Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          l/zr8Cmp/DlqG1XUlNvZ+YkBj6l6LCtQpNLzGNwfZ08=
Subject key identifier:   39:5C:B8:A7:66:04:80:DC:3F:7E:1C:E5:30:A3:8C:7F:4A:05:43:F1
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       019D2B4DFE74CE23CD8BC7B8CBF4479D488C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          0FE4
Signing time:             Thu 26 Mar 2026 18:00:24 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:24 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:24 +0000
Files and hashes:         1: iBJ31yh-XKNto6qwkr_lk9nm8Ik.roa (hash: YPdFv2hCP/PkOD/9i/Bu7OVfZju2bdOQgcBdgpKIrw0=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: fTex29GJ8og3XbpRLxMlmYpRSUUfQ14sU0QKmzgsh3I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4d:fe:74:ce:23:cd:8b:c7:b8:cb:f4:47:9d:48:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Mar 26 18:00:24 2026 GMT
            Not After : Mar 27 18:00:24 2026 GMT
        Subject: CN=395cb8a7660480dc3f7e1ce530a38c7f4a0543f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:e7:8a:83:ac:f6:6b:0c:ac:ac:89:96:73:
                    75:f9:56:e8:be:24:d7:c0:dc:bd:e8:15:63:fc:a6:
                    a4:50:f9:ad:30:b9:24:af:df:d5:ca:c5:91:56:41:
                    e8:55:da:78:14:f2:f4:22:ca:a1:3f:9e:eb:40:06:
                    c6:79:5b:55:86:dd:cb:7a:34:4f:bc:c1:fb:19:f0:
                    49:a6:13:65:c6:6d:be:d2:a7:ba:52:f9:ab:ec:6c:
                    20:6e:d3:34:3e:d7:3f:0e:e8:e7:a3:e9:1d:2a:ab:
                    57:00:f2:08:d1:8b:35:e3:ae:81:d2:60:de:44:74:
                    43:97:96:9e:ff:27:99:3f:12:1c:6b:9f:72:b3:ad:
                    db:74:82:6c:ca:bc:57:91:ee:be:9a:d4:2f:f4:36:
                    7d:51:4f:58:f5:f5:3f:f3:50:76:ea:c7:52:99:3e:
                    0d:17:df:5c:62:f1:fc:d1:46:34:06:56:8c:ba:bb:
                    82:38:c7:4a:8e:8d:8b:59:1c:40:1c:86:15:91:b7:
                    3b:bb:b4:6b:44:d2:83:60:a9:a0:64:99:50:84:08:
                    86:3d:3b:56:74:68:b1:79:05:4f:f3:ad:75:26:b2:
                    7e:fe:69:00:13:da:fb:dc:b7:c4:ce:ea:d8:43:a4:
                    a4:4c:eb:74:a2:eb:0b:91:a3:d5:ae:2e:f1:8c:2e:
                    aa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5C:B8:A7:66:04:80:DC:3F:7E:1C:E5:30:A3:8C:7F:4A:05:43:F1
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e7:4a:83:26:be:4a:61:01:21:30:69:cc:8e:1c:bc:d9:9e:
         7f:3c:c0:b7:18:cf:de:a5:d8:2e:b9:51:9c:2c:6d:b6:60:14:
         b3:cf:ce:d7:45:c3:58:50:1f:e6:ae:49:a0:7c:82:f1:79:fb:
         f7:55:ab:4b:3b:5b:6a:04:ec:37:48:c9:b4:27:58:d9:4b:a3:
         18:b2:eb:b2:91:6f:0f:e6:4b:ef:a7:df:90:ab:b0:e6:76:df:
         c7:b7:bb:cd:e0:b6:65:27:99:55:3c:80:37:07:9e:a5:62:ae:
         7d:dd:d2:82:fe:a1:d6:c5:a1:03:c8:64:9f:b4:0f:45:b3:92:
         e7:a6:f8:4a:dc:ab:eb:36:2a:99:a5:97:d1:d1:a2:c0:5b:c8:
         b1:9a:e7:69:89:a8:d8:d5:d5:08:2e:8b:d3:77:d8:21:04:a2:
         c4:a2:f6:2c:4f:50:d4:8b:0e:5a:8d:3b:32:d3:7c:f4:78:a7:
         aa:6b:8a:a5:45:03:15:51:3c:72:ae:04:db:c5:e3:19:9f:40:
         2f:b1:25:cc:7f:7c:e5:65:69:7d:f6:fe:97:49:25:4c:87:6c:
         73:58:fe:7f:36:5e:d9:fc:74:4b:2f:6c:47:af:a8:76:ae:87:
         ac:da:0f:4f:18:95:bc:f0:4d:ea:6f:f4:d2:b0:35:6d:04:70:
         06:ec:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:21:42 2026 by rpki-client