Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
File:                     W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft (raw, json)
Hash identifier:          ep4atzWz+KgPFX/J/1gns9mVFZWKkAA4rLwCBx0ypxo=
Subject key identifier:   F9:84:2E:FB:5E:F6:6F:1B:F6:48:87:F5:7D:69:49:C6:9C:A6:10:30
Authority key identifier: 5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7
Certificate issuer:       /CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
Certificate serial:       019CADC74F8814388F73A02BCC7D682AC1E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
Manifest number:          1847
Signing time:             Mon 02 Mar 2026 09:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 09:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 09:00:46 +0000
Files and hashes:         1: 7I_tBHWbfAuhzTjq3Gm1PNjx-Qs.roa (hash: 5q6vS67j1r66wMOA186QdQ7UBdZpaJwXyjVG+xm1Kqw=)
                          2: W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl (hash: aV8QSlApXZ37DZoepSTtNmqj0JYX6zMXcL1xhN8A47A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:c7:4f:88:14:38:8f:73:a0:2b:cc:7d:68:2a:c1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd3e848c58a6451ca874cdcfc37e9bc0f5d9ac7
        Validity
            Not Before: Mar  2 09:00:46 2026 GMT
            Not After : Mar  3 09:00:46 2026 GMT
        Subject: CN=f9842efb5ef66f1bf64887f57d6949c69ca61030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:23:15:5c:0b:8f:ec:b2:2e:c7:9d:79:cb:6d:
                    0d:e9:64:0d:89:bd:30:35:11:65:31:4f:90:a4:02:
                    c8:4c:17:b1:a5:b7:10:d3:96:52:e5:e5:f9:80:3b:
                    a0:96:60:d9:cc:d5:26:c6:62:81:f6:94:14:8d:d9:
                    b1:4b:03:b9:49:5f:43:a7:6c:a1:e5:3d:3a:83:50:
                    5c:fd:ba:2d:11:d4:c4:68:36:5b:dc:c9:19:69:ea:
                    da:4c:a5:d8:42:32:fe:dd:4f:54:16:35:59:2e:bc:
                    fb:1d:c4:61:ac:e4:f2:bd:06:9e:f1:7e:71:9a:af:
                    f5:4d:e3:73:69:1b:07:63:b9:8f:40:b5:44:e7:0c:
                    33:af:40:c0:ff:71:23:b7:69:1c:07:4b:c3:3a:d0:
                    84:3f:c0:17:7d:9f:46:55:80:2d:bc:cd:a5:5f:40:
                    62:e3:7c:8c:96:a6:9c:55:35:c6:87:ce:e5:03:77:
                    55:5c:c8:d5:6f:20:27:cd:2d:c0:cd:9f:6c:6d:2e:
                    b6:ac:af:c0:02:59:d6:ba:5a:59:dd:74:95:50:d0:
                    20:8c:43:6e:5f:de:1f:76:0a:1d:67:06:7a:14:97:
                    49:64:eb:36:e8:cd:4d:44:7d:ed:f3:44:57:e3:82:
                    b4:bc:ca:8e:5e:79:cf:07:7d:45:30:69:82:66:eb:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:84:2E:FB:5E:F6:6F:1B:F6:48:87:F5:7D:69:49:C6:9C:A6:10:30
            X509v3 Authority Key Identifier:
                keyid:5B:D3:E8:48:C5:8A:64:51:CA:87:4C:DC:FC:37:E9:BC:0F:5D:9A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9PoSMWKZFHKh0zc_DfpvA9dmsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0b87f5-e5d2-456f-abe0-484d4586ee7b/1/W9PoSMWKZFHKh0zc_DfpvA9dmsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:10:a9:f2:ef:88:27:6d:81:ef:38:41:9b:bb:93:7a:e6:f0:
         8a:e1:35:c2:70:d4:e7:28:86:8d:39:0e:69:cc:bb:23:92:78:
         04:64:aa:46:ca:2f:a2:50:ab:1e:bf:86:f2:ec:7e:20:e5:0d:
         fe:86:f1:35:ae:67:a9:4c:ef:59:ff:17:c9:dc:94:9f:ef:78:
         d2:ba:c5:57:a0:67:6d:89:ce:97:ba:db:0c:c0:67:6b:a2:db:
         dc:3c:8f:da:f6:06:23:83:9a:81:4a:b6:d4:2a:07:e5:ed:04:
         0c:3e:50:02:6f:a3:63:97:ff:5e:cf:7f:6b:95:41:32:5e:8c:
         f5:17:c2:d6:cd:8e:75:ae:37:c0:9c:e7:b8:19:52:bf:46:92:
         29:18:8b:99:33:48:21:67:c7:47:cb:f2:10:6b:ba:80:78:27:
         9d:40:44:6a:d9:a5:82:5a:54:6a:83:e3:e3:3e:15:b9:06:11:
         2d:03:d0:79:bd:94:06:2d:6e:1f:73:9d:9d:87:cf:27:3d:59:
         8e:f6:73:b9:3b:1b:bb:12:d7:4c:43:d0:19:45:5e:a7:0a:e7:
         8d:89:c7:19:a5:b7:ad:e6:1f:68:fa:c6:a5:a1:ba:da:81:4e:
         78:fb:1b:9d:11:6e:ce:a4:df:8f:c3:2b:ec:ce:67:6c:f3:46:
         22:cf:47:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:22 2026 by rpki-client