Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
File:                     WYW9QaWaLUUeYnCDXaFDmf9iuro.mft (raw, json)
Hash identifier:          NAjKTeSqZ0B3clWULzOo3gB1YmqmcpDxEXQxGQ/iqrw=
Subject key identifier:   F6:84:D6:64:BF:6B:AB:19:3B:3F:0B:51:77:3E:4E:AD:74:24:63:5C
Authority key identifier: 59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA
Certificate issuer:       /CN=5985bd41a59a2d451e6270835da14399ff62baba
Certificate serial:       019CAF10D5202FA05A76AF305CD40780AA62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
Manifest number:          0383
Signing time:             Mon 02 Mar 2026 15:00:41 +0000
Manifest this update:     Mon 02 Mar 2026 15:00:41 +0000
Manifest next update:     Tue 03 Mar 2026 15:00:41 +0000
Files and hashes:         1: DrL-3puYiO1XcvOHU3z8CMJINeA.roa (hash: cuMSInirqa12rGsZAI3BCtXNacI0/0nGWC9/J3U/TsU=)
                          2: WYW9QaWaLUUeYnCDXaFDmf9iuro.crl (hash: xKnXEOPR9f1lnNCfyE24qpq/kWuOr9PAYcUIO7T+Dts=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:10:d5:20:2f:a0:5a:76:af:30:5c:d4:07:80:aa:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5985bd41a59a2d451e6270835da14399ff62baba
        Validity
            Not Before: Mar  2 15:00:41 2026 GMT
            Not After : Mar  3 15:00:41 2026 GMT
        Subject: CN=f684d664bf6bab193b3f0b51773e4ead7424635c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:01:82:d7:1d:cd:45:57:c3:3f:17:68:9c:
                    be:2a:16:aa:98:e4:2e:3d:eb:50:9b:ed:1d:9e:51:
                    f0:d7:4b:2b:51:f4:d3:f5:7b:9b:84:d8:c5:49:aa:
                    78:61:2c:68:20:d7:ab:51:a4:29:ec:a6:b3:3c:f3:
                    7a:9c:6f:15:96:9c:0e:c1:81:05:4f:1f:cb:38:36:
                    ce:ac:b5:9e:53:12:ff:17:92:90:f5:93:c3:c1:c1:
                    f6:c9:d6:64:65:88:55:c1:85:13:a5:bd:49:65:4f:
                    55:f4:35:6b:0f:a1:ad:44:3a:b3:ff:0f:04:77:10:
                    14:6a:4c:8e:80:b7:99:a0:f3:bf:a5:ca:a4:32:a4:
                    11:ec:da:f3:21:11:b6:39:92:a0:b2:cb:0c:90:87:
                    e9:94:5b:9b:98:1e:64:a6:be:a0:af:e7:fd:5a:4b:
                    7d:71:d3:f2:29:03:82:5a:60:bb:aa:15:fe:e0:2a:
                    ef:2a:3e:dd:6c:78:49:62:48:80:41:7e:24:55:a6:
                    e0:e1:dd:3e:07:7d:13:4a:ee:03:b0:be:ec:d0:6e:
                    86:f6:ee:43:c2:c3:16:a8:b7:b6:59:61:93:21:01:
                    cf:89:0f:2d:f1:86:1b:f3:b1:7c:c1:aa:ac:48:87:
                    54:e1:50:73:60:8e:03:da:42:0c:7d:10:c4:8f:e7:
                    bc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:84:D6:64:BF:6B:AB:19:3B:3F:0B:51:77:3E:4E:AD:74:24:63:5C
            X509v3 Authority Key Identifier:
                keyid:59:85:BD:41:A5:9A:2D:45:1E:62:70:83:5D:A1:43:99:FF:62:BA:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYW9QaWaLUUeYnCDXaFDmf9iuro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a04c45-694a-4ca1-b5fb-93dca199d880/1/WYW9QaWaLUUeYnCDXaFDmf9iuro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a2:f5:3b:18:04:3e:c9:7e:ae:2e:02:64:77:74:dd:d5:e8:
         72:08:f3:17:0e:2e:af:92:6e:4c:c7:96:e7:03:63:45:a5:c8:
         fe:83:65:97:2c:6d:59:bf:6e:1e:85:ac:c3:da:4a:c9:55:65:
         5e:4c:c5:b8:18:8c:03:37:0d:83:2e:b3:2f:8e:c6:56:dc:da:
         d3:67:4c:ae:2c:2a:8f:8a:99:e6:5a:0b:31:ba:4c:c3:61:7e:
         ab:f2:82:f0:2a:93:41:3e:c5:b1:97:f0:c9:b5:e5:38:66:e0:
         e1:83:1a:10:62:d1:f6:76:b7:1d:8e:c8:40:43:fa:29:bd:0b:
         3d:32:68:1a:9d:4f:35:34:7b:b7:23:f9:09:91:e8:bb:6c:88:
         c0:66:ae:cc:ca:80:d7:2e:69:20:ed:5d:27:50:75:65:f7:88:
         c1:bd:1d:6d:d6:c2:8b:97:a3:6f:60:f5:83:17:66:7c:aa:02:
         c1:80:8c:22:db:d6:39:36:31:d0:89:b1:a9:0b:1e:84:cb:c2:
         7e:a5:d3:3c:14:a0:68:c3:0e:19:1c:45:8e:64:f0:0a:92:80:
         e9:a1:68:12:ef:f4:2e:5a:42:3a:88:1c:4c:2e:77:e6:2c:fc:
         51:1f:23:2e:c4:cc:ef:3d:8d:46:df:1a:ef:ca:0d:68:17:7f:
         22:c6:9d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:26:34 2026 by rpki-client