Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          YlFKo6MVBhIMJ0qVSf6OKYRXjxIl31gW1PsFZUfH86Y=
Subject key identifier:   AA:9C:AB:2F:45:A8:9D:BF:39:CC:DC:54:AF:78:E4:E7:3D:87:94:A0
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       019CCAC0211387B3700AC17095D402DB0792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          03B6
Signing time:             Sun 08 Mar 2026 00:01:54 +0000
Manifest this update:     Sun 08 Mar 2026 00:01:54 +0000
Manifest next update:     Mon 09 Mar 2026 00:01:54 +0000
Files and hashes:         1: 3ROQujXGNLqdu4u_7p3X6MZFjqo.roa (hash: gsfXZvICCIs7dkt15+pJ7BF5UxTZq1/LQLpC6Nx+te8=)
                          2: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: bBne5sAr/PWvBgErRO9UlOaxM/X4Z7mTbQ0Kbl+D8NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 20:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ca:c0:21:13:87:b3:70:0a:c1:70:95:d4:02:db:07:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Mar  8 00:01:54 2026 GMT
            Not After : Mar  9 00:01:54 2026 GMT
        Subject: CN=aa9cab2f45a89dbf39ccdc54af78e4e73d8794a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:be:b5:27:1f:70:d2:1b:cb:fe:7f:db:95:
                    18:55:6e:01:7d:3f:c1:55:80:ee:b6:15:7d:32:a0:
                    f5:ae:8b:2c:34:9c:6d:7b:9a:a1:15:6f:1d:97:d4:
                    09:2d:a7:d3:fe:87:9c:b3:57:1c:24:b3:e4:c8:f1:
                    ca:2c:21:c7:30:05:aa:d9:01:9a:b5:72:37:3e:82:
                    0e:d3:0f:c0:07:7d:cd:6d:28:74:85:cf:20:fd:eb:
                    fb:b6:16:80:8b:d5:29:d4:b5:f0:98:c2:2f:67:70:
                    4d:33:73:2b:3d:95:44:c1:81:67:c0:8d:4e:6f:69:
                    59:a6:48:43:05:c2:c9:30:60:1b:69:fc:98:d3:0f:
                    b7:4d:87:1e:22:42:f5:7b:8d:cf:0e:10:80:75:72:
                    82:ee:9c:eb:19:f3:ab:0f:32:95:35:79:a7:e9:7e:
                    6d:8f:fa:21:d2:ab:e8:eb:c1:fe:39:0d:f7:a3:f3:
                    c5:3e:d5:27:dd:6e:df:2b:f0:f3:7d:99:80:7b:0d:
                    21:25:8e:07:2e:f4:d0:d2:6e:19:32:44:dc:35:69:
                    95:50:4b:01:53:f5:e7:dd:5b:8c:5a:e1:11:59:dd:
                    f6:84:02:c1:37:1f:5d:4c:10:3c:7f:83:91:11:c9:
                    5e:8c:f6:54:b5:be:e8:2a:26:fe:cf:d2:31:24:28:
                    44:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9C:AB:2F:45:A8:9D:BF:39:CC:DC:54:AF:78:E4:E7:3D:87:94:A0
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:52:e8:3d:a1:e8:7c:1f:83:10:0c:09:f1:91:f1:16:3e:2a:
         4e:bc:3b:8b:99:ab:22:15:86:d7:3b:29:a5:5d:09:ed:c7:55:
         12:6e:22:b8:4b:ad:ce:0b:d4:0e:1c:78:76:b6:26:a9:64:84:
         58:50:1e:4c:64:ba:b7:c4:b0:2b:32:ac:88:a6:4d:9d:97:d8:
         64:0c:5b:29:0d:10:6a:7d:93:90:c9:76:87:88:95:7c:ef:cd:
         42:24:e0:a1:91:71:41:74:d1:9c:5a:e0:e2:ff:22:d2:5e:cf:
         82:aa:49:c7:96:a5:64:9e:47:5a:33:35:c9:8f:9a:e9:c1:b2:
         6c:a5:53:cc:e6:66:c8:16:08:f4:06:84:da:05:30:f7:53:ed:
         41:17:d3:de:80:6e:83:b7:73:65:a4:75:71:cc:a9:5e:ae:83:
         47:61:27:58:16:52:30:6e:7b:4a:4d:cc:01:0d:54:2f:47:97:
         0d:81:bc:bb:77:d1:d6:25:d0:d6:6b:ee:de:e8:a9:45:3d:ce:
         66:f1:cf:ba:67:3a:9e:19:eb:50:e9:e9:ba:e9:b8:03:c0:93:
         95:d2:a0:6c:f9:95:5d:42:bf:2a:4f:57:31:be:5f:8c:92:45:
         7f:f3:77:39:4c:07:f8:0c:d3:22:ae:3a:c4:88:6e:ff:5f:e6:
         3c:f2:24:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:20:18 2026 by rpki-client