Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
File:                     0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft (raw, json)
Hash identifier:          esdAOuMTN8KTJaZfYvWDfZmZVWHlFwkAzIzmT4ryKso=
Subject key identifier:   88:47:2C:73:18:C6:C3:8A:AE:85:48:3B:E9:6B:C0:93:49:22:81:AC
Authority key identifier: D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86
Certificate issuer:       /CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
Certificate serial:       019D27DF9FCC1D1445E8BF4F4BAA9219E870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
Manifest number:          026F
Signing time:             Thu 26 Mar 2026 02:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:59 +0000
Files and hashes:         1: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl (hash: 5XkbhZ7C7U749cbLlf9kinTvL02bMqz+xd/6ZLtaZBI=)
                          2: W2JVDI-08lmKNZhAYHd2tvRmyTM.roa (hash: ckBzzLd5OwJEVbSyU7U9n0rLQV1aHwoolzgedy1E6y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:9f:cc:1d:14:45:e8:bf:4f:4b:aa:92:19:e8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
        Validity
            Not Before: Mar 26 02:00:59 2026 GMT
            Not After : Mar 27 02:00:59 2026 GMT
        Subject: CN=88472c7318c6c38aae85483be96bc093492281ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:74:42:a3:4d:41:72:08:c8:c2:3f:d1:53:
                    dc:f6:a5:99:bb:8c:0a:1f:09:7e:85:2f:e7:e8:54:
                    2b:a7:4f:8b:19:6b:7f:a6:ce:b2:3e:7f:c0:21:c4:
                    e6:23:7b:96:fc:59:05:c6:28:97:5b:06:78:4e:ff:
                    6f:e8:cf:db:e3:ac:f8:1c:6f:f6:8d:2a:74:27:90:
                    2c:2c:1b:9b:c1:01:06:e5:1b:1a:3f:a3:e0:a5:a9:
                    2b:e5:d4:7c:20:bc:b9:ce:dc:2d:3c:81:39:d8:84:
                    7b:38:e9:4e:c8:36:dd:85:7b:c0:c6:c0:32:e0:93:
                    55:1a:e8:cd:b4:64:ad:72:ac:f9:7b:07:12:c7:c3:
                    db:4f:2d:61:1a:87:e8:3a:c8:4e:7d:a3:e1:d8:6f:
                    12:a4:f1:7c:a9:f9:64:b8:cc:bd:44:e9:b7:57:44:
                    d1:56:7f:31:d7:71:d5:46:86:cd:99:3d:26:1e:50:
                    57:4b:4a:c6:23:14:ae:cd:b7:5b:3f:fc:3b:c7:52:
                    87:4d:9f:58:7d:4f:4b:72:70:98:40:53:45:ab:89:
                    49:a2:1c:27:5c:19:2e:fa:36:eb:08:48:5e:48:bf:
                    a7:9e:cf:8c:a0:69:bd:29:f5:c5:bc:1c:48:4d:d3:
                    c2:7b:16:5c:f4:1d:ab:00:b0:de:f5:4a:34:fa:b1:
                    b5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:47:2C:73:18:C6:C3:8A:AE:85:48:3B:E9:6B:C0:93:49:22:81:AC
            X509v3 Authority Key Identifier:
                keyid:D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:29:7e:44:a2:b6:22:b1:ee:97:43:58:dc:90:f6:77:ec:
         7a:1b:2f:6a:90:02:87:e4:16:2a:43:01:98:ae:00:fa:e5:e7:
         6c:97:60:84:ea:30:b3:4e:82:bb:1f:0b:4d:23:43:19:be:66:
         df:91:e2:23:d9:a2:3c:3a:80:6c:f3:c2:40:0f:e1:3d:db:9d:
         0c:f0:2a:8d:30:71:ca:11:9b:a4:e6:1a:10:c7:bd:53:d1:90:
         85:5b:3a:82:5a:74:ab:c2:82:03:a5:8a:2c:bf:dd:69:f2:2e:
         7c:66:eb:b4:3b:23:4b:6d:e1:d6:ab:c7:3a:31:b8:08:fa:04:
         46:b7:35:47:f0:31:28:f7:64:5d:b7:22:93:c1:25:7e:39:5b:
         41:89:6a:f9:78:61:a2:f2:88:ff:7b:d3:4c:eb:82:44:ce:5d:
         7d:af:af:a2:ce:49:89:43:cf:0b:c6:3b:ef:6e:a0:6d:f0:e1:
         14:17:f1:88:61:42:ab:f1:41:ab:f4:5f:cb:89:4a:ed:75:f0:
         c0:08:b5:19:7e:92:96:64:94:f6:83:8b:bc:cc:1e:3b:8c:aa:
         30:18:01:31:74:13:9e:96:ea:66:b4:59:4c:6f:b1:39:c7:23:
         b4:6c:d3:2d:e8:47:24:aa:f1:94:ce:31:05:ee:b0:7e:eb:c2:
         a2:30:19:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:18 2026 by rpki-client