Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
File:                     w_8EiaBkHM8dwes7Z08_YRFjuu4.mft (raw, json)
Hash identifier:          R41BEZh7cVzzfq6UTC6qSe4fIa+MkWlYliT8D8UcZS4=
Subject key identifier:   44:7C:E9:F0:3A:5F:86:96:D7:EA:59:68:86:83:25:A4:04:09:67:F4
Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE
Certificate issuer:       /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
Certificate serial:       019CAB3405C3695A01E0498AFB6EE26CBA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
Manifest number:          178C
Signing time:             Sun 01 Mar 2026 21:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:39 +0000
Files and hashes:         1: bkBKpNXnnhiVy0aIIWXvtrC3cuc.roa (hash: OmCalx7GnzcLWdPt18F0Wc8hXtQDqYrhzKI8QJ5ZwZY=)
                          2: w_8EiaBkHM8dwes7Z08_YRFjuu4.crl (hash: h9gsyNuyfqUsBfymagPBH9ipLQRdoMjrvWmQ0m1xmr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:05:c3:69:5a:01:e0:49:8a:fb:6e:e2:6c:ba:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee
        Validity
            Not Before: Mar  1 21:00:39 2026 GMT
            Not After : Mar  2 21:00:39 2026 GMT
        Subject: CN=447ce9f03a5f8696d7ea5968868325a4040967f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:71:eb:43:65:3e:16:79:55:72:ef:0e:ba:33:
                    4b:59:bb:64:34:a7:80:a2:7a:2a:1d:88:5b:5d:a2:
                    c2:1f:10:80:e8:99:c2:60:ae:0f:2f:af:4d:ad:15:
                    5c:22:cf:93:28:39:b0:7e:89:20:fc:1e:16:e2:f5:
                    ab:b8:8e:23:ed:7e:92:b6:c1:ec:38:4b:1a:86:2f:
                    12:ae:03:03:90:93:6b:a4:f6:77:f2:82:16:91:bb:
                    2b:23:a0:6b:6b:81:03:a4:c2:db:6d:f6:b9:0c:d2:
                    56:76:72:56:7d:f6:aa:f6:a9:82:95:ba:75:54:86:
                    05:8b:8d:45:33:1e:93:78:47:57:e3:3f:38:f4:d4:
                    4d:60:09:ea:7e:9b:9b:d0:b8:ba:99:0e:1a:1b:f7:
                    0c:ed:77:a5:bb:a3:ff:08:1a:b7:f0:ca:96:18:c2:
                    5c:95:af:9e:c3:bf:0a:57:b3:af:6f:6e:69:74:73:
                    f8:90:df:c9:34:1b:a4:0f:ca:29:c1:e4:19:ad:e7:
                    81:d7:0d:5f:b4:4b:1a:c4:a6:e1:90:2e:a2:68:9c:
                    34:c5:81:2c:e1:db:1c:62:97:22:41:42:1c:73:8c:
                    14:03:9a:0d:82:a7:76:0c:82:9b:95:d1:0b:f2:88:
                    7a:69:02:78:4e:a9:02:27:b1:7c:10:08:7b:44:59:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7C:E9:F0:3A:5F:86:96:D7:EA:59:68:86:83:25:A4:04:09:67:F4
            X509v3 Authority Key Identifier:
                keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:93:d9:75:45:2d:67:0d:d9:22:9d:11:59:49:da:c6:6a:6b:
         60:f5:41:ca:08:ba:6e:8e:e0:65:9d:9c:88:c4:ed:51:98:d1:
         02:57:76:17:d7:70:8f:9b:06:23:b6:de:33:3d:bf:3b:65:61:
         52:08:72:02:53:2c:2f:4b:a5:fb:96:15:8f:31:27:97:32:0d:
         cb:5e:f0:69:c0:79:eb:c5:06:17:5f:70:81:de:50:b6:1a:27:
         5c:04:0e:60:f2:d6:5a:35:9d:c6:65:7e:d4:03:cb:fc:1c:6e:
         e3:31:45:53:a7:0a:1b:5c:98:1c:c4:79:6a:71:1c:a6:9f:f8:
         c1:a7:63:30:99:f0:67:e1:f9:68:35:4c:84:a4:c0:7d:6d:dd:
         b9:c3:8d:c1:29:36:fb:e3:74:31:d4:5f:d5:6f:bb:13:c3:e7:
         a9:5e:58:6e:55:9e:3a:4a:2f:6d:bb:37:0a:a6:74:b9:a4:7b:
         ec:36:c7:b4:67:42:f2:da:11:46:73:4c:e8:0a:21:66:81:74:
         3f:55:ec:0e:e4:63:13:f8:7a:df:0e:b4:83:5f:e2:9d:56:c9:
         9c:c8:6a:59:9a:31:d1:d9:2b:61:db:d0:bc:88:8b:36:03:17:
         94:ef:5c:e0:61:7b:d3:2f:18:f5:b7:31:58:d8:11:89:aa:da:
         88:00:69:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNAXDaVoB4EmK+27ibLpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZmYwNDg5YTA2NDFjY2YxZGMxZWIzYjY3NGYzZjYxMTE2
M2JhZWUwHhcNMjYwMzAxMjEwMDM5WhcNMjYwMzAyMjEwMDM5WjAzMTEwLwYDVQQD
Eyg0NDdjZTlmMDNhNWY4Njk2ZDdlYTU5Njg4NjgzMjVhNDA0MDk2N2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3HrQ2U+FnlVcu8OujNLWbtkNKeA
onoqHYhbXaLCHxCA6JnCYK4PL69NrRVcIs+TKDmwfokg/B4W4vWruI4j7X6StsHs
OEsahi8SrgMDkJNrpPZ38oIWkbsrI6Bra4EDpMLbbfa5DNJWdnJWffaq9qmClbp1
VIYFi41FMx6TeEdX4z849NRNYAnqfpub0Li6mQ4aG/cM7Xelu6P/CBq38MqWGMJc
la+ew78KV7Ovb25pdHP4kN/JNBukD8opweQZreeB1w1ftEsaxKbhkC6iaJw0xYEs
4dscYpciQUIcc4wUA5oNgqd2DIKbldEL8oh6aQJ4TqkCJ7F8EAh7RFnoQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFER86fA6X4aW1+pZaIaDJaQECWf0MB8GA1UdIwQY
MBaAFMP/BImgZBzPHcHrO2dPP2ERY7ruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAt
ODgzZTBlYmVkNmJmLzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAtODgzZTBlYmVkNmJm
LzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpPZdUUt
Zw3ZIp0RWUnaxmprYPVBygi6bo7gZZ2ciMTtUZjRAld2F9dwj5sGI7beMz2/O2Vh
UghyAlMsL0ul+5YVjzEnlzINy17wacB568UGF19wgd5QthonXAQOYPLWWjWdxmV+
1APL/Bxu4zFFU6cKG1yYHMR5anEcpp/4wadjMJnwZ+H5aDVMhKTAfW3ducONwSk2
++N0MdRf1W+7E8PnqV5YblWeOkovbbs3CqZ0uaR77DbHtGdC8toRRnNM6AohZoF0
P1XsDuRjE/h63w60g1/inVbJnMhqWZox0dkrYdvQvIiLNgMXlO9c4GF70y8Y9bcx
WNgRiaraiABpkw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:37 2026 by rpki-client