Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
File:                     wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json)
Hash identifier:          W+wDC33UrJuGRUmt2ThhIir2QmcWn+sTdoMgi6CqlNM=
Subject key identifier:   EB:E6:CB:F4:D1:78:B3:6F:4A:D9:4E:55:63:D1:32:94:AD:E6:3A:8D
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Certificate issuer:       /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial:       019D25F0F9B07F16FCAACD1DCC28897C03C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
Manifest number:          1884
Signing time:             Wed 25 Mar 2026 17:00:42 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:42 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:42 +0000
Files and hashes:         1: TpnpN44Bjwn-KM0mOzvPS6-zdOY.roa (hash: hWRJEjJqT6dnr6XOVn4Lz5LpaCYeo/xiRnTEsF4dKwk=)
                          2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: NVAXtz2hMflOG3ZPbpBfPXjMYKODSMmytRqr6U14uWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f0:f9:b0:7f:16:fc:aa:cd:1d:cc:28:89:7c:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
        Validity
            Not Before: Mar 25 17:00:42 2026 GMT
            Not After : Mar 26 17:00:42 2026 GMT
        Subject: CN=ebe6cbf4d178b36f4ad94e5563d13294ade63a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:e0:9d:80:c2:51:d1:5f:75:f3:76:cf:91:
                    e9:42:d5:e7:c3:df:20:89:c1:ac:2c:b0:f9:cd:56:
                    83:d1:ee:1b:5d:9e:f2:e1:f9:d2:17:39:3f:d5:15:
                    06:c9:35:0e:1c:3c:b7:31:e0:3f:f4:bf:18:b8:b3:
                    78:d3:6d:0b:42:3e:66:6b:0f:dd:a0:46:a9:11:67:
                    bc:7d:be:c2:3a:bb:63:44:51:2a:d7:d1:61:54:4b:
                    0d:5c:6e:1c:1a:ba:0b:61:8f:a1:87:fb:04:2f:2d:
                    c0:ea:49:28:8b:e5:31:fc:89:95:37:cf:c7:68:e1:
                    ff:64:77:43:98:6c:2b:77:42:7c:69:66:9c:8e:47:
                    35:48:fb:f6:ae:ad:89:9f:65:0b:a5:ad:b0:91:25:
                    da:81:66:ec:31:d8:8b:9a:5a:af:02:aa:c0:ce:54:
                    af:e9:d7:2b:b8:87:e6:57:5c:18:88:26:19:51:cd:
                    30:cf:9f:07:6f:b1:4f:78:ac:86:8b:c6:8f:d4:4b:
                    6e:46:52:c6:fb:00:16:69:1a:22:3c:0a:4d:e1:c4:
                    f6:dc:d2:ff:f2:0f:47:c6:68:73:b2:9c:4c:c0:58:
                    52:5a:d6:c2:97:58:a1:42:c9:3d:15:4e:ec:9c:65:
                    0a:36:8f:c1:d0:98:01:66:b3:33:c6:69:46:61:7c:
                    58:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E6:CB:F4:D1:78:B3:6F:4A:D9:4E:55:63:D1:32:94:AD:E6:3A:8D
            X509v3 Authority Key Identifier:
                keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:1c:89:1b:b1:a5:50:a9:71:b6:20:2b:6f:cd:e6:d4:df:39:
         06:fc:a4:09:27:cc:f4:30:1d:27:5f:51:12:d7:b8:eb:b2:90:
         63:75:13:18:d2:22:85:2d:35:c5:b6:e3:5b:96:92:27:d8:0b:
         fe:cd:b9:9e:5e:ef:3b:a7:90:4b:42:84:82:17:cb:bd:7e:87:
         c0:15:11:bb:d8:ee:7c:d6:19:8f:a8:42:56:b6:3f:7b:f4:8a:
         06:0d:fa:92:86:86:83:39:e0:d7:0f:a8:ae:af:2d:55:9b:7f:
         76:45:ae:b2:24:fa:40:e0:88:5a:38:ea:bb:82:a2:c9:43:59:
         ce:8e:16:31:54:51:f6:b4:d3:06:62:f2:c6:57:2e:a2:91:b0:
         b7:5f:78:66:28:e1:3f:5b:ce:de:85:61:39:0d:a1:8d:df:18:
         16:d3:2c:00:a2:e8:44:5b:e5:60:5a:64:03:bd:68:e0:09:cd:
         f4:4f:bc:30:67:ad:a5:ca:e6:df:d0:88:8b:4a:f6:3a:5c:0f:
         26:2a:87:b3:08:33:3d:fa:ab:aa:b2:77:59:61:12:20:69:01:
         39:4e:e2:50:18:32:89:b6:06:7c:58:93:ed:35:4b:14:f2:cc:
         57:c2:13:f9:7e:f9:e2:09:39:ef:65:c6:96:2e:8a:c9:55:d9:
         64:e3:c2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:28 2026 by rpki-client