Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
File:                     w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json)
Hash identifier:          MhVnrYM6RlryLeOquhx0qwqyZg4UdaRXixI1z3+oWmA=
Subject key identifier:   79:30:3E:E8:74:3C:64:B3:CC:A0:C8:8D:8A:6C:4F:08:82:98:93:F5
Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
Certificate issuer:       /CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Certificate serial:       019CAE35DAD393B273D526BF7B8A211C954D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
Manifest number:          03F0
Signing time:             Mon 02 Mar 2026 11:01:30 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:30 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:30 +0000
Files and hashes:         1: vXs00wABeOvYVd4PEbCkjMYfErk.roa (hash: S0XBmvPUfYyzedsDU+r8dBCYywLbP6svOqwi8N2av8g=)
                          2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: dc3+CHsjm6iQ+vjj4RET1gyeyLJtAQxex5tHfWWQAjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:da:d3:93:b2:73:d5:26:bf:7b:8a:21:1c:95:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61
        Validity
            Not Before: Mar  2 11:01:30 2026 GMT
            Not After : Mar  3 11:01:30 2026 GMT
        Subject: CN=79303ee8743c64b3cca0c88d8a6c4f08829893f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:12:63:7a:4b:06:d3:d3:54:7f:c0:15:5a:
                    b5:79:23:8d:fd:c0:92:d3:89:e4:e3:07:60:94:7f:
                    89:83:9a:18:ec:06:82:9a:99:65:65:33:d3:01:9f:
                    d2:fb:06:04:ee:5f:c2:36:7e:00:a4:53:55:29:81:
                    2c:c9:dc:23:77:a0:09:10:6a:f9:11:fd:61:66:d2:
                    15:54:7b:60:21:20:e2:65:93:47:8b:2e:a7:7a:df:
                    0f:2d:32:7d:2e:3d:b5:3e:5c:09:4d:22:4d:4a:f2:
                    b6:3f:74:0d:85:b0:10:2b:78:d5:d1:d3:48:96:0c:
                    c4:e1:68:76:4c:9f:4c:b3:b4:c5:d8:cf:3e:ee:48:
                    d2:3c:83:8e:5f:9d:d8:02:95:a0:ec:c3:3a:fb:76:
                    d3:a3:0c:f0:2a:6f:88:a0:c4:f9:48:8a:68:6e:56:
                    f8:f0:ea:a8:1b:ee:a8:e1:aa:26:47:b8:ab:d7:16:
                    f4:21:cc:dd:3a:c5:76:db:27:07:86:d9:6b:f8:32:
                    3a:09:56:18:b7:61:70:6c:44:14:b7:6a:c7:0e:ae:
                    87:ec:71:42:c9:31:86:c9:e7:c1:8f:37:cf:b8:0b:
                    c9:d8:5d:2c:b4:9b:7c:14:5c:42:5a:87:e6:8f:62:
                    cb:40:a2:d7:31:ac:75:9a:1f:68:af:61:08:36:a7:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:30:3E:E8:74:3C:64:B3:CC:A0:C8:8D:8A:6C:4F:08:82:98:93:F5
            X509v3 Authority Key Identifier:
                keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d2:a2:15:7e:bb:af:8d:b1:b7:9a:83:eb:ed:bc:83:d3:07:
         8e:5d:6d:2f:6c:e8:7e:fc:de:31:61:b7:b5:b9:f1:4c:ff:b6:
         e1:b1:00:de:5a:77:f9:f3:90:b1:06:c6:26:0b:4f:14:6b:41:
         36:5a:dc:59:d4:c0:e7:02:e0:ad:a1:44:59:dd:71:4c:46:46:
         4d:ca:bd:3c:01:05:85:47:37:00:67:95:fe:37:23:e7:71:22:
         ef:ab:34:8b:ef:59:7a:64:be:2f:f0:26:8f:bc:f1:62:db:be:
         38:0b:45:b8:5d:c1:20:30:ad:05:3d:35:20:8f:be:a4:91:7c:
         15:b0:f1:65:d8:c3:05:c9:81:9e:3f:e8:f1:11:12:77:c1:a4:
         f8:16:0e:df:05:eb:03:e0:e2:8c:57:c1:5c:a0:94:c8:01:12:
         28:c3:3c:a9:d4:84:6b:fe:c2:f7:42:6c:81:c1:7c:e4:b6:ce:
         e1:94:f8:21:94:e9:5b:ed:86:cc:4b:6c:7c:59:34:7c:f8:e9:
         8f:36:12:11:0b:ab:08:2f:a8:9c:64:6e:be:3f:41:6e:e7:4f:
         12:28:55:f0:0e:a4:c9:f0:98:ef:83:66:7d:c0:94:04:ec:2d:
         77:9c:15:89:47:cb:a9:95:5c:21:e6:fa:91:62:54:55:d3:7c:
         68:41:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:25:24 2026 by rpki-client