Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File:                     wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier:          6cq59o0zmxBYOCM7U7zU3D6WJfabtuxbk/QOQQvgtOo=
Subject key identifier:   96:BC:EF:E1:3A:FA:B7:46:DB:36:23:AB:9D:4D:32:25:88:BB:D5:B9
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer:       /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial:       019D29612929E2306AA758989732AD3B4956
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number:          0D06
Signing time:             Thu 26 Mar 2026 09:02:06 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:06 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:06 +0000
Files and hashes:         1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: q7hTkXwV4h1DbxSP928/T/au7+tKNOqU2EXOPcV2/0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:29:29:e2:30:6a:a7:58:98:97:32:ad:3b:49:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
        Validity
            Not Before: Mar 26 09:02:06 2026 GMT
            Not After : Mar 27 09:02:06 2026 GMT
        Subject: CN=96bcefe13afab746db3623ab9d4d322588bbd5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:16:3f:49:59:a2:b0:c4:96:b2:fb:1e:af:4d:
                    50:17:ae:2f:54:02:d8:25:dc:e2:df:44:3a:0e:3e:
                    73:b3:53:12:22:ee:45:bd:16:88:00:8b:5c:4f:2b:
                    fb:99:ab:df:bb:ab:07:44:18:3e:a6:0a:56:7c:b4:
                    ff:3a:c6:ee:8b:20:91:b8:0c:8e:97:08:83:4b:b9:
                    22:5d:85:76:16:9f:51:81:e0:a3:ab:1a:0e:05:54:
                    4a:bc:94:d5:79:a6:0d:ee:04:58:f8:a3:a1:0e:f8:
                    43:f1:a1:78:e8:37:c9:3a:57:1a:2e:40:e4:ce:24:
                    39:fc:09:89:cb:4a:c2:75:eb:dd:09:53:20:75:6c:
                    f4:1f:45:ed:d7:2d:d0:ba:6c:fe:2b:87:5a:5d:ac:
                    60:6a:ac:dd:11:ac:56:44:8c:da:ac:b9:e9:9f:76:
                    7b:e3:0c:f4:fe:a5:e6:d1:86:b3:f8:d6:6c:d3:c5:
                    13:2e:8f:f5:81:73:96:88:ec:0d:f6:cd:d6:e7:0c:
                    eb:28:cd:17:3e:1e:98:18:c2:87:41:36:70:b9:77:
                    14:0c:03:03:7f:49:b6:ea:1c:17:c9:d4:c9:73:af:
                    0c:41:bb:64:16:96:f3:bc:f2:2d:ef:a4:2d:32:0c:
                    22:8e:ba:5d:75:4a:64:5a:84:4b:56:75:a5:d1:b9:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BC:EF:E1:3A:FA:B7:46:DB:36:23:AB:9D:4D:32:25:88:BB:D5:B9
            X509v3 Authority Key Identifier:
                keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:de:d0:c0:c4:41:bd:92:e9:07:06:38:3b:ce:54:2c:6e:9a:
         a7:0d:3b:db:15:de:2d:56:91:ea:50:1b:84:46:6e:24:e7:45:
         cf:0c:d7:7d:4c:db:b9:e0:48:27:de:0a:a4:ae:6a:99:23:e3:
         e5:db:5a:34:0d:38:61:92:96:0c:53:a4:ce:1b:b6:b3:13:57:
         d2:fd:46:47:2a:b4:92:c3:88:37:e8:2c:0e:6f:46:91:ef:bb:
         a1:cf:bc:d8:63:ca:a6:a9:e7:5f:03:ae:39:69:51:d1:59:63:
         a0:42:07:b0:af:fc:81:e0:d3:0b:ee:7a:00:f7:55:2e:7a:03:
         3c:f3:99:09:6f:62:ec:9f:38:56:9f:10:7a:e4:62:a0:c6:bd:
         03:93:b5:b4:72:90:a3:0d:2f:1d:80:f2:8c:ee:24:7d:03:3d:
         ee:1a:53:63:b2:23:ee:ad:60:f0:51:53:bb:78:51:08:a4:6e:
         1a:c0:89:63:d4:58:83:2a:bd:54:7f:eb:ee:a4:38:b5:86:d0:
         78:83:c9:da:f1:11:a7:48:01:a4:b5:56:cf:f8:9b:51:c0:55:
         aa:62:4e:13:86:3b:0d:38:30:9f:bf:bf:70:5e:2f:73:e3:57:
         e6:4c:36:38:30:41:89:13:ee:71:0f:1d:f7:60:47:7b:e7:12:
         79:76:ab:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:52 2026 by rpki-client