Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
File:                     w1re68KNfif9nrnvsjVR2uILHQ8.mft (raw, json)
Hash identifier:          2SvPWVMjmgslzkhkeZK0V6dT4+hOuGKL1iD6VA0lQBg=
Subject key identifier:   36:D9:0F:61:C4:C5:86:49:6F:A9:2E:C9:48:4F:B0:87:D6:8E:67:68
Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F
Certificate issuer:       /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
Certificate serial:       019D27E0819FC060290B4F572F87618E183C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
Manifest number:          1188
Signing time:             Thu 26 Mar 2026 02:01:57 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:57 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:57 +0000
Files and hashes:         1: WAm_tIyDAPRV3BNqWG57uTp7CzY.roa (hash: qS+vZJ+Ti9+HN+VBxaCgQjtizbbFP3FemK3D8+0KoO4=)
                          2: w1re68KNfif9nrnvsjVR2uILHQ8.crl (hash: 3P9gKULZ73A65cmEspABXXWB4E0OQXS1+Exw+L4aNO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:81:9f:c0:60:29:0b:4f:57:2f:87:61:8e:18:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f
        Validity
            Not Before: Mar 26 02:01:57 2026 GMT
            Not After : Mar 27 02:01:57 2026 GMT
        Subject: CN=36d90f61c4c586496fa92ec9484fb087d68e6768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:11:15:ef:21:59:eb:67:68:bb:06:af:34:
                    d1:4e:db:6b:b5:9e:e2:3a:b4:54:ca:a2:f7:a3:d9:
                    45:24:a1:36:34:7e:d3:14:00:d5:02:7f:f7:de:0f:
                    a7:97:76:5b:91:e7:b7:2d:c9:16:b8:bb:c1:db:cd:
                    9a:6e:4f:2a:e7:9b:b6:72:e7:ca:bc:5e:73:b0:8f:
                    4b:3a:34:10:02:35:89:2b:11:36:44:8c:fd:09:a6:
                    8a:9b:e4:de:8b:2f:0c:c4:67:5b:65:aa:4d:fd:d6:
                    02:15:bc:e0:49:32:5b:08:cd:5c:3f:02:86:90:5a:
                    72:e6:05:e9:e7:ce:ca:1e:15:53:35:0b:59:8d:19:
                    94:28:a6:bd:d4:72:e0:56:5e:1f:bd:20:a8:91:18:
                    37:88:53:c9:21:85:ad:a3:0c:96:a8:7f:e8:2b:9d:
                    ab:3f:74:c9:4f:65:cb:18:e9:e7:02:3b:48:54:35:
                    56:89:1d:ac:d5:ce:8b:60:9d:02:92:07:1b:f0:e8:
                    dc:6a:03:64:f2:9f:e8:b0:3d:de:22:1c:72:e6:7f:
                    54:b8:0a:f9:93:4d:74:7f:0c:8f:dc:5d:4d:38:de:
                    bc:d9:69:d9:1a:39:37:27:97:f2:f6:7f:7a:03:c9:
                    5d:43:ab:df:4f:b7:b8:6c:6c:bc:a1:27:05:73:78:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D9:0F:61:C4:C5:86:49:6F:A9:2E:C9:48:4F:B0:87:D6:8E:67:68
            X509v3 Authority Key Identifier:
                keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:59:86:de:e4:fc:c8:9f:14:2e:20:1f:a5:87:cf:ab:ad:68:
         f7:a5:05:f5:35:17:32:d3:21:e0:c8:fb:61:ec:21:66:27:6b:
         3b:e6:1b:f5:fb:ab:0a:5b:9e:09:90:8f:8f:5d:0c:e2:48:c8:
         7b:de:8f:ec:b3:3a:af:b5:0a:95:c3:0c:69:7f:e4:03:f4:31:
         ed:db:de:11:e5:8f:82:34:7a:c4:53:ba:bd:6c:80:eb:9e:ba:
         e3:92:c9:b5:37:7f:72:7a:a2:95:b8:25:56:e2:0b:79:65:2e:
         2a:46:52:fa:1f:3d:6e:6b:be:88:e9:64:6f:d0:d4:7c:0d:50:
         bf:a1:20:99:7d:9d:6b:6d:b2:74:15:a1:2c:7d:02:e5:84:f0:
         d8:ee:b3:ba:22:90:1a:65:59:78:25:08:36:ed:44:98:3c:10:
         f9:84:61:88:0a:94:ab:08:93:43:92:e2:57:a7:c5:45:92:bd:
         fb:5d:09:e5:aa:1f:ce:6e:c9:fc:9d:e1:d3:7a:8a:c1:8a:9a:
         06:70:e0:fc:a1:6b:d3:31:c5:b4:f4:bb:38:47:93:a0:1d:72:
         d0:e1:9a:cb:46:d4:ae:b3:5d:8f:52:a9:84:50:05:0a:84:06:
         c0:61:22:1a:1a:1e:8e:94:eb:52:0d:39:34:66:c4:4a:08:ce:
         36:20:d8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:58 2026 by rpki-client