Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
File:                     w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft (raw, json)
Hash identifier:          n8eS1gLZ6GU90VNuAjsN/7dSW3kEahmp6y1teiSj9aY=
Subject key identifier:   20:88:F4:69:5D:58:17:BE:AC:0F:6E:BC:64:FF:D4:D8:61:A1:10:9D
Authority key identifier: C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
Certificate issuer:       /CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Certificate serial:       019D28BB07F2D14980258A470F09D029A16D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
Manifest number:          0EDC
Signing time:             Thu 26 Mar 2026 06:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:39 +0000
Files and hashes:         1: sCTmUAneZSo_Qf_IeGEo-MF1AiI.roa (hash: /cRSN7x2xsu9IZI5eZOpkt6ueyQBfXfh+7fv4li0zlA=)
                          2: w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl (hash: cbyXLI6H+h4lU9yu6Eco6fkN+80FqFReDsO2a5Mfvs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:07:f2:d1:49:80:25:8a:47:0f:09:d0:29:a1:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
        Validity
            Not Before: Mar 26 06:00:39 2026 GMT
            Not After : Mar 27 06:00:39 2026 GMT
        Subject: CN=2088f4695d5817beac0f6ebc64ffd4d861a1109d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:48:b5:1e:75:d7:e0:2f:84:8f:79:73:b9:2c:
                    e8:fe:8d:eb:6a:2d:69:3e:32:3f:c3:3b:9f:ad:d7:
                    25:6d:45:88:e2:7d:4f:2a:57:5a:b0:0a:5a:c8:95:
                    ad:19:a1:6b:e6:25:96:82:ef:e2:57:1a:1e:66:6b:
                    88:8c:a8:2f:f7:84:23:d3:05:04:68:e5:6c:73:62:
                    94:e1:42:4a:93:3b:7c:a2:02:ac:35:1b:13:9d:fb:
                    c1:39:9d:f7:e2:88:93:d3:89:e6:0b:ab:57:5f:e1:
                    e1:92:30:67:3b:27:51:5f:72:a9:9d:5e:40:2c:92:
                    7b:03:98:b2:5d:0a:1c:ab:b9:e4:29:53:ae:b6:a9:
                    22:98:e3:5e:3d:66:15:68:d6:5c:6c:88:16:be:b3:
                    a3:6e:f9:fd:99:73:5d:bb:70:37:86:17:dd:fd:38:
                    83:4f:ba:14:98:2f:43:e9:a3:38:56:16:52:66:8d:
                    63:88:61:cf:28:4f:29:36:81:09:e2:f6:31:3f:37:
                    2a:4c:37:da:86:0d:8d:19:c9:2c:8f:7e:07:39:14:
                    66:ea:46:2f:9b:cd:4b:f5:4b:c1:a5:1e:b3:64:23:
                    de:00:01:a7:9d:28:9c:fd:4c:f2:00:6c:cb:96:fb:
                    93:a7:fb:e6:85:6d:02:5c:43:40:54:a3:69:ee:89:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:88:F4:69:5D:58:17:BE:AC:0F:6E:BC:64:FF:D4:D8:61:A1:10:9D
            X509v3 Authority Key Identifier:
                keyid:C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:37:69:5a:0b:91:80:ef:85:1c:17:b5:5d:13:08:30:7f:bf:
         92:3a:c9:12:45:ae:db:81:2d:2c:25:3b:c7:f6:93:ec:57:9d:
         91:a6:57:2c:a1:2c:d6:fb:d8:6d:4f:51:74:60:82:95:86:be:
         8e:ee:99:84:4f:83:99:2b:0c:f2:c1:31:66:2c:17:db:18:35:
         60:82:8a:89:af:77:94:56:49:86:88:42:5d:7f:cc:91:fe:dd:
         aa:03:47:f0:2e:c0:68:b1:10:3f:6d:38:34:c7:aa:3f:de:9a:
         b2:97:e1:98:38:ff:65:99:06:00:7f:4e:01:cd:a0:91:c1:30:
         c7:e6:15:4b:ad:1c:85:e5:b7:39:74:04:1f:7b:5a:90:43:24:
         6b:f8:ab:ae:56:70:29:81:15:0a:5a:0e:7b:89:77:16:56:2b:
         36:b4:bd:e2:7b:16:3a:7b:78:16:23:1c:cc:fb:ab:5a:a5:8c:
         98:62:4e:4b:cb:8a:2c:21:c8:31:56:50:3c:44:1a:dc:8e:ed:
         5c:69:65:08:fa:ed:0d:9b:12:de:5c:79:03:34:ac:01:97:3a:
         f1:c7:5f:be:3c:fd:63:04:a9:14:11:44:c2:d5:a5:18:01:ea:
         b9:22:5a:48:4a:d1:6b:70:0e:7d:17:c0:8f:ed:b5:b1:8b:36:
         50:2f:4d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:10 2026 by rpki-client