Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File:                     wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier:          X3Tcugw7Ohx4/DVsRmRZ0HZqJEomoiGXcOyEnKtQRhI=
Subject key identifier:   2E:91:3C:07:BC:AD:6D:9F:51:8B:9D:EC:9C:AD:E6:D0:42:BA:66:C0
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer:       /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial:       019D2771CDE78A95E6DBE7739073F194589D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number:          0764
Signing time:             Thu 26 Mar 2026 00:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:02 +0000
Files and hashes:         1: J4rL1Jg5V2IoUUTVBjeovLJnAeI.roa (hash: HuC3dI4gjcfntzO7yeVJHjKTBqW9v5vPfeXmEq56k1k=)
                          2: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: p+jxqR5FoeWG4/HnrtnrAvjICFBYl/pdxCbI2yTUIRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:cd:e7:8a:95:e6:db:e7:73:90:73:f1:94:58:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
        Validity
            Not Before: Mar 26 00:01:02 2026 GMT
            Not After : Mar 27 00:01:02 2026 GMT
        Subject: CN=2e913c07bcad6d9f518b9dec9cade6d042ba66c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:34:bb:0d:63:d4:53:71:22:f8:41:09:33:
                    23:a7:44:7c:21:1c:a6:bf:5a:07:3f:8b:75:d7:12:
                    60:97:4f:30:cc:32:f3:16:ee:1f:d3:63:7c:ac:ca:
                    1d:ef:e2:c0:66:d5:c1:75:04:4d:22:95:31:b6:30:
                    87:32:e8:8b:59:98:cb:d5:e4:1c:79:e3:33:5d:68:
                    27:3c:15:c9:e5:b0:1b:11:d4:36:db:ea:eb:c2:57:
                    98:77:04:06:71:1b:66:48:57:0f:d2:78:aa:55:32:
                    14:27:25:86:78:0a:f9:be:b4:5c:f5:62:64:33:c0:
                    9e:7c:37:31:c0:e2:f4:28:bc:77:c8:15:ae:8f:b4:
                    eb:3d:4b:3e:47:44:ee:82:42:a0:c9:21:cc:69:34:
                    67:b2:bf:c1:fd:01:38:fc:06:5c:72:39:ca:19:2b:
                    82:a0:8d:31:0b:bd:74:89:50:fb:1d:81:94:0b:d7:
                    8e:44:c8:5b:ad:e2:67:57:6f:bd:40:83:af:19:f7:
                    7f:9e:16:9d:c7:7c:8c:c4:57:dd:16:89:fa:c6:13:
                    78:06:b6:79:32:ff:93:b4:a1:e2:66:a3:e7:a1:50:
                    79:b1:f8:27:60:16:ed:9d:a1:4e:cf:3d:2c:d9:d1:
                    0c:9f:08:8d:f9:43:55:fc:f3:a4:d9:0e:ef:a8:e8:
                    92:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:91:3C:07:BC:AD:6D:9F:51:8B:9D:EC:9C:AD:E6:D0:42:BA:66:C0
            X509v3 Authority Key Identifier:
                keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3c:86:75:75:d6:87:6c:fb:b9:ba:1f:2e:b3:83:5b:f0:0b:
         07:48:13:02:fd:4b:cf:ad:5d:de:6b:3d:e0:a5:46:b6:32:3b:
         24:d4:26:50:6f:42:95:98:84:9d:cd:57:a5:ff:2f:6d:19:ba:
         1e:22:d7:29:4f:f7:ba:4f:24:b1:55:34:b0:e1:66:0c:49:c2:
         bd:35:19:88:96:79:43:47:24:41:b3:79:24:f7:06:a8:8d:01:
         ac:29:0b:3b:46:07:91:e3:89:41:53:ab:f0:f3:ac:d8:43:3a:
         58:ce:79:ab:0b:09:77:07:cf:1c:97:e8:fd:e2:0c:e5:eb:d9:
         29:41:52:14:4b:39:40:ed:dc:6a:6a:98:73:eb:a3:10:ca:5d:
         94:0d:5e:10:fe:aa:2b:7e:f8:27:1e:68:eb:f8:b9:a8:4e:0d:
         d3:b7:c3:84:c7:9a:85:95:8f:42:ed:a8:58:96:bf:6d:f5:63:
         98:ed:ba:9b:61:b7:8a:d5:ad:ad:59:d6:6a:19:58:31:39:01:
         50:2a:e0:9f:1b:8d:66:29:d9:4c:76:99:33:9b:e7:50:69:ce:
         64:a2:ca:de:51:ce:7a:42:c9:15:98:ce:83:c9:a4:7d:bc:9f:
         50:ce:c6:82:64:31:cc:a3:1c:36:81:3a:5d:bf:94:90:17:bf:
         e6:ed:aa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:36 2026 by rpki-client