Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
File:                     WC4hcKe8vsMQFU8rzpmDP-woAfs.mft (raw, json)
Hash identifier:          504veC6FWcnoMb/RuTOpO0GvMz0pAM5uHaZTv4wJV7U=
Subject key identifier:   5F:31:24:36:DD:7E:EA:A6:23:9A:E7:AF:B0:1A:0A:73:E9:2C:0E:10
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Certificate issuer:       /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial:       019CA97D4C7E5CB50B8F1A9D30A4757DB351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
Manifest number:          0A39
Signing time:             Sun 01 Mar 2026 13:01:26 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:26 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:26 +0000
Files and hashes:         1: 6mj9wjIYkwPsA3c5MxWWRMkBmSY.roa (hash: E1XVoQk2psLjeVe0+NkJREdlEcbwRYRghSTnYcJUsio=)
                          2: WC4hcKe8vsMQFU8rzpmDP-woAfs.crl (hash: vKvC5PAmI4k2DqTZc0aEs2ddLxFCEoyoksIiE8qkOm4=)
                          3: eieZOr9FHJILQ01WF-oyQAME0-4.roa (hash: ahdbiO7qmkWYgXQ04GmEQrp4ceapMkzBgwSwQKptvJI=)
                          4: sJMlQlmuU4_t9JLTWEOG32Cq6MQ.roa (hash: E7O6wd0Zjg99STe3wUKf7d1f1MzUTLb1rAZKDrFTMV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:4c:7e:5c:b5:0b:8f:1a:9d:30:a4:75:7d:b3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
        Validity
            Not Before: Mar  1 13:01:26 2026 GMT
            Not After : Mar  2 13:01:26 2026 GMT
        Subject: CN=5f312436dd7eeaa6239ae7afb01a0a73e92c0e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:30:c1:32:00:45:d6:76:21:c6:23:17:45:bc:
                    63:41:70:f5:0f:fe:a4:a7:15:d8:50:d2:91:b3:c7:
                    c5:87:b1:c3:0a:38:6b:df:e0:ef:f4:ad:9b:ed:4e:
                    ad:92:11:cb:fa:42:d0:b8:55:79:80:bc:3f:80:cd:
                    31:a8:31:f2:f0:81:01:a6:a9:50:90:11:3f:02:49:
                    b7:08:29:ff:21:9a:36:15:5a:1f:f0:a4:65:dc:e0:
                    b8:3e:46:0c:9d:3b:e1:ca:a0:9a:74:ac:cc:ca:83:
                    0e:05:d0:fc:55:c3:6d:ec:13:c1:a6:05:01:f1:33:
                    a4:c3:2e:14:f1:bd:fe:7a:95:e7:f6:e2:36:42:25:
                    b3:9f:0d:26:a7:48:49:7d:41:42:09:91:0c:bf:1f:
                    f7:a8:ca:a8:1f:76:41:d4:44:47:e8:ff:f4:99:c8:
                    a8:c3:7e:c6:2b:9c:19:2e:2c:1c:cd:ed:d4:86:7c:
                    b9:56:da:45:36:37:4c:4d:59:32:36:18:1e:64:8b:
                    61:0b:6b:d6:95:97:4e:12:d4:eb:cc:f5:30:d8:39:
                    73:80:9b:5b:d5:75:52:91:84:53:f2:38:ce:d2:21:
                    fb:5e:b3:a8:d4:f8:7d:46:49:90:ff:af:44:54:18:
                    7b:eb:2d:5a:44:c8:76:61:8b:8b:69:11:48:e5:c8:
                    61:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:31:24:36:DD:7E:EA:A6:23:9A:E7:AF:B0:1A:0A:73:E9:2C:0E:10
            X509v3 Authority Key Identifier:
                keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:c1:14:ed:8b:99:9d:54:69:28:7a:da:08:d0:8d:ca:da:30:
         eb:8f:bd:43:21:07:a7:54:a9:03:d2:cc:8d:ab:af:ee:c6:c5:
         61:36:02:9c:50:1a:bf:13:bf:2c:3c:5b:8e:3d:5c:29:68:64:
         26:f2:90:fe:6a:d5:f9:53:97:55:fd:dd:2e:a0:63:f8:c1:1f:
         aa:12:d4:af:71:8a:23:c8:e4:ce:ec:4e:fe:8f:5d:b6:96:99:
         ba:80:82:b6:39:67:7d:d0:14:ca:17:cb:7f:b2:66:0d:9a:6c:
         0c:4f:16:3b:26:8e:e2:ac:a2:bc:aa:dd:80:8b:21:6b:c3:ef:
         1b:7d:70:6f:c7:59:46:de:74:69:97:89:b6:bc:bf:55:2a:13:
         f2:0c:43:9e:72:0f:08:fb:0d:18:06:72:f2:7a:15:56:96:48:
         fa:35:bc:b6:5a:34:3c:7d:6b:1f:a8:83:ba:7b:8c:81:62:51:
         65:47:f3:4f:5f:06:b6:32:27:a9:70:ae:5f:91:8c:fd:0a:69:
         8c:bc:d4:f9:02:ef:5c:4f:f1:89:11:f0:f3:70:f9:cf:dd:3f:
         a9:b3:f8:60:64:f7:47:38:b6:15:87:43:5a:c0:f3:d8:bf:46:
         26:0d:dc:0a:77:cc:3c:29:8c:9b:aa:55:d8:fc:e8:c3:6c:8d:
         58:65:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:42:15 2026 by rpki-client