Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
File:                     wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json)
Hash identifier:          jngjHSbVB6BXYz3DqmGNxuIlE35P/N/8Wv8KXGJWVKc=
Subject key identifier:   0F:20:EF:18:85:2C:93:EF:C0:DD:6A:0C:6F:3B:07:45:D4:46:70:79
Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2
Certificate issuer:       /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
Certificate serial:       019D25BA5D097AF48F68111628B864F656F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
Manifest number:          0220
Signing time:             Wed 25 Mar 2026 16:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 16:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 16:01:03 +0000
Files and hashes:         1: opV5K4TDIZwg2_Ke6wz0k_YRsno.roa (hash: L3PdsoBBCqtcSMykMoxo+EhISOF23hs0Fdp4ciolx2U=)
                          2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: /8hLCx6M4efdbsnt0XlU90VarzNotO7xeXYJM1yAgEY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:5d:09:7a:f4:8f:68:11:16:28:b8:64:f6:56:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2
        Validity
            Not Before: Mar 25 16:01:03 2026 GMT
            Not After : Mar 26 16:01:03 2026 GMT
        Subject: CN=0f20ef18852c93efc0dd6a0c6f3b0745d4467079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:5b:1e:e5:3f:73:79:6a:8f:6c:0b:78:9c:
                    da:54:3d:6f:a3:1b:e5:c9:d6:9b:8c:19:0a:85:4f:
                    f8:af:b1:df:04:41:e7:5e:6a:e6:c1:b4:2a:0f:4b:
                    da:38:8b:c3:f3:53:c4:b5:f1:a8:e0:88:b0:63:0a:
                    e3:9f:6d:18:5a:1e:cd:e7:3a:25:39:c6:ee:f4:a4:
                    17:23:c4:ff:9e:bf:eb:e8:2f:67:01:3d:4c:f7:14:
                    9f:ab:1b:03:56:97:ff:35:9f:f1:4f:e7:18:6c:a2:
                    6a:ac:9b:20:93:57:f1:1d:57:57:96:ed:79:01:a4:
                    10:63:bc:d6:1a:f9:7c:71:d8:55:5b:c9:3c:f6:cd:
                    0f:49:3c:72:1f:4d:08:50:7e:f0:aa:66:9a:b5:0f:
                    a1:15:82:d7:57:16:2b:47:41:75:f2:65:7e:20:01:
                    08:bc:78:16:aa:8d:dd:14:5f:7e:61:a2:0d:28:30:
                    15:db:3f:18:92:ee:27:b9:e4:9e:ed:8c:6a:0f:93:
                    63:45:73:da:4d:27:2f:3a:e3:d7:71:a1:95:c4:8f:
                    6b:c4:c1:cf:ca:3f:e5:cf:09:52:e1:90:7b:21:4c:
                    8a:78:84:88:df:d1:e5:8b:42:f4:23:83:44:18:8b:
                    89:36:0e:fc:bf:8a:e6:91:1c:d7:54:0e:20:e8:38:
                    f7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:20:EF:18:85:2C:93:EF:C0:DD:6A:0C:6F:3B:07:45:D4:46:70:79
            X509v3 Authority Key Identifier:
                keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:40:02:8f:00:f0:c4:9d:97:1b:47:d3:7f:25:b4:36:50:58:
         e6:10:4f:3b:71:1e:22:8c:65:f1:2d:11:cf:02:b7:aa:59:aa:
         1f:54:17:cc:27:8f:72:c6:b7:0b:dd:5c:b0:13:57:84:d3:6e:
         b4:6d:a2:59:63:72:23:57:a9:f4:47:45:72:6d:2f:5a:7a:05:
         ab:11:ec:e1:9d:0f:54:e8:37:62:41:1a:c5:82:a9:9f:49:be:
         07:9b:c9:9a:06:ac:01:db:b3:1b:7b:35:f6:e2:36:41:e2:fd:
         f0:35:de:f2:82:0c:fc:fd:26:dd:2f:90:0b:0a:02:ce:7b:99:
         70:04:96:0c:c5:49:19:be:84:9f:00:2d:cf:64:0c:6f:a5:d4:
         51:d5:cd:5a:2e:9d:64:81:84:6d:16:95:2f:fe:ea:d4:37:23:
         c9:ef:bb:d2:3b:df:f6:2a:67:91:cd:a2:04:2b:66:77:19:1e:
         14:37:24:aa:db:7f:ca:83:7a:62:9d:c0:44:e7:9d:22:fa:94:
         5d:59:3a:3c:c6:50:3c:db:e3:c4:a8:93:62:28:11:0b:ba:3f:
         8c:db:f7:ab:bc:29:46:04:12:db:76:be:97:cf:36:b8:c4:76:
         88:0b:d3:d7:0a:92:44:9a:a2:1c:4a:16:d4:19:67:40:fc:e9:
         77:08:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:05 2026 by rpki-client