Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File:                     wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier:          Z25bwkRK8cU7pW1eJq01Uy+B3bj22+EgG9qSs48xCVA=
Subject key identifier:   A6:E9:C9:37:DF:A2:61:99:FF:06:37:E2:8B:08:55:4C:E2:01:A3:10
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer:       /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial:       019CF3846C507E7C0DA05B1EF086828CAA83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number:          0AE4
Signing time:             Sun 15 Mar 2026 22:01:07 +0000
Manifest this update:     Sun 15 Mar 2026 22:01:07 +0000
Manifest next update:     Mon 16 Mar 2026 22:01:07 +0000
Files and hashes:         1: eQRk02-rqRsoVMzAY3_UPFAuAlo.roa (hash: 7f1oukrkE94Uqo0kLbpw4xRpMp5ggZCo2gEHz8zdJ4w=)
                          2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: hosz3BlJAWyb0CUGDbIWKzGRLqW5G2F94P7mPbPfOsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f3:84:6c:50:7e:7c:0d:a0:5b:1e:f0:86:82:8c:aa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
        Validity
            Not Before: Mar 15 22:01:07 2026 GMT
            Not After : Mar 16 22:01:07 2026 GMT
        Subject: CN=a6e9c937dfa26199ff0637e28b08554ce201a310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2a:57:d7:39:d6:30:78:54:da:26:9e:ee:3f:
                    7c:c0:28:7d:e4:b4:b1:f1:27:ad:56:f7:0f:4f:c0:
                    88:05:0b:6c:57:72:de:b7:6b:49:62:20:6c:55:2e:
                    cc:53:1c:4d:fb:65:5c:c1:22:96:33:ed:d7:97:60:
                    50:76:73:d3:5b:4c:e1:e5:e3:5e:25:d0:7e:c1:f1:
                    29:b6:ac:24:28:8d:a9:01:bf:3a:ed:fe:63:ea:70:
                    c5:a7:c7:6c:e3:64:14:47:4b:a9:94:e9:85:ab:17:
                    77:ef:eb:67:f8:50:54:1c:1b:6e:ea:52:7c:74:a8:
                    09:9e:3f:ea:2d:fa:a7:6f:d2:97:b7:3d:5c:9c:7a:
                    5c:b0:ba:fe:96:8b:d8:af:db:21:d2:f2:de:a1:c8:
                    aa:8d:89:4e:5a:8d:af:c8:43:12:87:6b:a3:00:f7:
                    f6:ac:85:51:4f:91:21:fe:e4:f0:fb:7e:8e:b4:4a:
                    68:a7:90:93:bb:27:9c:dc:a4:99:c1:7c:e7:26:7b:
                    d2:2c:f5:39:22:33:c7:2b:30:54:f5:6f:bf:c4:00:
                    28:70:dd:55:ab:f1:6b:ff:11:f9:c8:d6:de:0e:cc:
                    ba:98:a0:e4:54:47:ec:22:7b:89:87:2e:ea:a3:35:
                    14:88:c5:a2:b4:7d:6c:86:4a:95:28:8b:1a:47:ab:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E9:C9:37:DF:A2:61:99:FF:06:37:E2:8B:08:55:4C:E2:01:A3:10
            X509v3 Authority Key Identifier:
                keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d5:f9:da:a7:b8:66:bd:b7:58:63:88:d9:9f:64:0e:af:01:
         24:df:93:b4:2a:33:e5:58:d0:5c:96:bd:75:35:51:06:7c:32:
         58:7b:26:cf:ab:86:ae:ed:05:a0:7c:06:70:3b:fb:e2:7e:3c:
         dd:f6:fb:b3:7b:c7:dd:0a:c4:1e:96:f4:17:19:c0:41:93:c8:
         38:00:c3:a2:ce:58:47:c5:ae:3f:93:e0:ac:cb:f4:b5:4b:24:
         50:66:cc:fb:8a:06:b3:1e:c5:05:3e:c0:11:ea:e1:75:d5:15:
         6d:4b:f5:e3:86:67:5a:6b:50:c7:00:12:e7:a2:2b:6e:5f:93:
         49:3b:12:62:8e:1d:ae:c0:90:c9:b5:53:c5:95:68:93:2c:4d:
         e1:0f:97:af:ea:d8:f0:f5:fe:31:6b:11:5a:49:71:ca:6b:85:
         2b:31:88:05:fc:b6:d7:fc:1a:7e:7e:de:10:39:c3:87:b4:56:
         07:dd:6b:74:b7:e1:c2:ae:2d:b8:a3:83:0f:c2:3f:6a:48:40:
         0c:0f:b8:96:32:1f:2c:63:0e:ee:29:ac:b7:ac:16:b8:7c:87:
         8d:be:ef:d8:b0:99:fb:0b:86:69:d8:f9:55:e9:05:d5:71:95:
         d9:d7:de:02:f7:57:d4:30:00:0e:27:5a:7f:4e:89:10:0e:ac:
         c2:ef:c4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:36:43 2026 by rpki-client