Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          9Y9JX7K1ugcDiUeuSJFfSJwJXB7euyVjkjjmOEzX3c0=
Subject key identifier:   BC:08:84:56:D1:19:3B:58:E7:55:05:E6:84:EC:C6:E3:AF:E6:B9:2E
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       019D28F32B575179FA309226A0C12CF414A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          09CE
Signing time:             Thu 26 Mar 2026 07:01:58 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:58 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:58 +0000
Files and hashes:         1: 3GavzMAbCuU_7XxsDf7ryjx5mm4.roa (hash: 5lj6u+PVxfRxZzq0tJiNI844Q2BPDCOyHDGilv4wvUo=)
                          2: D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa (hash: h7ovrPWRmdbJ21Y1DD2eFw9675DOds3HxoGhsEEYTPc=)
                          3: JgYNS7DEy60UynMFzMYucXhQFk4.roa (hash: YktVSM9QeFV5rkpseR/p+0DV/UAZK4Qj6jReFpK/x6s=)
                          4: N30OROJ-GP4W9Jh1DhollfBhBIc.roa (hash: 0DZXZuzJNd94W/XmII9UfJ/AeUVNfTn07t17yvOOlh0=)
                          5: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: mFnYTyXmi1pgdu24RNogbDHFBE0nAaCV9+hVDWDsmt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:2b:57:51:79:fa:30:92:26:a0:c1:2c:f4:14:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: Mar 26 07:01:58 2026 GMT
            Not After : Mar 27 07:01:58 2026 GMT
        Subject: CN=bc088456d1193b58e75505e684ecc6e3afe6b92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:66:43:fa:0e:9b:ea:d2:0a:b8:5e:4b:75:22:
                    e8:3c:49:7e:e8:62:95:7c:61:5c:89:31:67:e1:be:
                    ac:cd:7a:f8:4b:c4:2d:4f:b7:f9:27:75:42:53:05:
                    1c:70:a3:77:02:99:75:62:62:67:e7:f6:5e:a7:48:
                    b6:19:fb:6c:98:f3:4c:4e:49:91:8b:7e:08:c5:71:
                    15:b6:6e:3a:55:9e:a0:94:88:49:b5:65:6f:2f:b2:
                    c2:b5:ab:c6:80:97:90:10:30:9c:64:28:c8:b3:d1:
                    e6:b2:2d:e8:06:ab:30:c7:08:72:ab:49:44:dd:b2:
                    9b:b7:78:fa:c0:36:b0:15:2b:b9:f9:79:1c:b8:52:
                    53:bb:c7:cc:46:42:f8:94:4f:93:22:dd:7a:0c:da:
                    02:12:f0:54:f2:2d:b3:8c:06:b3:96:90:a7:9b:e0:
                    e0:e2:64:8e:70:35:28:66:eb:be:ea:6e:9f:b8:34:
                    3c:b9:ab:fb:f4:11:4b:34:20:d5:1b:26:5e:e1:fb:
                    f7:ea:2b:94:48:2c:9f:a1:ab:a1:7b:8a:4e:79:26:
                    f4:c7:0e:31:00:4f:39:35:3d:74:5e:60:4d:d4:2a:
                    5c:91:a7:e5:d7:e6:5d:48:48:13:6d:41:fd:e5:ff:
                    29:e0:02:a9:7e:5d:9c:fa:ea:02:b2:67:c1:7d:af:
                    61:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:08:84:56:D1:19:3B:58:E7:55:05:E6:84:EC:C6:E3:AF:E6:B9:2E
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c4:8b:f0:54:f7:c4:76:ab:b9:b3:0b:e8:42:0d:1e:48:0f:
         93:87:91:8e:e4:47:72:5f:e1:6b:4a:50:5f:f7:e5:5e:69:a4:
         dc:8c:14:73:3f:fc:ff:30:24:01:dc:54:bb:2d:83:ff:52:18:
         da:bf:69:66:fc:7e:f3:be:d6:48:4b:de:58:37:9b:f8:76:56:
         a0:3a:7f:87:2a:b8:ae:cd:a3:28:70:1a:08:5b:74:13:31:c6:
         fd:71:2d:f0:9d:b2:aa:ec:19:e9:4c:3f:f6:bc:51:6c:40:f7:
         a4:dc:cc:94:c7:65:aa:f3:50:9e:01:0b:d7:aa:c9:35:63:15:
         36:2f:cc:8a:c0:4f:df:cf:fd:5e:62:b6:82:50:4d:35:ed:3a:
         ff:6e:60:24:5d:e0:3f:9f:99:5f:15:ce:91:2e:1b:fa:3c:43:
         7c:ea:89:b8:a9:6f:c8:8f:a7:4e:ca:cd:2f:64:16:ce:58:58:
         70:97:87:8a:c0:8d:cd:53:22:5a:93:37:19:20:bf:84:a3:fd:
         03:fe:8d:99:3c:2a:30:a4:c8:05:05:22:06:d5:1a:b9:76:ea:
         76:cb:d1:5b:5c:e1:d6:d3:7b:39:7a:48:5d:f4:2d:c2:c5:cb:
         0c:3f:30:2d:6a:10:39:9e:d1:38:13:c5:bd:4a:1d:bb:2e:15:
         71:f5:f1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:26:28 2026 by rpki-client