Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File:                     wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier:          V/DS6mXLrNjjGCDHGTd7HcyvESyDKQq+hbXbIEjcoZU=
Subject key identifier:   75:4B:24:E5:F3:B1:62:1C:DA:34:38:01:4F:97:63:70:1C:0B:7F:B8
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer:       /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial:       019D2628029544455CE556E2DCF92B287FD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number:          0679
Signing time:             Wed 25 Mar 2026 18:00:49 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:49 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:49 +0000
Files and hashes:         1: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: GZ/DiTuxWJJh/mCbRejgue2OZ30i2Ps4eNaloZS/hu0=)
                          2: yXtUNYm9UJDhZ6FworfWme9OQyo.roa (hash: rr8EZy6xf85lv5Hhtm/H3eXN/QDSdw1UbOFotOK3AWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:02:95:44:45:5c:e5:56:e2:dc:f9:2b:28:7f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
        Validity
            Not Before: Mar 25 18:00:49 2026 GMT
            Not After : Mar 26 18:00:49 2026 GMT
        Subject: CN=754b24e5f3b1621cda3438014f9763701c0b7fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:4d:bf:d9:28:b1:dc:6d:6e:a8:a8:49:e9:
                    b8:ef:d0:1c:4a:8f:d2:1e:0b:12:1b:55:e0:de:37:
                    f9:f4:72:9e:b2:ed:63:52:05:26:4a:dd:2b:e1:de:
                    94:ba:6b:26:be:ae:10:7a:46:e8:10:e0:e6:d5:09:
                    95:b8:34:fa:fb:33:5b:b7:30:35:72:fc:95:17:36:
                    38:6a:d8:33:4f:2c:e5:90:64:27:24:74:35:10:d6:
                    e3:bc:ae:64:c1:67:12:6b:34:fd:12:41:0d:5e:35:
                    f1:98:8f:9b:c5:58:f1:d2:a8:22:99:2f:8f:33:f1:
                    4d:48:6e:63:b5:d8:85:eb:3f:d1:a9:69:a2:f8:27:
                    38:2d:6a:04:1d:c3:2d:60:a7:81:d8:3e:9d:c3:74:
                    11:f4:ca:28:25:5c:ea:61:6f:5c:1c:30:e9:29:bf:
                    5d:5b:4f:88:4b:25:6a:d3:7f:72:ae:32:fc:9c:60:
                    21:2b:f6:5d:d3:ec:44:fe:8b:d3:fe:f8:4a:17:64:
                    ee:3e:67:23:fa:8e:ea:05:a1:19:46:41:dc:79:0e:
                    ae:45:f3:d2:6a:c5:06:68:25:73:5b:91:45:43:22:
                    35:03:ee:0c:3f:06:69:8a:76:84:d8:78:5d:16:1d:
                    66:a3:78:99:35:ab:8c:5e:2f:72:be:c6:05:05:75:
                    b8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4B:24:E5:F3:B1:62:1C:DA:34:38:01:4F:97:63:70:1C:0B:7F:B8
            X509v3 Authority Key Identifier:
                keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:69:25:4e:d6:d1:11:94:d5:06:8f:9f:11:7d:39:d1:f0:37:
         52:d3:82:14:9f:38:d5:51:8f:29:0c:c4:76:b4:b2:50:37:63:
         92:63:a7:e2:45:25:ec:df:17:57:46:b5:98:f6:78:8b:60:9b:
         b6:dc:b0:bf:58:c5:02:54:f6:a6:36:e5:65:4c:5c:a4:1f:d2:
         17:9d:0b:5f:b6:a0:fe:42:30:b1:ad:5e:8a:08:0b:3a:19:68:
         87:2e:db:b8:41:5c:a0:61:7e:0d:78:15:2d:1c:20:02:55:c5:
         b8:de:f8:10:40:eb:4c:08:42:d5:c1:bc:c3:13:8a:b6:86:48:
         9e:d7:08:14:0e:42:9f:ff:23:ae:5b:8d:bf:54:2a:70:59:01:
         dc:1f:31:fe:51:55:7f:d9:89:1d:0e:dd:a9:41:6f:d5:ca:af:
         ed:b3:c0:50:a9:ca:d4:68:08:20:3e:ed:7f:97:a8:26:45:ef:
         eb:57:a2:c9:15:f8:f9:1d:a0:06:87:a2:20:13:b7:73:34:40:
         77:96:c5:30:fc:15:8a:06:6b:d4:e0:cb:3f:84:57:23:26:6c:
         59:db:9b:21:a0:fa:49:b3:1a:54:d8:23:49:1b:fe:b2:69:5a:
         66:e0:bb:04:90:39:16:87:cd:0e:68:ff:c6:46:3f:d4:44:4d:
         e3:a8:4a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:06 2026 by rpki-client