Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File:                     w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier:          Xm2SC7ov1ohqvSnzwBKjapWT+GS7fIL3Bmp+8hzT+ng=
Subject key identifier:   F3:DB:E2:D2:64:0F:BB:BC:A4:83:7B:6A:A5:19:2C:E7:22:F7:07:35
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer:       /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial:       019D270495D71D0571560C8FAA4FD68E8025
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number:          09DD
Signing time:             Wed 25 Mar 2026 22:01:45 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:45 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:45 +0000
Files and hashes:         1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: MpqLRW3wNk0D0u01JiWB/gy86or14niSFlxn5DsXNtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:95:d7:1d:05:71:56:0c:8f:aa:4f:d6:8e:80:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
        Validity
            Not Before: Mar 25 22:01:45 2026 GMT
            Not After : Mar 26 22:01:45 2026 GMT
        Subject: CN=f3dbe2d2640fbbbca4837b6aa5192ce722f70735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f6:3b:eb:79:58:45:c7:93:ba:cf:0a:22:41:
                    0f:ad:d4:ea:b7:62:da:3e:42:21:1a:32:60:e4:a7:
                    57:71:88:6d:b0:f0:71:24:59:65:88:d3:7f:42:10:
                    64:78:c7:59:c8:f0:fa:8f:09:c3:53:c3:90:96:bd:
                    e0:af:a8:72:2f:6b:4c:43:ff:7b:9c:6e:c2:b2:46:
                    05:79:5b:91:20:ae:c0:1e:e1:5c:5b:ab:ae:49:65:
                    87:0e:48:08:8b:b9:4f:06:69:fa:a9:cc:2b:a8:e0:
                    72:f4:63:b3:fb:cf:b6:60:aa:de:5a:48:5a:a4:a1:
                    51:6f:58:c0:b5:5f:24:63:42:bd:6c:a7:c9:aa:f6:
                    1e:79:fe:dc:72:33:5b:55:48:0a:2b:1b:c7:2a:e8:
                    c3:47:22:92:a1:6f:45:b2:a5:fe:e3:42:bc:03:66:
                    d4:dd:35:41:84:da:86:4b:c3:d5:df:3f:91:49:4f:
                    93:d1:da:a4:99:df:18:0a:56:22:d1:07:de:cf:68:
                    2c:8a:9f:c4:59:6b:d7:bc:53:af:d2:6f:65:f2:49:
                    cd:4e:b0:55:da:08:c7:33:08:30:1d:cf:5d:2d:88:
                    a9:85:e7:15:f6:36:e8:25:cf:7e:18:5f:1f:fb:02:
                    7b:f4:f3:38:0b:70:05:e7:d3:02:c4:5f:26:55:d7:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DB:E2:D2:64:0F:BB:BC:A4:83:7B:6A:A5:19:2C:E7:22:F7:07:35
            X509v3 Authority Key Identifier:
                keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e7:a2:18:90:0e:3b:bf:be:81:ad:95:c6:23:0d:c7:fd:e8:
         36:9b:24:27:c4:f9:eb:45:17:1f:24:1c:18:91:de:9f:17:f6:
         93:df:68:e2:9c:3f:37:50:a6:79:84:f5:5a:2b:df:b9:a1:6d:
         7c:75:61:bf:2b:54:50:e9:6c:f1:a9:88:a3:3c:08:e8:c5:b9:
         24:8e:d3:e9:10:ac:ef:7c:0d:23:bd:d9:92:6e:40:63:38:ba:
         f8:92:d1:5b:bc:14:ef:f0:09:c4:f3:32:5e:3e:db:99:58:e2:
         da:85:c8:5c:0b:59:27:43:aa:dd:d1:ee:c2:1d:4a:1c:de:f2:
         e4:e5:18:60:0a:ea:b1:b0:24:07:96:7e:b1:4d:0b:53:a4:fc:
         ff:2c:ec:c4:25:7d:b7:33:d6:d7:e6:9b:97:1f:b0:97:c9:55:
         d0:99:ad:dd:d1:e0:f0:cf:f6:31:7a:c7:fa:36:a5:ae:23:01:
         a6:e3:5f:41:e8:b1:fd:cb:ab:b6:53:56:66:12:a2:43:1f:79:
         ce:7c:17:30:67:d3:29:24:28:01:fb:92:c6:f8:31:b3:e4:55:
         9e:a7:f2:9d:9c:2b:73:28:55:63:f2:d0:27:b5:04:db:a6:96:
         33:92:92:1b:7b:7c:ec:f5:2c:74:a9:86:94:2a:e5:a1:df:83:
         a5:11:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:09:48 2026 by rpki-client