Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File:                     1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier:          Hb4nhxotRFHFZSCQaQcsWxLX8Pebb+tjK1fDMYsRlRE=
Subject key identifier:   B0:F7:09:DD:3E:E1:23:67:B3:0E:2B:F8:30:08:68:97:BC:5C:34:CA
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer:       /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial:       019CACEB5F557D9AC6AAFCFFB7D2C5505681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number:          0355
Signing time:             Mon 02 Mar 2026 05:00:32 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:32 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:32 +0000
Files and hashes:         1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: hNm0bLafBKKVECwaMbw/j9E6iXQSAjRL+vx1Yp72yh8=)
                          2: Om8hYJFWIm8pdYISoMz7ReVcWUI.roa (hash: c7dJNXWNQCnqpXhattRk9ZyKNskwQkIBWvzcQA9kNBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:5f:55:7d:9a:c6:aa:fc:ff:b7:d2:c5:50:56:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
        Validity
            Not Before: Mar  2 05:00:32 2026 GMT
            Not After : Mar  3 05:00:32 2026 GMT
        Subject: CN=b0f709dd3ee12367b30e2bf830086897bc5c34ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:11:fc:34:5f:09:dd:af:59:b4:f4:68:89:7a:
                    55:33:e0:c8:29:b0:64:88:f6:5f:60:19:13:b9:20:
                    2a:3a:ad:18:29:fd:5d:bd:79:be:c8:f7:78:b7:09:
                    ca:2c:8b:f6:55:21:da:c9:31:04:3c:04:e3:87:44:
                    a0:77:cb:f5:aa:1e:fd:32:0b:01:ae:20:30:f5:6d:
                    18:7c:38:4d:dd:8e:1e:d8:2c:03:44:1a:30:40:15:
                    44:24:a5:33:c6:52:15:eb:5e:8d:e3:5e:e2:7e:18:
                    22:f3:49:e0:30:f4:96:c0:6a:80:bc:e2:2f:c0:db:
                    18:ab:20:52:ae:c1:52:9a:bc:08:4f:69:e1:51:ab:
                    32:7b:38:82:27:76:7b:35:6f:6f:13:ce:39:ca:ee:
                    7f:0f:8c:34:6d:42:ff:4a:69:a0:7e:8a:6a:59:e5:
                    47:b8:7f:db:30:5c:e4:71:de:0d:72:0a:20:63:20:
                    3b:26:ef:29:e6:50:ad:46:55:cf:67:57:4c:36:1d:
                    44:14:7b:27:2a:1d:9c:4e:11:1f:e3:d2:af:53:be:
                    ca:a3:2d:69:ae:d9:a2:0f:cd:c1:e6:86:44:22:fc:
                    52:0b:40:25:da:36:d7:b8:89:3d:68:cc:a0:4f:c4:
                    d7:65:95:82:3d:9d:8c:b2:03:48:40:99:0f:35:ea:
                    cf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:09:DD:3E:E1:23:67:B3:0E:2B:F8:30:08:68:97:BC:5C:34:CA
            X509v3 Authority Key Identifier:
                keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:90:c9:e0:04:c2:e6:44:a7:b9:3a:51:c2:a6:c5:0d:14:37:
         0f:ba:f5:44:66:2f:d6:17:1f:6d:09:ab:a6:5d:13:d9:85:d4:
         be:0a:ef:15:e0:a7:aa:dd:e4:7e:e9:70:b3:fa:eb:30:99:37:
         33:99:0f:58:dc:0f:cd:35:ea:b1:ea:54:5d:3a:fa:ed:ef:86:
         82:b6:1a:1e:67:1e:89:6a:bb:7c:5a:39:7f:95:04:d3:63:e6:
         2d:03:62:6b:82:94:42:ca:c2:6f:17:b7:1c:27:d6:60:e3:5e:
         ea:d3:7c:18:ef:db:c4:b2:5c:54:57:f2:c2:c1:ad:ad:c7:9b:
         68:f8:13:f3:0d:15:8b:3e:c8:9c:b9:0c:0b:4f:58:a9:4c:23:
         b0:55:4f:1e:35:d7:9a:12:2b:a2:da:6f:3d:52:e7:f8:aa:d8:
         25:51:ce:9a:c9:7b:de:59:8f:44:48:20:d7:13:f0:79:76:f0:
         1d:11:d0:38:eb:3b:6f:42:ac:9e:62:c9:8c:af:fa:37:1f:50:
         3b:20:a0:4f:c5:98:6d:3c:73:64:e2:1e:7f:69:7f:29:11:c9:
         cc:e2:d1:4b:8d:d9:87:17:51:c8:09:df:1f:a2:14:53:e0:ed:
         53:95:d7:11:b7:e4:55:0a:5c:7b:09:75:84:e4:04:6e:f1:ca:
         3f:5d:fe:5c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZys619VfZrGqvz/t9LFUFaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjBjN2FiM2M0YmNjM2ZjYTgzZTQ5MzMxNjc3YjQ0YmI3
YTk0NmYwHhcNMjYwMzAyMDUwMDMyWhcNMjYwMzAzMDUwMDMyWjAzMTEwLwYDVQQD
EyhiMGY3MDlkZDNlZTEyMzY3YjMwZTJiZjgzMDA4Njg5N2JjNWMzNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhH8NF8J3a9ZtPRoiXpVM+DIKbBk
iPZfYBkTuSAqOq0YKf1dvXm+yPd4twnKLIv2VSHayTEEPATjh0Sgd8v1qh79MgsB
riAw9W0YfDhN3Y4e2CwDRBowQBVEJKUzxlIV616N417ifhgi80ngMPSWwGqAvOIv
wNsYqyBSrsFSmrwIT2nhUasyeziCJ3Z7NW9vE845yu5/D4w0bUL/SmmgfopqWeVH
uH/bMFzkcd4NcgogYyA7Ju8p5lCtRlXPZ1dMNh1EFHsnKh2cThEf49KvU77Koy1p
rtmiD83B5oZEIvxSC0Al2jbXuIk9aMygT8TXZZWCPZ2MsgNIQJkPNerPvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLD3Cd0+4SNnsw4r+DAIaJe8XDTKMB8GA1UdIwQY
MBaAFPlgx6s8S8w/yoPkkzFne0S7epRvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XREhxenhMekRfS2ctU1RNV2Q3Ukx0NmxHOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEz
LTI2OTBiNTVmNTBmZC8xLzEtV0RIcXp4THpEX0tnLVNUTVdkN1JMdDZsRzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYyL2VlNDdkZS0zMzVhLTQ5OTktYjYxMy0yNjkwYjU1ZjUw
ZmQvMS8xLVdESHF6eEx6RF9LZy1TVE1XZDdSTHQ2bEc4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPJDJ
4ATC5kSnuTpRwqbFDRQ3D7r1RGYv1hcfbQmrpl0T2YXUvgrvFeCnqt3kfulws/rr
MJk3M5kPWNwPzTXqsepUXTr67e+GgrYaHmceiWq7fFo5f5UE02PmLQNia4KUQsrC
bxe3HCfWYONe6tN8GO/bxLJcVFfywsGtrcebaPgT8w0Viz7InLkMC09YqUwjsFVP
HjXXmhIrotpvPVLn+KrYJVHOmsl73lmPREgg1xPweXbwHRHQOOs7b0KsnmLJjK/6
Nx9QOyCgT8WYbTxzZOIef2l/KRHJzOLRS43ZhxdRyAnfH6IUU+DtU5XXEbfkVQpc
ewl1hOQEbvHKP13+XA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:17 2026 by rpki-client