Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
File:                     WC4hcKe8vsMQFU8rzpmDP-woAfs.mft (raw, json)
Hash identifier:          BaF7NJo3V2pibzKZJ3OyBT4bprFOe6IOGrl9ucqkkRs=
Subject key identifier:   0C:0F:AE:1C:8D:75:11:3C:7B:BA:BE:A4:0B:7A:AE:22:0A:FA:06:DD
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Certificate issuer:       /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial:       019D28F3232D0728BADF4B2B0A6C60C6E728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
Manifest number:          0A7B
Signing time:             Thu 26 Mar 2026 07:01:55 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:55 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:55 +0000
Files and hashes:         1: 6mj9wjIYkwPsA3c5MxWWRMkBmSY.roa (hash: E1XVoQk2psLjeVe0+NkJREdlEcbwRYRghSTnYcJUsio=)
                          2: WC4hcKe8vsMQFU8rzpmDP-woAfs.crl (hash: nVFV3bnyTgGb9lsyO8PVbURVRrYfCktgDrX97awKXZ8=)
                          3: eieZOr9FHJILQ01WF-oyQAME0-4.roa (hash: ahdbiO7qmkWYgXQ04GmEQrp4ceapMkzBgwSwQKptvJI=)
                          4: sJMlQlmuU4_t9JLTWEOG32Cq6MQ.roa (hash: E7O6wd0Zjg99STe3wUKf7d1f1MzUTLb1rAZKDrFTMV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f3:23:2d:07:28:ba:df:4b:2b:0a:6c:60:c6:e7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
        Validity
            Not Before: Mar 26 07:01:55 2026 GMT
            Not After : Mar 27 07:01:55 2026 GMT
        Subject: CN=0c0fae1c8d75113c7bbabea40b7aae220afa06dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c0:e3:90:33:5d:a2:cb:3b:11:ca:8c:80:89:
                    7a:96:6c:99:07:f0:79:02:af:9d:03:50:e7:e0:a2:
                    1c:63:d5:2c:36:84:7b:dc:1d:3d:aa:ee:27:03:fd:
                    23:46:39:fd:0c:d5:31:24:28:bf:b2:bd:84:da:73:
                    1c:5c:f9:f8:3e:5a:e6:43:10:bd:4d:b8:d7:9e:09:
                    0b:be:58:49:bf:a0:ec:78:2b:6d:3d:0f:d6:05:e0:
                    3c:8c:00:21:41:78:a7:2e:75:83:76:fe:0c:58:fa:
                    98:d7:76:d9:a9:8b:2a:42:cd:06:52:41:33:d5:33:
                    0c:d7:2d:02:8f:f1:28:56:61:e8:56:9d:c2:b0:42:
                    cd:d2:ef:c5:b7:47:da:42:e2:fb:f5:ee:bd:df:47:
                    7c:df:c4:25:d1:d1:3e:60:38:8f:f1:01:8f:21:7e:
                    44:b1:95:9a:27:27:42:27:11:b7:c9:5b:08:bb:8a:
                    50:bf:06:29:57:b7:33:8b:92:2e:32:13:85:bc:49:
                    2d:14:13:31:c0:c5:72:6d:b8:fc:9c:07:90:56:0f:
                    e5:89:6f:9e:f9:c3:65:af:af:ce:44:d0:08:73:2f:
                    5f:b4:f4:e1:ba:7b:bb:39:2e:f4:4b:fa:46:43:a0:
                    c3:63:ab:d1:a3:fe:50:85:a7:8d:8f:8a:9f:93:f7:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0F:AE:1C:8D:75:11:3C:7B:BA:BE:A4:0B:7A:AE:22:0A:FA:06:DD
            X509v3 Authority Key Identifier:
                keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:0d:cf:4b:8c:c6:cb:4f:96:ca:b1:a9:8e:e5:a1:59:32:7e:
         58:82:0e:25:32:14:53:f6:42:c4:d0:7f:74:81:67:f2:f4:62:
         a1:92:ba:76:e0:d1:8c:43:dc:f0:69:c0:0b:ce:96:39:94:44:
         5d:d4:dd:d6:bf:b3:d3:24:93:35:56:bb:33:79:20:c1:c9:31:
         a2:ba:ed:98:7a:7b:48:10:e0:4b:6e:2b:54:a3:29:21:06:f9:
         d1:4c:e7:9a:bc:96:47:39:fd:e9:eb:4d:92:9b:99:95:e8:65:
         39:32:46:2c:13:d0:11:47:9c:2c:a0:97:79:a1:16:96:de:f0:
         06:ae:c5:32:2f:84:20:02:b0:1c:32:4c:c4:b2:85:d8:1f:6d:
         dd:e1:de:d0:6b:df:95:68:90:58:ab:46:22:70:bf:4b:3a:a5:
         d5:5a:f9:af:02:cb:d0:79:91:94:17:9b:fc:97:a2:3f:4f:18:
         71:76:69:ac:45:f9:66:ae:1a:64:b2:62:f1:45:ee:64:ba:05:
         30:33:8a:67:c2:21:e2:6e:2a:4f:bb:09:97:da:b8:55:52:b2:
         d5:9f:93:e5:8f:95:06:16:5d:f4:ce:99:7e:cf:f5:ef:63:1f:
         2d:4c:ad:ab:51:a2:f5:de:41:16:63:cc:dd:83:e7:77:a8:2b:
         c4:ad:6e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:08 2026 by rpki-client