Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
File:                     WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json)
Hash identifier:          ZdcUpsV8wFw/x5DNi6vSrpR4cSJ/aRiBZMflQLu5mPk=
Subject key identifier:   AD:F7:07:C2:29:9E:78:21:3E:26:8D:7A:33:49:E8:E2:12:64:C2:83
Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22
Certificate issuer:       /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
Certificate serial:       019D27A862AC01FAB026846BB9E78C00B7F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
Manifest number:          03F0
Signing time:             Thu 26 Mar 2026 01:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:39 +0000
Files and hashes:         1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: kuijTjX09h7GHvv0thA39ZkCgbNbVLaWThI7mSeLbQw=)
                          2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:62:ac:01:fa:b0:26:84:6b:b9:e7:8c:00:b7:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122
        Validity
            Not Before: Mar 26 01:00:39 2026 GMT
            Not After : Mar 27 01:00:39 2026 GMT
        Subject: CN=adf707c2299e78213e268d7a3349e8e21264c283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cc:9c:9b:9d:b4:cf:a4:f9:2b:e9:3e:fc:76:
                    3f:8b:47:40:91:1d:fb:4d:0d:87:98:e6:78:0e:ed:
                    6b:a9:fa:84:96:88:0d:f4:ca:3f:a0:23:3e:96:e5:
                    98:ef:b6:5b:b3:74:2e:6e:2c:cc:3c:f3:69:36:81:
                    72:0b:69:52:92:e5:b4:e4:32:58:11:b6:37:79:52:
                    d7:d7:9d:3c:de:3c:a9:8a:89:e8:87:e2:6c:81:9e:
                    71:83:9b:a2:20:31:51:df:13:b5:1f:a0:8b:23:9f:
                    d7:bb:ec:fe:c3:0d:ce:a5:53:51:50:ee:fd:73:65:
                    e9:42:0e:f6:5d:7f:f4:bf:91:e7:c8:38:35:49:ab:
                    ce:b2:a2:29:b7:60:82:79:fe:b1:8a:7d:17:34:20:
                    9d:ab:c1:e9:e6:b6:a0:c3:c5:26:86:fa:0c:9a:4e:
                    7b:92:da:d7:a5:50:3e:39:40:ac:bf:d9:03:27:16:
                    5d:c7:99:05:a6:de:96:d2:98:9e:28:c5:9b:85:7a:
                    f4:58:c8:83:66:f9:0f:d0:cc:fe:93:26:a9:60:4a:
                    a0:ac:e0:33:ab:19:a9:7e:98:64:e8:f5:af:d8:e6:
                    35:95:74:61:64:e9:b9:91:8c:aa:45:08:ad:3a:68:
                    0c:60:1d:86:5d:24:e8:72:3b:7a:1d:99:86:c4:8f:
                    2b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:07:C2:29:9E:78:21:3E:26:8D:7A:33:49:E8:E2:12:64:C2:83
            X509v3 Authority Key Identifier:
                keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:04:f6:91:de:2f:ac:03:9e:96:37:8a:41:7b:22:99:c0:1c:
         02:d9:cc:71:52:51:49:97:09:59:3f:4b:5c:08:38:5a:78:aa:
         5e:18:93:27:6b:c1:8d:53:a5:d8:c1:44:79:7e:96:b9:76:2d:
         21:f2:a4:88:5f:7e:5c:48:46:a5:34:d0:fa:fc:72:de:31:0c:
         6d:bc:da:f1:06:ea:bb:06:ff:83:ed:20:34:7c:f4:71:4d:19:
         90:84:b5:4e:22:c8:54:9e:2a:82:1e:17:54:b1:a3:9f:74:8b:
         f9:63:8a:38:80:a8:a2:2b:c3:f8:e3:37:cc:30:77:56:3f:88:
         a4:30:a2:16:2e:ef:19:85:99:e4:87:3b:24:8c:5d:40:e4:32:
         92:24:5f:cd:8b:4e:7f:19:22:b5:ff:77:6e:5a:7e:38:93:a2:
         b7:19:89:c2:da:d2:75:55:5d:bf:25:a9:5c:a9:ab:42:1c:cb:
         83:0e:e6:d1:ee:67:c6:30:4d:5c:8f:5a:de:7f:1f:d1:e1:cf:
         7c:f1:a3:b2:63:30:a2:b5:3d:8b:37:c6:1e:99:36:15:cb:6f:
         5b:65:8d:d9:7b:ea:55:24:15:f2:5d:61:68:fc:61:37:f2:8e:
         dc:7f:9f:c9:6f:73:ce:40:a1:2a:80:25:a5:c5:f1:b1:36:aa:
         01:1c:4b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:29 2026 by rpki-client