Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File:                     wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier:          nlN5LnTrRfv4NbdFU4Di5+WSatJ1RjTx/inF11MK2PQ=
Subject key identifier:   43:43:A1:5A:8D:F6:AF:ED:8B:09:45:F0:60:FE:DE:BC:7F:55:88:44
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer:       /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial:       019D28F320A45609022F28E65A96426B4736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number:          141F
Signing time:             Thu 26 Mar 2026 07:01:55 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:55 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:55 +0000
Files and hashes:         1: GWCQDoCj1EnoGr4G4aQGE_yERiw.roa (hash: jbmBzxR3cM82xnuqQI0lxiYS+XoV+IrgikeHq5X9ZmM=)
                          2: Ip5ACJDYkdYVRDgecr_VT1IS1Lo.roa (hash: Bnj3IDrJ882iRsnMbr53VXkROwmtnT/7J8NLZ7LP/VA=)
                          3: fJg4dPBbW9V0V9GJxGd2E1IZ3Q8.roa (hash: 9DTO9B8YoPB/uUt1Im78LbNqxaAWyEGXlRRw0zOgX3E=)
                          4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: 9OolEnE+YPKEGMhG3toHSgQkiyO3RFVp6PTJdG/CAfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:20:a4:56:09:02:2f:28:e6:5a:96:42:6b:47:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
        Validity
            Not Before: Mar 26 07:01:55 2026 GMT
            Not After : Mar 27 07:01:55 2026 GMT
        Subject: CN=4343a15a8df6afed8b0945f060fedebc7f558844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ab:ca:fa:c1:33:2c:32:a9:a1:50:5b:d0:9b:
                    40:48:29:f0:da:a7:13:59:02:00:8c:05:1f:b5:ba:
                    24:d6:10:85:a0:9a:3c:e4:73:c0:3a:46:3f:f0:7f:
                    d5:28:40:40:f3:66:02:a5:1b:15:3e:c8:bc:58:af:
                    c3:36:4c:9f:52:fb:c4:c3:1f:91:00:bc:77:80:a6:
                    7c:ac:4d:9f:b2:f0:c4:86:d5:4b:bb:8a:76:d5:99:
                    fa:be:52:b5:6e:9a:34:a8:d8:3c:cc:3f:cc:02:40:
                    e4:03:44:59:e7:00:7e:06:54:a3:7c:1a:79:dc:eb:
                    c9:fe:10:0f:af:72:45:7c:28:48:80:69:4c:72:00:
                    7e:79:52:16:9b:d2:74:4c:0e:10:2e:4f:34:df:21:
                    db:bf:a5:2a:0b:66:d1:7d:b1:9b:8d:90:86:69:00:
                    72:8d:55:9a:f9:4e:69:bd:9a:7c:60:c4:93:09:e0:
                    9f:65:4f:3a:1f:57:5f:09:c3:17:c3:e5:64:e4:c5:
                    73:62:25:a0:83:09:ee:a1:5c:b6:34:c4:ce:33:1c:
                    8b:d3:ef:cb:5a:fb:91:e3:93:2b:66:ff:9e:d6:f0:
                    b4:35:52:96:eb:ce:b4:ae:06:2c:69:1a:2e:95:c4:
                    0d:2b:7d:53:0a:55:93:ec:f0:9f:af:62:c2:54:1a:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:43:A1:5A:8D:F6:AF:ED:8B:09:45:F0:60:FE:DE:BC:7F:55:88:44
            X509v3 Authority Key Identifier:
                keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:7d:33:41:26:d5:ae:f7:e7:fc:a3:b8:de:bb:78:ec:8e:
         eb:a9:af:93:f1:aa:61:63:98:b4:bd:ce:3a:b3:2b:78:d3:5d:
         32:14:eb:fc:9f:04:34:39:6d:b4:00:14:d2:dd:32:76:5e:ac:
         c5:43:ac:34:11:13:21:0a:34:86:5a:7a:af:8a:b1:13:33:0b:
         2f:92:d6:ab:88:75:8c:1c:81:e7:e0:35:ac:d3:43:89:f5:1f:
         99:94:37:0f:a9:3f:88:2c:2c:3d:d7:62:11:90:7e:88:2c:8b:
         54:6d:03:1f:83:12:20:4a:4a:76:18:34:1d:b0:2a:81:a2:fe:
         83:90:26:ea:dc:20:87:c4:09:d2:84:dc:ea:b9:6f:8d:54:a9:
         6b:b5:40:fc:ec:2f:aa:95:8b:e3:4c:25:6e:ca:1f:a5:6f:0b:
         bb:a6:63:98:67:e7:fe:90:51:c2:78:58:c0:03:05:77:88:f8:
         a3:94:f8:49:2e:aa:79:4b:0d:62:b4:bf:06:a2:80:09:fd:30:
         8c:20:7f:ac:a4:71:0c:5e:a7:ff:30:98:7a:70:04:14:83:b0:
         96:d2:ea:79:54:cd:95:26:41:ae:fd:f8:2b:90:46:f0:36:06:
         20:26:35:ba:7d:5b:ed:a5:47:20:d9:a9:56:6b:22:d3:af:a6:
         ae:b7:a6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:10:32 2026 by rpki-client