Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File:                     ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier:          s37ecGiOsoFjCAlZQW1WTk3k8nOt2I4fZbxaNbd+JPg=
Subject key identifier:   48:22:2B:83:86:52:73:89:4A:3E:94:1D:96:FD:D6:61:58:3D:E3:A1
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       019D25F1191310CDFF7667ADE7A874AC0084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number:          0D06
Signing time:             Wed 25 Mar 2026 17:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:50 +0000
Files and hashes:         1: GLvPs0b1150wgYEEGQh-rwy7VDM.roa (hash: yvNeNIbqO4LTnxIc0b0IA4sXErDdh1eRPLh4/uTPm/4=)
                          2: bM8ylzi-juLOcTs8he0_ihn2-Lg.roa (hash: WIBob7fZMLUTFgps19iz8qcrHP4DZX+mfV40VJTLBzA=)
                          3: deFJyq-loxsXWYEGsfUyIqVEnaI.roa (hash: pe36ZWMKjKJ3AsbDsw9+j06cZoB7uypgPTBqwG74rnE=)
                          4: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: eesgYvt8nXlK0pxmbysP5pSx6ofsnMZMAOoOmQ050uo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:19:13:10:cd:ff:76:67:ad:e7:a8:74:ac:00:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Mar 25 17:00:50 2026 GMT
            Not After : Mar 26 17:00:50 2026 GMT
        Subject: CN=48222b83865273894a3e941d96fdd661583de3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:23:7c:3c:c8:82:7c:90:29:48:4b:c5:b7:
                    f1:59:07:97:33:c8:5e:67:5e:e3:42:8a:78:48:a3:
                    3f:59:2c:76:59:07:e7:8b:b3:a5:09:46:b4:90:d6:
                    ab:41:cc:0e:d2:70:6e:fa:8a:3e:20:b2:ef:fb:33:
                    d9:48:bd:c5:fb:9a:39:87:3f:17:5e:89:40:02:21:
                    49:cc:d3:ca:10:3d:eb:72:11:16:c0:cf:fa:a0:61:
                    b2:bf:4c:c5:d0:5a:dd:b6:c2:c3:7a:06:e9:a0:4f:
                    c8:e2:6e:ba:bb:6a:14:7c:9c:e2:30:f7:c8:2b:38:
                    80:fd:9d:fe:dc:70:2a:fc:4d:03:ac:3f:ab:53:83:
                    aa:de:44:23:34:04:ab:23:f9:bc:90:07:60:37:3e:
                    31:29:24:a3:0e:53:16:02:d3:90:f3:87:1c:4b:15:
                    e6:52:df:c7:47:7f:68:63:fc:ae:1a:04:31:72:6d:
                    99:d3:d7:03:40:b4:ff:23:80:9c:bf:1b:6e:22:46:
                    d5:47:36:b0:e7:91:97:c8:22:d4:6a:9b:2f:e3:2e:
                    d7:d1:7f:2d:de:75:ea:35:7b:da:e4:74:f2:03:41:
                    0a:8b:2e:64:30:76:14:57:7e:b6:32:99:8f:41:71:
                    cb:a4:03:80:01:af:1c:83:24:c7:0d:57:d7:64:35:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:22:2B:83:86:52:73:89:4A:3E:94:1D:96:FD:D6:61:58:3D:E3:A1
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e2:ff:bb:8c:2a:91:65:53:61:50:12:92:7a:93:fa:9d:85:
         ba:06:4e:2d:9b:5a:c3:7a:52:31:7e:dc:d7:58:4c:a1:2a:98:
         98:e9:f8:9c:87:fe:b3:4c:13:92:61:da:44:35:de:d1:29:42:
         27:ef:80:8c:7c:79:b6:39:b0:11:e3:ce:27:11:73:35:c5:c1:
         ad:f8:84:fb:5f:e7:fb:fa:0a:58:13:25:f9:13:47:3d:94:17:
         ea:2e:de:4c:c9:b0:c8:8e:3d:51:65:f4:09:74:bf:79:2c:88:
         1e:69:ce:ab:60:27:f4:0c:5c:71:c2:74:9c:de:c3:f8:de:d1:
         b4:d0:d3:6c:58:a8:2d:d3:eb:4d:07:93:26:51:33:f9:84:d9:
         68:a4:ad:4a:ac:7f:17:3d:8d:89:ef:31:58:1d:d7:dd:96:d6:
         d4:c2:9c:db:ed:e7:17:78:8c:ce:2a:ed:66:ec:3e:a5:48:7b:
         28:09:0b:bd:c0:3f:5c:4e:c9:c5:f9:ee:b9:9f:fe:5f:e2:71:
         97:1f:e7:99:6e:12:88:3e:6e:0a:41:29:9b:ab:54:5d:c0:e9:
         c3:ec:6d:43:ca:ad:46:e0:19:68:84:80:5b:04:d8:61:5d:a4:
         3d:55:ff:80:4d:14:a0:db:74:f1:1e:43:36:a9:ad:59:f0:05:
         9d:f3:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:33 2026 by rpki-client