Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File:                     wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier:          2zOsFyPbpIH08g58/bFydN5Gb9mfzFGi00jajppLMNY=
Subject key identifier:   5B:40:85:0C:8A:5B:6A:D3:A8:1D:53:0D:1E:D1:FF:12:45:D3:F6:02
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer:       /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial:       019CE66DA3B1391DB00577847EF0FC416912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number:          0F3E
Signing time:             Fri 13 Mar 2026 09:01:10 +0000
Manifest this update:     Fri 13 Mar 2026 09:01:10 +0000
Manifest next update:     Sat 14 Mar 2026 09:01:10 +0000
Files and hashes:         1: 5WdAfePuazyKOqDBol6a24O3XpY.roa (hash: mhrHbQmeUkZKLJUs5FqRvkUEbMJKmKPn0IXdQCttlDY=)
                          2: 9NEEsIaoOSxV4C68oWD-8q01-s4.roa (hash: Yeh595qgzPBaen9pZBMaBJZ2g7PUtXo9qE04VFTndRI=)
                          3: owXJBHpnE_pu52wzEvYbFXAGAAM.roa (hash: wFpSi4A2S+i91fC051hXq5mn24CHrss9+Y9bNRQMfGc=)
                          4: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: qAwd3ooUCeDnG8oahFydo9faC9Htey9LTrFx5RDE8vk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:6d:a3:b1:39:1d:b0:05:77:84:7e:f0:fc:41:69:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
        Validity
            Not Before: Mar 13 09:01:10 2026 GMT
            Not After : Mar 14 09:01:10 2026 GMT
        Subject: CN=5b40850c8a5b6ad3a81d530d1ed1ff1245d3f602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0c:c6:63:f3:4f:f1:f9:dc:00:77:b3:76:07:
                    06:05:8a:45:4e:97:e0:f7:c4:f2:64:23:8c:28:81:
                    30:d9:8f:92:7e:0a:d5:86:c4:a8:0f:36:38:ea:d1:
                    10:87:e4:bd:7c:00:4e:ba:b4:14:86:0b:79:a7:c7:
                    c4:04:e3:b0:0b:c2:5a:f0:2f:bd:0c:bc:2e:cb:19:
                    0d:81:fa:a9:80:4c:8a:c4:a8:b8:cd:05:5e:05:bd:
                    f9:db:8d:35:5a:a8:00:81:09:2c:6f:64:26:37:21:
                    b8:2c:34:65:2c:f4:ed:fe:b3:7a:56:a7:1b:0b:03:
                    58:38:2c:73:6d:29:85:4d:a2:2d:66:2e:6b:19:39:
                    ee:e3:fc:ef:5e:af:1f:48:b2:60:3f:81:f9:15:88:
                    da:19:b7:71:da:1b:19:0b:bb:c9:60:c1:36:48:e2:
                    06:19:83:60:fd:a6:54:1f:1b:13:73:ec:f1:04:8d:
                    01:be:1b:c5:a9:d3:f6:81:f2:be:3b:73:3c:93:71:
                    57:d5:23:d4:bb:64:dc:98:12:ca:01:61:dd:19:2f:
                    2d:4b:c7:ce:05:90:83:d3:2d:b6:18:50:98:8c:17:
                    1b:2a:a6:ac:a4:50:e4:98:0e:94:c0:0d:b2:d2:3c:
                    40:77:62:19:8d:17:89:cd:b5:bf:7d:74:e5:47:d1:
                    0e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:85:0C:8A:5B:6A:D3:A8:1D:53:0D:1E:D1:FF:12:45:D3:F6:02
            X509v3 Authority Key Identifier:
                keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:cb:26:93:60:52:bf:83:45:44:10:36:3a:22:ce:dd:1f:e1:
         8f:8c:b0:fc:7d:5c:d4:8e:8d:17:05:e9:6e:f6:38:95:c3:e5:
         79:74:7f:0d:ca:3e:dd:d2:f3:ea:bc:f4:6c:4e:f9:ad:c6:af:
         2a:0a:50:2d:c9:f3:33:ac:4c:6d:53:34:5b:1a:48:13:04:2c:
         57:4f:26:d2:78:e2:e2:bd:76:6b:e1:f4:78:e8:ce:55:86:15:
         aa:fc:f6:b6:bd:ec:56:7a:39:e4:dc:3c:0c:ed:c3:f5:5a:1f:
         69:14:03:e5:d7:65:c9:a5:55:34:10:6b:06:0b:fb:be:30:78:
         63:68:42:f1:ab:a2:cf:b3:94:0f:8c:6a:ea:8b:2c:72:57:c7:
         9c:fc:8a:9d:a8:d6:0a:0d:86:33:0f:db:75:00:12:b4:e9:0e:
         f7:af:1e:ff:a1:47:ac:46:59:a7:19:7c:fb:a4:90:7d:be:ae:
         79:5f:38:be:58:d9:1b:5b:28:65:36:27:dc:8d:9e:50:53:18:
         07:15:74:ca:2b:f5:c3:c4:58:6e:e3:a5:32:85:43:f8:00:5b:
         fe:16:be:92:a0:a4:9f:60:f1:a2:34:91:63:a0:66:2b:92:23:
         a9:58:5d:dd:e7:ab:66:6c:f9:30:4a:69:07:90:9c:e6:19:10:
         47:7f:21:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:35:38 2026 by rpki-client