Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
File:                     Wc4cxXrNTYGB7TBThd7njbF14iE.mft (raw, json)
Hash identifier:          qo7Qdg7+kDnblXzK/pobXs6BXLMkloobjO+HzonIGDY=
Subject key identifier:   A7:83:43:91:9C:EF:8A:FD:68:C7:55:82:17:CE:E0:7D:82:27:CF:0D
Authority key identifier: 59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21
Certificate issuer:       /CN=59ce1cc57acd4d8181ed305385dee78db175e221
Certificate serial:       019D39E5B951C4B996F3625AE1160E5A84FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
Manifest number:          186E
Signing time:             Sun 29 Mar 2026 14:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:49 +0000
Files and hashes:         1: JHzr-fDxgEMp9ezJsIm0piJhMic.roa (hash: xjYg8AyxN1oM4uVPsqeVh/5zmMR24rFQndC0jX4CsDk=)
                          2: Wc4cxXrNTYGB7TBThd7njbF14iE.crl (hash: bsU6QZBh1t7jz97RAb87mk6A0VLdXcMLnLCHwjSqXEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:b9:51:c4:b9:96:f3:62:5a:e1:16:0e:5a:84:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ce1cc57acd4d8181ed305385dee78db175e221
        Validity
            Not Before: Mar 29 14:00:49 2026 GMT
            Not After : Mar 30 14:00:49 2026 GMT
        Subject: CN=a78343919cef8afd68c7558217cee07d8227cf0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5a:57:b0:77:fa:db:57:b6:32:14:42:35:37:
                    4b:9c:69:22:eb:a7:e8:15:5d:86:ab:a8:fd:ac:58:
                    cf:ee:25:57:15:4f:c9:4b:a2:8b:6e:ef:89:a5:6a:
                    87:1e:7c:94:89:f2:bd:33:60:1f:14:5e:bf:67:1f:
                    b0:75:ce:10:9f:3d:23:14:74:fe:f7:dd:a9:64:b8:
                    e9:b2:79:41:d7:2b:13:48:b6:ac:4f:7e:8c:1d:e2:
                    69:d6:44:2a:3c:4f:44:0e:ca:a4:f8:2a:1d:fd:63:
                    f2:43:9c:5f:23:b9:b0:bf:df:cb:58:42:1d:16:1f:
                    8c:1e:0c:49:14:18:8c:3e:99:72:43:af:2d:1f:f4:
                    5c:83:32:4e:95:14:36:54:ff:cb:e6:1c:d7:87:97:
                    83:c5:96:0e:4d:3a:86:b3:0d:ab:f7:e4:b3:94:33:
                    f2:5f:54:c9:a6:15:c2:d1:17:03:39:b1:40:9d:ab:
                    f5:64:27:cb:87:61:9f:48:b2:f9:d5:c9:a8:7a:7c:
                    9a:18:da:34:df:c3:69:ae:75:42:32:e1:d8:20:74:
                    4d:06:74:23:be:ef:a7:95:88:28:6b:e0:b3:38:61:
                    c5:58:27:5f:b8:8a:b9:04:d0:f0:2e:5f:a6:df:fe:
                    0e:86:41:8a:16:2a:ee:78:2b:d1:22:57:4c:69:76:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:83:43:91:9C:EF:8A:FD:68:C7:55:82:17:CE:E0:7D:82:27:CF:0D
            X509v3 Authority Key Identifier:
                keyid:59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e5:f6:6d:f4:86:0d:fe:34:7f:0d:a1:ea:71:fd:3d:03:26:
         f2:ba:c9:9b:20:0b:44:cb:f9:12:0e:4c:f8:4d:7b:0a:83:62:
         be:2f:45:01:33:11:bc:ac:c0:db:36:46:89:b7:a1:5d:c2:5f:
         ba:13:89:94:a0:dc:e0:47:0a:e7:dd:a1:ae:47:ef:db:05:1a:
         d4:3c:12:2f:d4:6b:50:b2:73:35:9f:9d:11:e4:93:89:5b:e7:
         2a:34:54:d7:e1:f3:e4:fd:99:c9:30:43:49:b4:87:f0:5f:2c:
         4f:3f:bf:9b:21:18:10:11:d7:27:7b:83:05:27:b6:38:98:7d:
         a0:18:9a:1c:0b:36:35:65:44:5d:0c:fd:55:c5:73:fe:ad:9d:
         16:37:f8:f1:c5:c9:62:72:6e:63:55:87:71:aa:1b:fa:40:ab:
         83:39:a9:64:21:cd:32:1a:6f:36:b8:88:0e:6d:39:b8:4f:9d:
         f7:b1:05:95:98:34:4e:b0:be:38:c0:62:7c:f5:25:d2:6a:fe:
         f7:39:14:2b:9d:bc:12:f6:bb:93:1f:5a:cb:af:c0:f8:91:97:
         f1:ce:25:aa:dd:07:a4:a5:90:67:ef:c4:b6:70:37:c2:0a:e8:
         85:16:bd:ea:2f:84:77:28:29:ad:3e:a1:a9:09:ee:05:95:64:
         3d:75:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:42 2026 by rpki-client