Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
File:                     wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft (raw, json)
Hash identifier:          0hBxIb8SxEuw5xcydu6A/VsJLlRaUFAuJDfCO8HWM1k=
Subject key identifier:   E4:D2:49:69:37:13:E5:F5:F1:3B:41:46:12:AB:F0:A6:62:8E:48:0C
Authority key identifier: C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D
Certificate issuer:       /CN=c0fec178763a701e2211672e2e36e6d527f41f3d
Certificate serial:       019D273AAF3222ACCE9664F30BF8897536CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
Manifest number:          181C
Signing time:             Wed 25 Mar 2026 23:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:50 +0000
Files and hashes:         1: wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl (hash: DAnvSCC1RbAyrXzCrjW1YlHsBW+hMATgNk0ALaQyWJ4=)
                          2: yfmWl96PzM9pyIbZ5EPRCxFG9Cs.roa (hash: hd3FjHB2J7f74Ha4VWANSQoXs5CpDSjj1y/GMppuuQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:af:32:22:ac:ce:96:64:f3:0b:f8:89:75:36:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fec178763a701e2211672e2e36e6d527f41f3d
        Validity
            Not Before: Mar 25 23:00:50 2026 GMT
            Not After : Mar 26 23:00:50 2026 GMT
        Subject: CN=e4d249693713e5f5f13b414612abf0a6628e480c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fa:be:98:86:23:15:27:9a:64:99:10:42:13:
                    bb:d3:38:6c:dd:bd:76:b6:27:58:d1:4b:52:35:f7:
                    00:2e:86:b1:82:0b:fd:7d:8f:1b:cd:a5:70:b3:45:
                    aa:0f:21:3a:10:40:67:0d:b8:0e:69:5e:ea:1a:53:
                    69:16:f4:b0:40:24:bc:cd:40:06:f4:c9:f0:31:fc:
                    05:df:c5:ed:6c:7f:53:ca:19:0f:5c:e1:47:e7:6c:
                    bb:d4:4d:68:ce:33:bc:82:42:9d:62:cd:dc:7b:56:
                    43:55:ab:65:29:e8:f8:59:b1:ee:65:e9:cf:4c:5a:
                    6d:44:3f:5a:ec:c3:37:7c:6d:af:06:35:26:7e:d1:
                    6e:dc:e7:f8:09:b7:1a:e6:5e:dd:5e:11:e1:1d:bf:
                    5e:cf:ea:f2:6f:a8:72:35:ea:85:86:be:5e:a0:c5:
                    cc:f3:e3:18:bb:21:df:f4:e3:8a:ce:94:e8:52:3e:
                    22:e3:a8:4f:06:a8:99:b5:6d:c3:1d:67:e2:c4:b0:
                    7e:ee:4b:de:10:87:df:bc:65:04:d3:51:1c:5e:81:
                    43:4e:1c:32:e1:f4:76:ea:75:6f:9c:fa:30:d7:a4:
                    93:c6:2c:44:c1:e7:f7:a7:23:e1:dc:cc:19:85:aa:
                    a0:f7:4f:98:22:89:2b:4d:2f:c5:80:7d:c1:b9:d3:
                    70:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D2:49:69:37:13:E5:F5:F1:3B:41:46:12:AB:F0:A6:62:8E:48:0C
            X509v3 Authority Key Identifier:
                keyid:C0:FE:C1:78:76:3A:70:1E:22:11:67:2E:2E:36:E6:D5:27:F4:1F:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/492e56-0bae-461a-8f65-0390ed7732a5/1/wP7BeHY6cB4iEWcuLjbm1Sf0Hz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:ae:32:07:86:da:6e:57:64:a1:da:10:9c:1c:9b:29:4b:f7:
         07:07:2a:f7:df:78:75:73:1e:54:2d:b9:a5:1d:d0:b0:45:48:
         e5:82:f0:9c:7a:1c:14:79:d3:a0:80:9c:8e:0d:24:78:92:0a:
         00:8e:05:69:34:8d:c0:1f:c0:e1:8b:39:e9:f9:44:48:3b:b0:
         fc:5f:8e:a7:13:b3:e9:b4:29:2d:f7:f0:2d:4e:d7:5b:a4:29:
         d8:d7:fa:2c:3a:27:58:d9:13:89:9a:ea:31:ad:c4:8b:c8:c5:
         c1:a9:cc:66:6f:29:57:11:b0:75:1e:7d:96:bd:32:9a:dc:20:
         c2:1f:94:05:b5:4d:de:14:5b:6b:56:93:65:cc:5e:72:ef:a6:
         50:80:3f:00:a9:7c:a4:04:5f:af:06:c5:12:7f:8d:2d:13:34:
         1d:0a:88:6b:04:81:b0:96:0d:e8:76:47:99:c2:1b:47:a1:23:
         9e:5e:c1:8e:c4:2b:db:0f:04:d4:10:c4:24:06:1d:2a:1c:2d:
         2d:03:55:e6:cb:bf:12:80:b3:e9:72:43:12:2d:9d:ff:ea:e9:
         a9:dc:7c:57:e9:bb:fd:6b:76:c5:a9:5c:f5:df:68:e3:73:ff:
         db:a1:23:c4:3b:94:f7:8a:2b:5e:ea:67:df:f6:aa:eb:d2:01:
         da:dc:6e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:54:34 2026 by rpki-client