Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
File:                     wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft (raw, json)
Hash identifier:          cxXc7DiINDH9L9SDQR0TTXeMJAhlyztvJEDBrTSFvLk=
Subject key identifier:   C0:D0:35:BF:46:11:36:08:A0:23:06:9F:BF:57:8A:2D:64:78:08:F3
Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B
Certificate issuer:       /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
Certificate serial:       019D37F6FD2283D952438A3F6EA0C1C27DEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
Manifest number:          1053
Signing time:             Sun 29 Mar 2026 05:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:26 +0000
Files and hashes:         1: a2wJLV7P5DGWhusYzf4J4uUDAug.roa (hash: q6iaHsPiufcNlLRUKtOJ5vKMvHcKJCFipIPxXUmEW6U=)
                          2: hkDILjMkkdM5vhdicPcOC_rPPAk.roa (hash: 5pbYYSt+DRX/pDl00GSjYc7pEFz9SrosjpZf7GRqg18=)
                          3: wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl (hash: XAmq+J73WVAe3SHuzk4HvHDhf2gdeND3CIRoAK6HGJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:fd:22:83:d9:52:43:8a:3f:6e:a0:c1:c2:7d:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b
        Validity
            Not Before: Mar 29 05:00:26 2026 GMT
            Not After : Mar 30 05:00:26 2026 GMT
        Subject: CN=c0d035bf46113608a023069fbf578a2d647808f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:59:bd:7c:c9:23:06:c4:e2:bc:ab:8b:0a:0a:
                    20:4b:ad:7a:83:a1:fb:be:ef:43:cb:d3:40:af:3b:
                    45:7f:8c:be:33:6d:a1:97:96:2f:f7:69:24:3c:44:
                    0e:2b:54:ac:92:e8:e4:c7:e3:a7:e3:df:9c:eb:72:
                    12:3d:59:66:97:9d:ba:a0:96:be:e6:da:54:90:d9:
                    f8:38:31:11:a5:41:8e:c9:e0:43:e1:a2:14:8a:c9:
                    3a:04:17:81:bd:c4:92:22:92:0c:b3:dd:bc:4a:1e:
                    0c:4f:8b:02:51:23:8d:bf:ec:22:e4:d0:b4:d5:4e:
                    68:f2:5c:9b:81:45:71:b6:15:80:51:29:02:34:97:
                    06:51:2b:ef:c3:75:24:e5:2c:6d:62:0f:f3:4a:68:
                    f8:6b:42:36:13:e6:ed:c6:48:be:6c:6a:85:1a:17:
                    5c:f3:40:f8:6e:66:30:74:73:c0:70:41:98:1a:96:
                    2d:ed:e8:2a:df:34:78:c4:64:63:a0:c5:0d:b8:21:
                    14:d1:3c:4c:14:a2:d4:ba:ac:f1:c1:a8:59:78:eb:
                    41:59:b8:2f:8c:c1:05:e4:06:fd:c4:77:93:85:0a:
                    b6:59:26:63:72:fa:67:cf:4f:e5:64:f5:53:36:86:
                    52:c9:f7:8e:b5:91:08:4d:b3:43:d5:56:2a:65:c0:
                    6e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D0:35:BF:46:11:36:08:A0:23:06:9F:BF:57:8A:2D:64:78:08:F3
            X509v3 Authority Key Identifier:
                keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:90:a9:ca:8d:8f:50:be:07:9b:62:66:cf:19:7b:f1:11:bc:
         b0:c4:73:2d:5f:28:64:d2:42:22:29:36:10:cb:46:74:45:7e:
         c7:54:e1:ac:ea:15:4a:6a:13:74:16:92:88:f5:ee:c4:3a:1c:
         b7:b8:51:32:cd:9d:db:25:f2:06:de:7f:ca:36:e1:c2:80:80:
         94:61:70:ec:de:5a:9c:e2:47:ec:2a:6b:67:72:51:4e:6a:cf:
         71:b6:b4:50:b3:48:39:67:63:8a:25:b3:32:06:1f:5c:dd:fc:
         d5:67:62:6e:89:43:3c:75:4e:0b:5b:82:38:02:e3:97:30:7a:
         db:1b:38:55:78:0a:6d:9e:57:c9:ce:66:ee:ee:00:15:68:bf:
         d8:99:ac:5e:6f:cb:02:07:5d:3e:1a:b2:cd:15:8c:3f:f1:80:
         45:a0:e8:96:cd:63:91:9e:e8:d2:19:ed:21:ba:c7:d2:03:cd:
         47:cb:de:c1:6b:a2:af:12:1b:f8:0e:e6:be:45:73:10:93:b7:
         02:d7:46:e1:ce:7e:74:06:92:b9:ac:59:fe:35:8f:01:7c:7e:
         3c:9b:bd:d0:ea:8d:a9:1e:83:22:4d:78:ef:46:c4:4e:98:c7:
         ce:a4:c2:eb:cb:dc:8f:6d:a3:b3:9d:78:0b:b3:86:da:8d:32:
         45:8e:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:02 2026 by rpki-client