Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          01Fi4Y00ZZINPvx1gIM+T/UGC+hTatXfRSJBOg3eq/k=
Subject key identifier:   89:90:76:CE:02:9F:90:D8:FA:01:D5:E2:6C:B1:E6:9A:87:9B:CC:C2
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       019D296091C7EC4E9BE676FF96E33A66D1E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          0776
Signing time:             Thu 26 Mar 2026 09:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:27 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: yWvDOBkq0zYW/FJA3LDenJDT0Ripbi7zB2zn+0jcq7k=)
                          2: lJ9R5Dh_kyvQTqID5Ptu3Jzlprg.roa (hash: GdaCvKcF3hhpCqRpHUMph71fNwvXQ4kAIUixuBm8+iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:91:c7:ec:4e:9b:e6:76:ff:96:e3:3a:66:d1:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: Mar 26 09:01:27 2026 GMT
            Not After : Mar 27 09:01:27 2026 GMT
        Subject: CN=899076ce029f90d8fa01d5e26cb1e69a879bccc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:94:4f:9f:7c:4b:5b:6c:e6:63:ad:31:83:e0:
                    a4:77:fb:77:5b:91:0d:c7:7e:f1:7a:d5:64:02:da:
                    70:3a:86:c6:08:3f:01:f5:c9:0a:73:72:c6:a1:f0:
                    52:43:fb:04:67:81:29:56:49:a0:a9:88:40:32:4e:
                    41:85:41:bd:8b:04:d4:fc:30:74:93:2a:00:36:49:
                    46:65:31:31:ea:1a:70:b9:3a:45:05:fe:e0:1f:2b:
                    6e:27:79:35:7d:4b:aa:f9:81:aa:f9:b5:2d:18:cc:
                    0c:a6:de:15:33:75:64:e1:0c:13:b5:03:44:cc:e2:
                    4e:48:9e:ab:f9:25:43:f6:07:8c:c4:b8:72:1c:be:
                    91:4a:e3:69:4b:08:50:65:57:6c:75:9f:45:53:00:
                    b8:d1:b2:3c:c6:75:45:51:dc:51:09:b5:a1:bc:2c:
                    40:fa:70:6e:29:4c:b3:4b:2f:12:63:b3:dd:78:bc:
                    23:8b:b8:26:99:e4:f9:c4:f6:6f:09:16:69:18:e2:
                    6e:37:30:54:c6:91:b7:dc:30:44:e1:3b:aa:21:70:
                    1c:4a:93:d4:2e:bd:09:5a:5c:fe:7c:3a:2d:db:69:
                    b4:d0:73:1e:71:1f:1a:52:61:40:4f:33:2e:76:98:
                    18:c8:4f:fc:2a:c3:75:d4:dd:77:d3:70:4c:9f:44:
                    80:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:90:76:CE:02:9F:90:D8:FA:01:D5:E2:6C:B1:E6:9A:87:9B:CC:C2
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f9:dc:18:0a:7c:38:49:aa:cf:e5:83:1a:72:eb:27:dc:86:
         d1:52:42:3a:10:07:24:b0:be:33:ac:bb:f9:0b:82:a2:06:80:
         4d:b0:79:fe:18:af:6b:37:68:99:fc:ef:14:f7:ec:4f:c0:51:
         71:59:fb:02:3a:99:c0:82:22:00:f6:ea:16:6c:56:4e:54:bc:
         83:3d:bc:ce:49:ee:ea:ed:50:3b:d1:da:87:3e:75:5a:a1:5e:
         4e:1f:49:0d:45:e4:ca:b7:10:d7:ce:97:44:0b:80:82:b1:76:
         75:3b:4a:41:50:dc:52:50:40:fb:9f:be:15:84:be:41:9a:cf:
         94:0c:e9:b8:69:8b:d3:6d:88:6c:78:60:c6:f0:6d:96:75:73:
         6f:8f:5f:ee:4c:00:c2:41:49:4d:ad:b7:7a:f8:65:55:15:f0:
         c2:8f:df:32:6c:1d:f2:59:b2:ea:74:a5:4f:12:7f:73:4d:6f:
         a4:aa:3b:99:45:72:87:bf:81:7b:48:d2:f5:46:3d:9b:a1:64:
         fd:f4:c2:8b:d5:7a:eb:03:7c:35:56:04:79:a3:72:50:b6:c3:
         c3:a1:41:ac:02:4f:cc:d5:31:7a:d8:4a:c0:1a:a6:20:61:98:
         96:c3:b7:51:83:82:df:05:6a:1c:8a:c3:d0:19:ce:93:b9:8b:
         1a:a3:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:22:35 2026 by rpki-client