Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File:                     dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier:          HM1FUSol2ba0OB9YNGO+2Ykn2yB01FnPm9GgGI6ost8=
Subject key identifier:   1E:E1:EE:33:35:FE:1E:9C:44:56:8B:24:2E:0C:5D:B8:3A:A5:A6:3C
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer:       /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial:       019CAC7E3C3FE67BE790092E882F06A7FFA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number:          17E0
Signing time:             Mon 02 Mar 2026 03:01:19 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:19 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:19 +0000
Files and hashes:         1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: rTvfgfrCjMT6/ZDXBtoxlsC8OVo1T+OFOXTg6VEutJc=)
                          2: eEDMI9EWeOPChG5XbrAWLtEHI_w.roa (hash: Xe0k2b+LaeqrGNhq3Bb77UB8l2FoXh1XrZU68OpxkZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:3c:3f:e6:7b:e7:90:09:2e:88:2f:06:a7:ff:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
        Validity
            Not Before: Mar  2 03:01:19 2026 GMT
            Not After : Mar  3 03:01:19 2026 GMT
        Subject: CN=1ee1ee3335fe1e9c44568b242e0c5db83aa5a63c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:19:d6:21:95:1e:f3:10:15:7e:1d:ab:c6:f0:
                    cc:9c:36:b6:3e:e7:e1:10:a2:08:9d:7d:db:a3:b5:
                    61:5c:c8:4d:6d:ac:b9:ab:71:f6:6e:40:c2:89:14:
                    37:6d:80:b1:bf:aa:de:36:f3:f0:67:8d:4a:b3:3a:
                    f9:68:c2:02:6e:da:22:24:96:4f:d0:a3:7e:16:a2:
                    9e:db:d0:ee:42:87:a1:06:dc:10:ae:33:e4:67:96:
                    8a:9f:04:5d:fd:46:d7:63:09:3f:85:b1:71:90:66:
                    9b:6a:73:3f:ae:4c:1f:f7:e2:62:a2:bb:d5:42:39:
                    37:1d:97:b8:b4:04:3c:f7:19:30:6d:1e:34:89:7d:
                    52:26:db:64:cf:dd:5f:1d:fb:18:32:a8:5c:20:e0:
                    44:86:b9:15:bf:45:01:69:70:c3:08:13:7e:36:6f:
                    c1:a2:71:10:3f:ff:9d:af:dc:a1:df:56:52:de:56:
                    62:69:3c:b7:c2:ac:df:1f:49:3c:b0:51:d7:30:4a:
                    92:b7:02:96:16:59:a2:18:f3:a7:9d:21:7d:b3:89:
                    fc:8b:9a:f4:2c:0a:e5:a5:f5:6e:b4:19:d5:8b:c6:
                    12:72:bc:fb:c7:74:34:22:9e:7c:42:65:b7:e5:2d:
                    3f:1f:af:84:4d:79:75:69:41:7f:ec:cd:67:9b:6b:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E1:EE:33:35:FE:1E:9C:44:56:8B:24:2E:0C:5D:B8:3A:A5:A6:3C
            X509v3 Authority Key Identifier:
                keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:99:8b:f6:92:55:4d:e4:85:32:45:97:d6:d2:93:6b:f4:ea:
         ec:db:67:54:48:a1:7b:ea:11:03:0b:19:4f:25:94:ba:be:bc:
         cb:dc:54:46:4f:bd:c9:51:58:d2:d4:0b:e8:f2:91:ab:53:51:
         4d:b2:07:46:8e:37:31:02:9f:b5:75:db:e2:19:52:60:fa:8b:
         9e:bb:96:e9:9e:f3:33:fd:68:fc:cd:da:5a:df:8c:ca:1f:b1:
         ee:e8:71:e3:3e:1d:66:b1:99:5a:da:eb:2c:6e:c2:0f:b8:f4:
         7b:ed:41:ee:34:6e:ad:3d:6f:f5:76:62:82:da:2b:03:4f:ce:
         05:c4:41:49:c4:67:06:11:36:f6:1d:87:45:ca:f6:c2:15:7f:
         e9:90:7d:47:dd:c2:2c:26:23:b3:b5:7b:69:d5:f4:83:72:f9:
         3c:cd:99:c1:ea:80:70:96:e0:21:6b:c5:af:d3:d9:59:af:a7:
         93:25:53:5a:7c:c6:ba:e3:bb:c7:9d:5d:3f:1b:19:e6:7c:32:
         12:13:09:dc:ae:17:80:11:3c:fe:60:57:e1:0e:d8:29:18:1d:
         38:fc:69:d1:fe:40:06:42:89:b7:b4:92:89:e6:fa:19:4b:1f:
         be:49:fd:0c:ed:3e:7f:fe:a6:6b:3e:6f:dd:cb:00:2d:47:c5:
         30:93:bc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:10 2026 by rpki-client