:76:
         ce:9d:1f:f7:e3:06:1f:3d:6e:9b:c6:94:8a:cc:76:40:89:0f:
         bb:3e:9b:7c:a0:8b:ba:ac:0a:a6:b7:79:f0:a4:01:46:f0:c4:
         b3:81:21:ab:bc:a2:b0:9c:e9:93:76:96:30:b3:60:88:1c:66:
         e6:4c:8f:f3:f8:0a:df:34:23:5a:ff:e4:e9:ad:78:9c:d6:92:
         9c:e4:47:aa:15:af:13:82:99:7c:24:31:f2:dd:10:9c:c5:25:
         79:33:f2:60:38:b7:55:d2:9a:61:a9:60:b1:0f:62:b8:f2:4c:
         ba:63:1b:da:d3:59:91:37:6b:aa:e4:24:d4:c3:fc:63:60:90:
         f7:9b:be:27:f0:3e:35:c9:01:9b:79:1b:72:01:be:b6:c8:30:
         de:8b:8d:05:de:fe:d9:6b:b8:e3:ee:e8:39:e5:34:af:2a:52:
         66:75:c1:fa:39:63:c7:40:34:ca:20:ef:74:b1:16:d7:6d:15:
         73:9a:f6:bb:e5:a4:f8:49:ad:24:3a:16:18:29:35:b0:1b:4b:
         f4:44:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:15 2026 by rpki-client