Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
File:                     wOuGHF00WeA57O8QTP2T8ggnx0U.mft (raw, json)
Hash identifier:          AkrAI/xYgDaJy5EUJ8W1SE1dqXqAg/CyP/jkf5ovn2w=
Subject key identifier:   0E:DE:53:4D:F5:3F:33:23:86:F8:E3:96:41:0E:8B:FA:00:76:DC:AD
Authority key identifier: C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45
Certificate issuer:       /CN=c0eb861c5d3459e039ecef104cfd93f20827c745
Certificate serial:       019D26963E0E440DEF5BAEED78F15309E820
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
Manifest number:          0426
Signing time:             Wed 25 Mar 2026 20:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:13 +0000
Files and hashes:         1: wOuGHF00WeA57O8QTP2T8ggnx0U.crl (hash: dtsLA6VfeipdR9UpT+m3H40dcIN/g4Lb2TVB/1CrmK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:3e:0e:44:0d:ef:5b:ae:ed:78:f1:53:09:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0eb861c5d3459e039ecef104cfd93f20827c745
        Validity
            Not Before: Mar 25 20:01:13 2026 GMT
            Not After : Mar 26 20:01:13 2026 GMT
        Subject: CN=0ede534df53f332386f8e396410e8bfa0076dcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e6:f6:d8:b8:62:7d:b7:08:72:85:01:f1:b0:
                    af:e6:b6:a6:ab:53:e4:db:67:70:da:12:71:00:24:
                    75:dd:7f:fd:5b:c0:e5:6e:23:f3:b6:6b:a0:d2:8b:
                    20:1b:a6:83:ec:3c:30:93:a0:54:83:49:8a:c7:02:
                    c1:3e:db:62:72:a8:fd:15:70:6e:61:c3:db:bf:95:
                    a3:12:6f:30:7f:db:07:6f:62:ad:fc:0a:6c:5d:25:
                    1a:0f:73:7d:4f:ad:23:ff:dc:7d:b4:6c:33:36:67:
                    01:8b:c2:68:df:fb:63:a7:d0:c7:6b:6c:ed:ed:e2:
                    fd:14:27:2f:0b:bc:68:ef:a8:5f:41:52:e3:93:a9:
                    2c:45:14:99:fb:17:55:47:88:16:dd:35:ba:01:d8:
                    4b:61:0f:ac:67:8f:25:dd:ce:a5:b7:f1:3a:b7:d1:
                    70:f1:d2:4f:b7:44:2e:ed:9a:80:b6:9b:fc:81:57:
                    00:8c:74:f5:8f:54:ea:b5:b4:6e:57:93:b8:25:b3:
                    f4:1a:aa:02:7a:81:7e:c2:14:b0:93:b4:d1:24:83:
                    a9:6e:88:2f:dc:13:1a:d0:1b:26:da:78:48:29:e5:
                    86:18:a0:b1:ba:53:c0:ed:0f:5c:a4:71:5d:ff:76:
                    99:2c:18:cc:ca:e0:b8:92:f9:ac:c2:2b:d3:9e:06:
                    df:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:DE:53:4D:F5:3F:33:23:86:F8:E3:96:41:0E:8B:FA:00:76:DC:AD
            X509v3 Authority Key Identifier:
                keyid:C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d7:2c:2c:20:43:d8:09:ae:6b:ec:5d:91:0f:24:d7:e9:d8:
         23:2e:92:95:4e:93:46:08:a8:d0:b9:fd:9a:aa:77:e6:b7:8f:
         e8:5e:c2:52:f9:57:ca:d6:6e:94:09:a4:30:7f:21:df:7b:3f:
         44:03:54:64:75:c2:1b:58:3d:ba:66:a4:f7:16:d5:ce:9d:0e:
         ba:af:2e:07:a7:5a:83:22:59:4d:fa:8e:ec:e8:d9:9d:09:ba:
         7d:49:8f:09:80:62:96:63:74:01:09:81:b0:42:be:8d:98:5f:
         00:02:ea:e4:49:be:2f:d6:c1:69:be:90:7c:cd:64:54:d1:a0:
         5f:aa:83:ea:a8:cb:b9:e9:97:a8:fb:12:f0:27:53:18:35:b5:
         32:98:13:9e:28:a8:c8:90:c0:0e:4a:b4:a4:08:71:56:39:18:
         54:21:67:45:db:8a:53:ea:d3:fa:ba:45:15:2d:f5:c6:b1:35:
         16:10:b6:e2:71:5a:09:92:0f:c6:45:89:fa:af:31:f0:34:95:
         91:94:2f:7f:77:6c:29:f2:b2:e8:42:8f:cc:4c:f8:7a:a3:5a:
         e8:66:5a:99:38:db:8f:aa:15:2c:53:78:36:c9:31:eb:61:db:
         5a:63:ae:1e:6b:f7:ef:dd:39:fb:0d:e8:0f:e0:76:4f:7c:10:
         45:8f:f2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:03 2026 by rpki-client