Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
File:                     _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json)
Hash identifier:          wxQEfq0L2H3RGFQAv6QYPWja8UYf/sQ2fY5zk3hBFBM=
Subject key identifier:   F6:A4:4C:49:D1:4F:E0:DE:86:D5:78:64:49:93:18:C7:97:62:B2:6B
Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
Certificate issuer:       /CN=ff0732a42328074701142221e3d46a29f296c29c
Certificate serial:       019D382EA650B7E845AC45C036D07288B0F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
Manifest number:          043E
Signing time:             Sun 29 Mar 2026 06:01:14 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:14 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:14 +0000
Files and hashes:         1: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: fYvePULCKtWCPZ8I+GST4Rs4+WZmaXvYri3PqHXu+2M=)
                          2: m6n5IdDCaj0-A-YgZFlUqaEncFY.roa (hash: cxBAKtW14WwE7esOxfQvIIjXHk/GahU8AilWvcmMPAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:a6:50:b7:e8:45:ac:45:c0:36:d0:72:88:b0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c
        Validity
            Not Before: Mar 29 06:01:14 2026 GMT
            Not After : Mar 30 06:01:14 2026 GMT
        Subject: CN=f6a44c49d14fe0de86d57864499318c79762b26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:e9:c5:a5:c6:51:6c:37:04:7f:d4:d4:6c:
                    61:d8:2b:df:1c:b9:cb:de:a8:7c:22:4c:4b:ea:16:
                    40:7b:0d:66:1d:c8:8e:fb:7e:cd:99:0b:d4:4c:fc:
                    19:b1:28:b7:fe:ec:22:76:42:be:02:68:ab:da:fc:
                    d8:1e:9f:1b:bf:40:e4:d9:2e:18:11:c2:54:3c:f6:
                    2c:6e:ed:66:81:79:99:63:b0:ec:fe:28:e2:86:94:
                    35:a7:f9:90:7f:8c:fd:34:7c:ca:b0:ca:e4:3a:52:
                    28:47:36:18:04:2d:45:40:f1:ff:1f:28:be:bc:9a:
                    be:49:c7:13:70:94:95:f4:13:d2:5a:f8:67:77:75:
                    7d:5b:91:7d:be:ed:64:3d:0a:94:f1:26:a4:1b:80:
                    73:98:9f:de:59:e5:ec:ff:6a:d0:cf:8c:25:79:f6:
                    2f:ee:1c:d0:9d:25:01:df:4a:7b:9e:6a:26:87:49:
                    44:fe:a1:1b:87:3f:07:23:f4:eb:a4:26:05:bf:3c:
                    be:27:b7:1a:2d:50:db:a5:01:eb:a8:fa:7f:a3:f1:
                    a3:c8:a4:dd:2d:1a:bf:f0:9a:8f:68:d4:0d:81:d1:
                    70:f7:50:03:9a:dd:59:6a:3a:88:13:54:91:6e:c7:
                    5d:ad:61:9d:12:2b:29:18:91:c5:d4:e9:aa:2e:42:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A4:4C:49:D1:4F:E0:DE:86:D5:78:64:49:93:18:C7:97:62:B2:6B
            X509v3 Authority Key Identifier:
                keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a9:8e:f7:8a:03:05:ce:f2:55:f4:99:e4:8d:10:dd:f1:ee:
         6e:eb:7e:89:62:46:9c:01:b1:9c:19:82:b5:1e:0f:bd:6a:c0:
         b2:0c:7f:8b:4f:b0:05:2e:32:57:9d:9a:8d:11:8b:40:ce:ea:
         20:a2:f6:1a:2a:1e:4c:6c:74:b1:5e:43:9c:3e:98:33:d8:aa:
         43:74:99:47:a4:32:f8:b2:34:90:17:3c:59:33:a9:22:16:48:
         20:9a:53:93:c2:d2:3d:86:ff:42:6b:c5:ca:9b:5f:9e:53:35:
         61:eb:1f:37:97:bc:80:e6:2e:31:1f:cb:5d:df:aa:1b:98:66:
         04:fd:a2:60:f8:66:3f:82:4a:6d:6b:51:e5:5c:02:99:ef:48:
         bd:4d:23:bb:12:39:08:21:49:d5:f7:ce:30:31:d4:23:a8:84:
         a0:7f:04:1f:53:ea:55:c7:c1:3c:f0:8a:40:f9:52:34:44:27:
         fc:3f:90:70:22:10:ef:61:94:b6:ad:19:02:08:53:ca:e1:ff:
         88:b8:9d:8e:38:ec:5a:38:34:05:77:0b:74:31:34:d7:c6:43:
         cf:56:05:aa:3f:d3:63:09:80:23:02:22:7d:3b:5a:89:52:74:
         1c:64:ee:9c:86:64:38:28:c1:03:d6:21:dd:d1:14:0e:45:d9:
         c1:9d:3e:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LqZQt+hFrEXANtByiLDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMDczMmE0MjMyODA3NDcwMTE0MjIyMWUzZDQ2YTI5ZjI5
NmMyOWMwHhcNMjYwMzI5MDYwMTE0WhcNMjYwMzMwMDYwMTE0WjAzMTEwLwYDVQQD
EyhmNmE0NGM0OWQxNGZlMGRlODZkNTc4NjQ0OTkzMThjNzk3NjJiMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI3pxaXGUWw3BH/U1Gxh2CvfHLnL
3qh8IkxL6hZAew1mHciO+37NmQvUTPwZsSi3/uwidkK+Amir2vzYHp8bv0Dk2S4Y
EcJUPPYsbu1mgXmZY7Ds/ijihpQ1p/mQf4z9NHzKsMrkOlIoRzYYBC1FQPH/Hyi+
vJq+SccTcJSV9BPSWvhnd3V9W5F9vu1kPQqU8SakG4BzmJ/eWeXs/2rQz4wlefYv
7hzQnSUB30p7nmomh0lE/qEbhz8HI/TrpCYFvzy+J7caLVDbpQHrqPp/o/GjyKTd
LRq/8JqPaNQNgdFw91ADmt1ZajqIE1SRbsddrWGdEispGJHF1OmqLkJyOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPakTEnRT+DehtV4ZEmTGMeXYrJrMB8GA1UdIwQY
MBaAFP8HMqQjKAdHARQiIePUainylsKcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYt
N2NhMjJiYTE0MWIzLzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jNDk3NWYtZWE5NC00M2E3LTkzMjYtN2NhMjJiYTE0MWIz
LzEvX3djeXBDTW9CMGNCRkNJaDQ5UnFLZktXd3B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW6mO94oD
Bc7yVfSZ5I0Q3fHubut+iWJGnAGxnBmCtR4PvWrAsgx/i0+wBS4yV52ajRGLQM7q
IKL2GioeTGx0sV5DnD6YM9iqQ3SZR6Qy+LI0kBc8WTOpIhZIIJpTk8LSPYb/QmvF
yptfnlM1YesfN5e8gOYuMR/LXd+qG5hmBP2iYPhmP4JKbWtR5VwCme9IvU0juxI5
CCFJ1ffOMDHUI6iEoH8EH1PqVcfBPPCKQPlSNEQn/D+QcCIQ72GUtq0ZAghTyuH/
iLidjjjsWjg0BXcLdDE018ZDz1YFqj/TYwmAIwIifTtaiVJ0HGTunIZkOCjBA9Yh
3dEUDkXZwZ0+ww==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:35 2026 by rpki-client