Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
File:                     Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft (raw, json)
Hash identifier:          Hi5bWHIkyPeiPbrEb+CbMjq9JvWGJnxT3DnqDHuhclo=
Subject key identifier:   DF:3E:6B:F1:77:51:AD:D3:52:C5:4E:14:30:D4:2C:1F:81:7F:22:2F
Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Certificate issuer:       /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Certificate serial:       019D3940F8EAFFCFD5800F1066E936D8C5F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
Manifest number:          12FD
Signing time:             Sun 29 Mar 2026 11:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:52 +0000
Files and hashes:         1: J63Xt7-yCtCeAOrP4fi5cBFgyo0.roa (hash: dDfL0X88LeIYm5lvfojYlVc/wL+pOG6NCq0L45cW30w=)
                          2: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl (hash: pUE76JJmdPtmJP50qxochEa4JOwnAGETeN1EnSrUz2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:f8:ea:ff:cf:d5:80:0f:10:66:e9:36:d8:c5:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
        Validity
            Not Before: Mar 29 11:00:52 2026 GMT
            Not After : Mar 30 11:00:52 2026 GMT
        Subject: CN=df3e6bf17751add352c54e1430d42c1f817f222f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:95:4c:2d:86:28:a2:e1:8e:35:6e:47:99:
                    ec:f5:4a:dc:61:c6:14:c5:26:e2:b3:33:ab:0c:0f:
                    18:b1:46:78:79:11:85:4d:51:f3:1f:49:ff:6f:08:
                    7e:55:17:6d:1b:66:7c:63:1f:c4:59:12:33:c1:cb:
                    c7:07:e2:88:43:ab:f2:7b:6d:43:31:05:7b:e2:fa:
                    e4:5c:a3:5f:d7:3a:98:11:ac:be:c9:ca:18:48:8d:
                    e4:c9:3d:40:44:26:a7:b2:41:2f:5f:90:0b:c8:3e:
                    dd:59:96:df:8f:f8:98:04:51:86:13:f9:66:ba:c3:
                    37:2a:fa:a2:ea:42:01:d7:9b:33:6f:ab:0e:33:86:
                    38:10:c7:0e:48:28:a9:ee:08:9f:10:55:0c:96:23:
                    c9:a6:4b:71:2e:d7:37:f8:74:c0:7e:ac:4e:f9:db:
                    20:fb:72:c3:f2:18:a3:be:ff:db:bd:b9:ca:3c:db:
                    34:09:8e:88:a0:eb:88:3e:c2:20:f3:e0:33:c7:fd:
                    43:20:3a:30:5a:b7:23:0d:3f:cc:37:30:83:99:98:
                    aa:df:17:b0:04:54:bd:cf:b7:44:90:ee:c5:6e:4c:
                    bd:65:6d:f4:75:8a:23:1e:b3:68:7e:38:4b:73:9c:
                    d3:3a:57:78:a9:8d:03:87:07:b9:50:dd:7c:40:be:
                    d0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3E:6B:F1:77:51:AD:D3:52:C5:4E:14:30:D4:2C:1F:81:7F:22:2F
            X509v3 Authority Key Identifier:
                keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:eb:e4:c7:6d:da:59:bd:20:49:e6:06:83:74:7b:b2:a2:61:
         af:a4:a0:2c:6a:4f:77:49:c6:2c:60:0d:e4:79:28:37:c0:2e:
         0c:ec:27:ed:58:82:a1:30:8e:dd:9e:2e:22:c1:b3:04:6a:5b:
         39:8a:35:df:16:dc:ad:4b:61:7e:8f:8f:4c:31:87:be:94:1c:
         2b:6a:27:6c:d8:ed:37:3c:e8:d9:d8:9a:f5:2f:2d:19:43:22:
         63:b7:80:fa:19:04:1f:e3:c1:56:5a:95:06:53:c3:a2:42:6b:
         49:b7:95:bb:2e:e6:ea:0e:71:a4:f0:e6:44:2d:60:8c:1d:1b:
         71:ca:19:52:6d:b5:e7:5f:8c:87:f5:b0:29:46:96:0d:7d:ba:
         2a:1a:48:ef:90:e8:60:0d:74:14:62:5d:b9:c9:a1:bf:0e:3b:
         d4:f9:66:69:9e:89:9f:94:46:e4:32:a2:80:ed:59:9b:3b:76:
         c9:84:7c:a6:f8:8a:39:d4:19:52:7a:03:2e:a1:29:f2:76:21:
         3b:89:5e:99:a3:87:b6:d6:56:06:1f:bc:88:d6:45:9b:b7:43:
         96:44:24:ac:b8:19:ec:4a:1e:3d:1f:d7:60:77:d2:26:75:ed:
         cf:07:b0:36:2c:9c:b5:0d:ea:e4:5f:ec:24:52:8a:a0:23:2c:
         e2:e4:4b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:34 2026 by rpki-client