Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c7aaaf-4484-4da5-81e4-f3378325139e/1/wSNhAGHhNGZvWD_aPcvfGVRt99E.mft
File:                     wSNhAGHhNGZvWD_aPcvfGVRt99E.mft (raw, json)
Hash identifier:          kTLuLI2rpCLh9lPRxLNRGu1hvQMaQdeUdX19Lw8yU68=
Subject key identifier:   43:12:31:54:9F:96:9D:16:24:CA:14:E5:C9:5C:78:49:DF:3D:C4:D8
Authority key identifier: C1:23:61:00:61:E1:34:66:6F:58:3F:DA:3D:CB:DF:19:54:6D:F7:D1
Certificate issuer:       /CN=c123610061e134666f583fda3dcbdf19546df7d1
Certificate serial:       019D33AD2A4469BA266E817F8972F164C9B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSNhAGHhNGZvWD_aPcvfGVRt99E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c7aaaf-4484-4da5-81e4-f3378325139e/1/wSNhAGHhNGZvWD_aPcvfGVRt99E.mft
Manifest number:          9F
Signing time:             Sat 28 Mar 2026 09:01:19 +0000
Manifest this update:     Sat 28 Mar 2026 09:01:19 +0000
Manifest next update:     Sun 29 Mar 2026 09:01:19 +0000
Files and hashes:         1: UJp0G55OVxFzWfJ279wSrQj6Lfk.roa (hash: pXEK5q/7meAr70Ql35/M41ZLbFzL5KF3r8+IhuG/H00=)
                          2: wSNhAGHhNGZvWD_aPcvfGVRt99E.crl (hash: cICSTVJSpINJVvIF6xpja4zfcutM2AcSdvcBmsiK6OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/c7aaaf-4484-4da5-81e4-f3378325139e/1/wSNhAGHhNGZvWD_aPcvfGVRt99E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/c7aaaf-4484-4da5-81e4-f3378325139e/1/wSNhAGHhNGZvWD_aPcvfGVRt99E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSNhAGHhNGZvWD_aPcvfGVRt99E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:ad:2a:44:69:ba:26:6e:81:7f:89:72:f1:64:c9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c123610061e134666f583fda3dcbdf19546df7d1
        Validity
            Not Before: Mar 28 09:01:19 2026 GMT
            Not After : Mar 29 09:01:19 2026 GMT
        Subject: CN=431231549f969d1624ca14e5c95c7849df3dc4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:34:63:7f:d1:e1:f0:7f:a4:93:96:60:04:73:
                    5c:78:ce:e5:91:58:cc:70:48:ac:dd:5b:19:2a:bd:
                    f3:3c:0b:24:79:7f:da:a3:af:3e:3a:04:f0:94:af:
                    ab:50:a0:6e:aa:00:c7:71:d3:c9:57:13:2a:e1:9f:
                    75:e8:43:3a:3b:53:cd:81:c9:29:ca:89:07:e1:4b:
                    53:9d:0e:81:a9:cf:37:b8:88:7e:e2:7a:4d:ae:30:
                    ac:b4:d9:98:4e:c8:3b:35:dd:a0:19:4b:8d:d6:d3:
                    9e:48:2f:3b:cf:7d:15:da:aa:6d:55:56:63:1b:2f:
                    38:38:e1:44:6d:9e:22:18:23:5d:7e:ea:f3:3c:eb:
                    79:9f:2c:58:ba:25:27:59:b4:9b:86:b3:ec:a8:a8:
                    21:94:52:27:a3:2c:be:60:ca:f2:b1:c6:e8:5c:ef:
                    54:9f:52:ea:2c:a2:a6:90:b5:53:58:8f:91:74:5b:
                    d3:6b:c6:49:33:21:11:19:d3:0b:38:90:64:84:04:
                    61:18:43:bb:41:5c:75:b4:34:b2:b2:52:65:c8:66:
                    b4:85:c8:84:ca:68:2c:4f:f8:46:4e:d8:31:4a:2b:
                    90:51:52:44:4f:09:3c:f3:f7:f4:74:82:17:d7:08:
                    77:7d:7f:00:3c:8d:96:fc:fc:66:fc:f8:a4:fd:5e:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:12:31:54:9F:96:9D:16:24:CA:14:E5:C9:5C:78:49:DF:3D:C4:D8
            X509v3 Authority Key Identifier:
                keyid:C1:23:61:00:61:E1:34:66:6F:58:3F:DA:3D:CB:DF:19:54:6D:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSNhAGHhNGZvWD_aPcvfGVRt99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c7aaaf-4484-4da5-81e4-f3378325139e/1/wSNhAGHhNGZvWD_aPcvfGVRt99E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c7aaaf-4484-4da5-81e4-f3378325139e/1/wSNhAGHhNGZvWD_aPcvfGVRt99E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:1e:d0:c3:0a:67:3d:9f:a8:83:9c:f9:3c:73:19:10:eb:
         cd:37:8c:c1:6a:6b:9e:12:b6:13:df:90:0a:1b:47:de:cd:8f:
         94:ec:75:9c:27:50:c1:aa:e5:bd:73:81:c1:25:e1:94:94:bd:
         69:f3:96:a3:2b:1d:bf:13:8a:30:91:c8:2d:46:a9:8e:40:de:
         03:fa:5a:f5:19:5c:83:b2:76:ae:5e:22:66:92:74:9d:71:6a:
         6d:ed:c2:d4:4c:cc:d5:33:9b:b9:d1:a7:08:a1:2e:fc:cc:82:
         d5:e2:42:55:d8:b0:dd:ce:00:c0:9e:76:65:a5:31:16:47:11:
         db:d7:fb:7d:a2:20:2c:da:eb:f0:38:81:1e:d5:9a:08:4a:55:
         20:34:c9:3d:84:b6:af:1a:40:b3:cb:79:a6:0f:a0:6b:c6:dc:
         57:67:d4:dd:5e:e3:eb:de:57:c0:40:b7:7c:8b:27:f0:11:7a:
         ab:a8:cd:29:13:de:03:a7:70:d6:84:26:1b:4a:01:bd:21:ba:
         6e:31:09:68:2c:77:52:f0:a7:de:37:9f:6f:7e:b4:60:82:40:
         52:56:58:87:49:09:52:62:f4:4f:af:fb:a7:bd:b4:f0:fe:3a:
         fd:07:96:ce:1c:fd:f5:1b:63:ca:9b:e8:92:ac:fa:8d:9c:f8:
         46:1d:42:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:30 2026 by rpki-client