Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File:                     WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier:          WARoBE9aM4z1T+zowPwChuf7FktEaTPHyvUwYhXKDVw=
Subject key identifier:   46:55:DD:A6:0C:72:0A:F2:61:44:95:19:4F:EE:DA:AA:52:A8:E0:16
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer:       /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial:       019CAA8FEC745263921D243680804253411F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number:          06F1
Signing time:             Sun 01 Mar 2026 18:01:24 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:24 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:24 +0000
Files and hashes:         1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: 2l5Ym24TvlSDC7DQ/6/3ISocwd2vY+ZYkbOt8rdkZns=)
                          2: fpv7X-TkVwCqqHH5fj7Z_fTN4Kc.roa (hash: cOqWQjIviZMextqrFLsf3gf8It8rhkkR5FV+uRamQxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:ec:74:52:63:92:1d:24:36:80:80:42:53:41:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
        Validity
            Not Before: Mar  1 18:01:24 2026 GMT
            Not After : Mar  2 18:01:24 2026 GMT
        Subject: CN=4655dda60c720af2614495194feedaaa52a8e016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:64:9e:00:d9:41:e0:d4:a2:f8:6f:33:31:da:
                    22:16:69:c5:75:a9:14:4c:11:b1:b2:a7:8e:dd:ae:
                    63:c1:be:f0:67:41:71:eb:65:7c:3d:e3:d8:9e:fb:
                    45:0a:2e:f5:23:72:5b:8a:bb:d0:cf:e8:4a:e1:70:
                    fc:f9:6a:1a:af:33:d3:d8:00:03:fb:55:4b:2b:e2:
                    ac:1e:9f:a5:c7:1a:24:5c:52:f1:76:5f:c0:81:9f:
                    26:08:17:20:aa:7d:40:08:b3:7c:81:19:56:c4:87:
                    e4:2b:1e:fd:76:f6:10:c8:82:64:1e:65:e8:8a:a7:
                    8f:d4:3b:87:f8:59:87:a4:48:a3:e1:93:28:e2:b0:
                    45:de:eb:24:4b:41:9b:05:c6:7d:5f:35:d8:b2:2e:
                    a4:e0:64:da:31:c6:9b:56:8c:4d:21:2d:4b:bd:0b:
                    30:1a:13:14:5f:86:a1:78:26:5c:f6:c0:be:b9:25:
                    64:22:ec:1f:47:70:17:f6:eb:ce:23:33:28:fc:b1:
                    cb:3f:78:67:64:2c:d8:5e:58:52:46:b4:5d:0e:09:
                    a9:6d:10:b9:27:ef:69:82:32:76:a1:7f:f3:03:bc:
                    ca:51:de:e3:35:64:fc:13:39:67:90:76:97:1f:be:
                    ed:e4:91:49:50:04:63:ed:13:18:c1:bd:f0:c0:7e:
                    6c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:55:DD:A6:0C:72:0A:F2:61:44:95:19:4F:EE:DA:AA:52:A8:E0:16
            X509v3 Authority Key Identifier:
                keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:83:20:b5:e2:30:44:fc:85:09:5f:8c:57:26:ac:86:3c:39:
         94:bd:b3:35:b7:c0:23:9f:81:7c:30:94:d7:24:7f:12:3a:90:
         6d:2b:91:a3:37:46:8d:e6:3a:9f:c8:84:a3:bf:b8:06:02:18:
         f1:c2:da:10:cd:48:cd:49:7d:28:95:c9:9c:05:76:c0:48:2b:
         ac:89:7a:9d:00:df:cb:e5:fa:cd:bf:ac:1b:3d:b4:0e:35:9c:
         50:a5:e5:7e:a8:65:b4:03:43:95:b6:f2:1f:e8:bc:81:00:39:
         2c:21:1c:f6:6e:d5:ac:be:b8:3b:61:2c:94:7b:d1:6a:55:95:
         6b:f6:96:28:e1:78:7f:67:0b:7f:24:73:3b:03:47:51:73:2f:
         14:47:27:5c:73:c5:1e:49:bb:e1:53:f8:5e:db:65:ce:e3:f9:
         7c:8d:16:77:1d:13:47:d1:ae:d0:b5:3d:82:f0:ff:d2:1f:ab:
         ac:bc:41:28:c4:9a:23:a0:b2:59:8c:0e:73:20:9f:27:f1:e2:
         42:12:bf:03:b4:2a:39:64:5a:41:3c:f7:4e:20:f0:43:01:d9:
         60:bf:d9:ae:64:28:15:17:a3:59:5e:dc:53:db:fd:2a:54:86:
         6c:a5:28:37:cf:0d:f8:98:bf:ba:05:fd:f4:b5:eb:f3:cf:3a:
         d5:34:00:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:32 2026 by rpki-client