Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
File:                     W5BVHjwX4KAtKNbconnbPkFH-ZE.mft (raw, json)
Hash identifier:          kfXauAXNTZVBdM3BcysKxLwNkdDhOoH7R8IvU8nN7a4=
Subject key identifier:   03:4C:BE:55:B4:58:BE:5B:92:2A:CD:F2:81:BD:A7:B6:AB:C7:99:E4
Authority key identifier: 5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91
Certificate issuer:       /CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
Certificate serial:       019CAAFD034A609C51256F3B319B91466F8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
Manifest number:          14C5
Signing time:             Sun 01 Mar 2026 20:00:33 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:33 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:33 +0000
Files and hashes:         1: 460gpbF1-qqCopVmVYv6L3kkHt4.roa (hash: T/5gkOOg36xYZYGhY1BSI/Kds4ykDu2qme4aoQekPvU=)
                          2: W5BVHjwX4KAtKNbconnbPkFH-ZE.crl (hash: LOQE2QcO9oQ54+wOG0Go1MvQAF2O8G0dEa0BQVrPdnE=)
                          3: jrPg4JR8S_yeb9hd7_qHAoJ5-wU.roa (hash: oupHuMBn+1iVvBy7YaBgSuAcJ/Oc6Y8+7+ZsGW3A7Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:03:4a:60:9c:51:25:6f:3b:31:9b:91:46:6f:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b90551e3c17e0a02d28d6dca279db3e4147f991
        Validity
            Not Before: Mar  1 20:00:33 2026 GMT
            Not After : Mar  2 20:00:33 2026 GMT
        Subject: CN=034cbe55b458be5b922acdf281bda7b6abc799e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:55:e9:a7:38:64:1c:ee:20:95:18:ed:fb:
                    c8:90:1b:11:44:54:c2:5c:96:aa:45:fa:f6:71:e1:
                    5c:a4:71:f4:b3:02:20:78:8a:b1:0d:fd:ed:c6:bc:
                    85:ce:ed:bc:ed:cd:2d:a0:01:b4:c0:15:6e:24:cf:
                    00:bd:bf:c8:18:d9:10:60:d4:39:0d:3f:26:d0:d6:
                    8a:7e:3d:d5:9c:72:d6:d8:ec:c9:df:ec:64:c2:0f:
                    b6:fd:53:46:c2:b0:7c:46:b3:52:af:f9:2e:6f:a6:
                    ec:60:e4:e5:47:5a:a0:41:a3:82:ea:c9:cd:14:0f:
                    26:0f:77:b0:c2:9a:33:d2:ca:a5:09:f7:b2:e5:1a:
                    5d:94:e5:3d:7c:93:1e:85:e1:e1:02:47:87:7c:36:
                    19:1e:6f:af:0d:26:a3:51:87:aa:24:87:96:9d:3a:
                    41:a3:b6:e3:3a:94:fc:0e:78:59:d9:b5:c7:e3:53:
                    b6:df:6e:06:57:1d:76:c1:76:b5:da:77:56:10:6c:
                    9d:35:7d:7c:48:4b:59:f8:3d:b1:1b:e4:f7:3c:c5:
                    38:2d:ec:d2:16:46:d2:fa:95:ed:0b:57:ad:1a:b0:
                    b2:f9:d3:a1:94:a7:50:ab:a7:0b:97:2b:e9:e3:a7:
                    f7:0b:ed:e6:15:64:2d:3d:d7:a0:34:e5:a5:e2:8a:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4C:BE:55:B4:58:BE:5B:92:2A:CD:F2:81:BD:A7:B6:AB:C7:99:E4
            X509v3 Authority Key Identifier:
                keyid:5B:90:55:1E:3C:17:E0:A0:2D:28:D6:DC:A2:79:DB:3E:41:47:F9:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5BVHjwX4KAtKNbconnbPkFH-ZE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c192a4-76b2-465d-8818-a30e33a70b1e/1/W5BVHjwX4KAtKNbconnbPkFH-ZE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:2f:d1:af:aa:93:c8:62:4f:4d:52:38:81:94:f9:45:0d:97:
         7f:65:f5:3b:c1:85:9e:2e:44:42:fe:26:a7:35:4b:45:41:2a:
         46:a2:b3:de:a2:10:18:ef:65:2e:c4:d3:8f:7d:92:08:a1:33:
         38:4b:50:03:9e:ca:df:d7:34:0a:c8:1c:f7:a1:c7:96:24:48:
         18:a6:18:eb:b3:10:2a:10:36:57:29:86:2c:5a:d5:a9:f5:ff:
         bc:10:da:7b:a9:13:53:8e:92:15:d7:f8:7b:c0:f2:e5:2a:21:
         9c:0f:ac:76:34:78:92:89:7f:50:6e:05:03:5e:fa:d4:89:58:
         2c:07:33:db:b1:63:08:c3:b8:99:5d:bb:13:45:58:f1:ee:5a:
         5a:a4:7c:cf:15:fe:40:f6:64:6c:05:71:38:8e:89:8e:5d:f6:
         3b:77:36:a9:21:80:e2:fe:d1:6a:1c:7d:16:5d:69:5a:ca:7e:
         e8:b5:7a:99:24:de:04:b5:47:5e:73:5f:d5:75:d9:b6:40:a7:
         98:ba:e4:70:b9:0b:45:76:96:a8:22:0a:94:33:f5:1d:3f:99:
         55:2c:ba:50:51:5a:de:93:29:df:8b:71:5f:1c:09:96:21:bb:
         3f:ab:d1:69:66:30:95:0a:21:a6:3d:55:7a:5b:83:b4:bd:b4:
         b1:33:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:03 2026 by rpki-client