Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File:                     wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier:          ZKp1+fR0pcWcpNU5Ev714dXhdvfO55GaSzfaSRhEUi4=
Subject key identifier:   A4:D6:22:F4:1C:8C:BC:AF:82:4A:41:5F:48:C3:67:86:3C:E1:9B:C3
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer:       /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial:       019D258369880D4B20151131049D346B357A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number:          03B6
Signing time:             Wed 25 Mar 2026 15:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:02 +0000
Files and hashes:         1: k0b9VtGawXwWdQgfJzcdEYCCg_o.roa (hash: dIXVCTmcfL3HOBzfVAxTvQR3ANPXcc/eVpPbv90sMfE=)
                          2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: +dHtTdPc9Qio60QBbOEXaAxGxP8WhuExgXjbIk7SrIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:69:88:0d:4b:20:15:11:31:04:9d:34:6b:35:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
        Validity
            Not Before: Mar 25 15:01:02 2026 GMT
            Not After : Mar 26 15:01:02 2026 GMT
        Subject: CN=a4d622f41c8cbcaf824a415f48c367863ce19bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:55:18:91:be:59:cb:17:fd:3a:f2:61:fc:
                    f3:eb:58:ce:93:c9:03:7a:ff:04:78:b5:f6:3f:70:
                    c9:f6:81:ad:90:fb:9b:27:0d:f1:c7:3e:ee:3d:6a:
                    98:6c:62:c8:d8:1d:c5:c9:47:f0:55:9b:3c:1d:92:
                    a2:57:6e:75:83:b3:27:14:10:f6:a7:8b:03:35:c4:
                    8b:3f:da:b0:e5:7e:61:0f:d2:52:55:50:ad:99:85:
                    cf:1b:cf:67:a8:fa:1d:c7:4b:cc:f2:51:5e:f2:11:
                    6f:36:41:81:81:45:91:8e:f8:1e:50:bc:03:5c:c4:
                    35:8f:80:20:28:a6:c1:43:79:78:8b:1d:64:02:3b:
                    92:a4:42:03:fe:c4:0d:6a:6e:83:a2:20:fd:09:3b:
                    b6:82:7b:dd:81:b6:be:12:d3:74:bd:ee:db:2f:38:
                    f6:07:65:ab:b3:8f:b5:25:00:69:83:62:54:7a:90:
                    d1:c8:e6:39:f8:bf:b7:09:64:4e:be:8a:10:6c:e6:
                    62:47:71:cd:60:05:74:e5:70:7c:11:9b:23:95:63:
                    b3:c7:cb:cc:61:b9:08:ab:a0:b9:15:91:ee:68:23:
                    ce:df:10:c3:2c:1f:70:30:63:4e:09:99:65:03:b5:
                    f5:75:b7:98:b5:7a:2d:ff:b5:b6:79:d1:89:d7:17:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D6:22:F4:1C:8C:BC:AF:82:4A:41:5F:48:C3:67:86:3C:E1:9B:C3
            X509v3 Authority Key Identifier:
                keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:a5:c9:51:0f:ac:49:dc:8f:79:bf:fd:d3:b9:f8:c5:77:36:
         68:07:1f:a4:2f:c7:a1:46:b1:c5:66:aa:4e:82:7b:86:e4:c0:
         3e:aa:43:f9:37:ee:e7:8a:72:5f:9c:80:1c:17:77:92:82:4e:
         d9:cf:89:31:33:46:be:80:c0:bb:69:f6:8c:62:8b:c1:75:72:
         d3:4e:a7:69:15:1b:aa:e8:ec:88:77:2a:a2:ea:2f:f8:35:25:
         6d:59:68:70:4f:d9:3a:b0:61:37:8e:ca:de:01:98:64:a1:bc:
         13:16:de:ed:93:d8:85:53:3b:a6:07:d2:da:b6:c6:06:e5:fe:
         37:c6:5c:a1:cb:d9:fb:e2:c3:03:a2:83:9f:f9:1d:10:94:d3:
         ff:e1:89:d5:ed:6e:d5:70:e5:d8:65:f1:31:bf:6a:13:54:dc:
         2c:a3:1e:9d:cd:92:11:07:fc:38:be:c1:13:a5:2b:91:af:60:
         28:72:f3:6f:52:04:4b:a7:e2:4b:7a:f9:91:57:65:16:87:af:
         a1:a6:42:52:6a:42:47:5e:40:c2:b8:de:e2:b8:0d:d7:f4:85:
         f0:ee:54:18:d9:86:30:eb:18:65:a3:78:ee:d4:f6:c2:17:12:
         84:77:d2:5c:58:6e:1f:a1:50:b0:c1:ed:b5:68:fc:01:f5:76:
         eb:d0:cf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:22 2026 by rpki-client