Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
File:                     wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft (raw, json)
Hash identifier:          Criw3vaxR/KYpyz5AsBpozYNpK58rR4C9y3P9pTJQ5M=
Subject key identifier:   5C:EC:59:1D:73:E6:30:0C:70:4B:6A:24:C6:6C:A4:8A:4F:C0:1E:44
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Certificate issuer:       /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial:       019D269637405E35DAAE5AA5E192398DF53D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
Manifest number:          0243
Signing time:             Wed 25 Mar 2026 20:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:11 +0000
Files and hashes:         1: 3SgkFgo0LTk2swzrn5dq7YjNcJs.asa (hash: wflGAfTimYQQh20JKmlCe7N9/FvGlFFSJj9BuYPzogQ=)
                          2: Bhwxfe7-2H1mP_yNUtpEged1-GE.roa (hash: lwwOGYlsDe8otoVO3CpnxZxqzeNrxkyEQ5g4/KYMubI=)
                          3: cIXDfR-Jle5Jda3lToN6L1RqtVs.asa (hash: 0Czg9gaAGKAEq6Rfn/gJ1HPiXTpLu7e+YQAdkMW2/O4=)
                          4: kG29gU2oA8IxQBu2izkZt4FiHrw.roa (hash: Mbf2SHQO1ZPAunz6dIhpxmgcYgu15NI5RZRxV0O3xVE=)
                          5: wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl (hash: Zn0TYWmV17nQdV/CyB/v+SCELBttpwMFK8bnZ6QViM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:37:40:5e:35:da:ae:5a:a5:e1:92:39:8d:f5:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
        Validity
            Not Before: Mar 25 20:01:11 2026 GMT
            Not After : Mar 26 20:01:11 2026 GMT
        Subject: CN=5cec591d73e6300c704b6a24c66ca48a4fc01e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:04:59:64:dc:ba:70:45:13:78:17:6a:ef:
                    62:e8:df:17:b5:74:77:24:b3:6b:c8:c2:d7:2c:9c:
                    b8:10:29:88:f1:ee:a0:2d:18:06:f5:58:4b:af:ab:
                    f3:88:9f:4a:3b:8f:07:7c:7e:cb:72:52:fe:92:a5:
                    0b:52:17:48:60:be:25:d0:76:31:3c:c2:15:b8:35:
                    d1:a6:b7:45:d9:fc:ea:6e:ce:bc:6a:d6:6a:68:fe:
                    1a:87:a4:3b:ef:70:67:9a:62:e1:bd:21:c6:2b:53:
                    e9:18:25:70:54:9e:e1:72:e0:e9:07:46:58:42:7c:
                    c6:d7:e6:08:29:4d:8e:26:8a:d5:33:a2:8b:1c:13:
                    bf:d9:5e:26:68:21:b9:aa:6a:d5:b7:99:35:34:89:
                    2e:2b:bf:12:b3:4f:4c:f5:49:42:35:6b:58:c6:d6:
                    f5:fb:e3:e7:59:e3:31:53:d5:41:0e:7a:42:0e:03:
                    f6:6e:e4:fa:42:49:e9:5f:8f:6f:0e:84:f6:1d:d4:
                    4e:f6:41:fd:b9:cc:5b:28:0c:db:9a:8e:ca:14:93:
                    9e:46:36:ca:96:44:3f:68:af:31:82:6a:cd:df:17:
                    b7:49:f2:b6:4f:57:86:da:76:8f:1e:d5:3c:00:12:
                    47:77:52:b7:d3:88:58:d4:c7:72:8e:e8:05:19:cd:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:EC:59:1D:73:E6:30:0C:70:4B:6A:24:C6:6C:A4:8A:4F:C0:1E:44
            X509v3 Authority Key Identifier:
                keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8c:ec:e5:88:db:32:61:de:4a:96:8f:d7:3d:82:e8:63:40:
         d2:a5:54:7e:53:44:e3:6f:c0:70:9c:2a:9c:e7:90:09:70:d9:
         54:fd:25:94:e0:c9:f3:a4:e5:01:d9:55:a6:9c:44:57:10:40:
         e0:8c:5d:34:94:9f:64:78:92:53:0d:90:52:4e:e1:6b:17:70:
         f1:3c:96:54:1f:bb:db:17:ab:f2:bf:86:89:e9:64:10:a1:9b:
         db:0e:92:84:4e:32:b1:0b:10:57:5c:76:07:fe:96:ce:83:0f:
         ab:bd:3c:1e:6e:d9:3a:32:9d:75:6e:9a:36:11:f8:11:e7:80:
         ac:93:a0:f6:09:79:a9:a5:1c:86:b9:68:85:f0:3e:be:43:bd:
         96:8d:13:12:9f:54:aa:7c:b9:00:e4:66:4d:a7:a5:22:fc:24:
         d0:b0:76:29:6c:8d:22:4f:58:d0:7c:9e:39:0f:87:55:11:ca:
         5c:d1:32:c7:e9:e5:e0:b6:3f:04:f4:ed:07:0e:93:bd:64:ad:
         26:28:75:bf:10:16:ad:b4:3a:bd:2f:1c:0e:ba:bb:91:9e:33:
         e1:26:3f:ad:0d:e5:af:01:db:41:c9:89:1f:1f:dc:b6:70:fb:
         a3:e7:23:fe:0b:07:c2:95:60:80:af:62:2d:a7:44:8a:a9:a7:
         b6:9d:de:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:12:49 2026 by rpki-client