Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File:                     wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier:          smGm2VKfqoVz6uO3FXe3Ce6B7Gv6Z+IKoOaL3JaUPXc=
Subject key identifier:   3E:47:F3:ED:23:25:CC:E4:AA:B2:1A:7B:16:BA:07:39:C5:A6:65:C0
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer:       /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial:       019CAEDA139809859EA1BF3B45571A26577A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number:          184D
Signing time:             Mon 02 Mar 2026 14:00:53 +0000
Manifest this update:     Mon 02 Mar 2026 14:00:53 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:53 +0000
Files and hashes:         1: KvzDHgVmpEkdkjHPk99sFJrY1zs.roa (hash: l/TyURMCTytuEA/n9GPaS9YbOV/gxZwZ/TqXXQqrbdc=)
                          2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: SPUf+w0HLvZLhaTrFm9X1RRQJdP428u4Ol3zntivdGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:13:98:09:85:9e:a1:bf:3b:45:57:1a:26:57:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
        Validity
            Not Before: Mar  2 14:00:53 2026 GMT
            Not After : Mar  3 14:00:53 2026 GMT
        Subject: CN=3e47f3ed2325cce4aab21a7b16ba0739c5a665c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e3:87:ae:a2:54:95:fa:09:98:0d:05:65:4e:
                    79:55:47:aa:cd:2e:fe:9d:b7:25:2e:24:41:31:48:
                    22:3a:53:0a:6f:15:b2:28:fe:ea:86:ac:cd:b5:a1:
                    55:b5:b8:f9:d6:3f:6f:76:ef:1f:b5:fe:a2:b5:49:
                    57:0d:62:33:a9:b6:16:ff:e8:8a:81:fb:b5:bf:59:
                    a6:a3:90:58:16:60:f0:08:5a:f0:0a:8a:b0:13:5a:
                    14:aa:21:7a:d2:3c:c2:55:1a:1c:ea:4e:1b:f6:60:
                    78:b0:43:c7:70:96:91:59:be:44:16:be:6a:c6:60:
                    99:c8:6e:70:13:ea:8e:d2:0c:cb:d9:85:22:a8:a5:
                    52:04:5a:cf:86:2b:07:a9:06:66:95:2d:e1:3b:d2:
                    be:35:11:5d:37:b6:6e:4f:6e:59:d0:22:19:0b:ad:
                    98:92:68:53:a4:1e:cf:ff:72:e0:b9:39:a0:4c:62:
                    3c:eb:13:b0:09:48:a1:36:25:b2:fe:0e:ec:e8:d7:
                    30:08:0e:14:1d:d2:25:b2:4e:87:8d:1f:a1:b4:46:
                    fe:27:c4:26:ac:06:c7:cb:0d:ab:e6:d6:7f:08:01:
                    69:cb:26:0a:a5:2f:90:4d:08:7b:d7:26:b9:c4:39:
                    ba:44:43:4f:4d:f9:05:cc:fa:a9:9c:56:84:1f:73:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:47:F3:ED:23:25:CC:E4:AA:B2:1A:7B:16:BA:07:39:C5:A6:65:C0
            X509v3 Authority Key Identifier:
                keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:0e:70:eb:af:7c:ba:c7:4d:e8:c8:03:73:fd:c2:6b:cb:56:
         ad:28:6e:51:62:70:32:bb:29:ee:f1:19:04:40:da:40:ca:23:
         ee:6d:c1:05:cc:ba:2c:fb:25:47:b6:56:a6:34:cb:74:c5:80:
         24:09:43:64:88:6a:ba:4d:59:d1:73:3f:7f:0b:67:22:1c:b2:
         b0:ea:f6:ba:e6:62:42:75:8c:f4:d4:1f:7a:7a:ea:01:19:1f:
         4b:8b:93:01:2c:73:a5:d9:40:0c:88:4c:32:82:af:eb:91:19:
         a5:fc:5d:00:06:dd:e4:ff:01:5c:25:f0:eb:c9:4f:e9:ad:63:
         08:91:cd:5d:ca:16:3d:6d:b3:25:9e:8d:56:47:31:42:f4:17:
         40:1a:ed:27:62:65:b5:59:7e:1e:b9:a6:ae:b0:36:8b:9e:e8:
         dd:0d:bf:72:12:0c:da:4d:69:10:e3:1c:2a:a5:94:53:a8:06:
         8a:ca:ed:94:02:7c:e2:c6:ab:c4:17:5e:1c:63:99:f5:4c:71:
         75:38:1e:58:31:ba:ac:75:b5:87:43:92:53:e3:9a:67:c3:da:
         85:25:a9:32:5b:d2:5a:e5:75:7a:3f:1a:a9:ec:4e:94:83:54:
         95:b9:8f:af:90:e5:cc:b6:ec:61:61:72:3b:de:e0:45:2d:66:
         7a:9c:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:38 2026 by rpki-client