Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          C+rsR64v2H/4VlIxuPJ6/g+9RB63hZajla1iikCQIgE=
Subject key identifier:   01:62:95:E5:DF:03:2F:D2:F7:D6:66:8D:E5:8E:FF:A1:DE:E0:FF:3D
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019D329A18E91552A09A2E95833BAB7EF983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          0694
Signing time:             Sat 28 Mar 2026 04:00:52 +0000
Manifest this update:     Sat 28 Mar 2026 04:00:52 +0000
Manifest next update:     Sun 29 Mar 2026 04:00:52 +0000
Files and hashes:         1: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          2: _qfnh0B1Q9kr326hHKH4PHRx7H0.roa (hash: TtfUGrmkL3QzIvzYnYw9WDKqe/CRP54QUVhnblV7rQ0=)
                          3: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          4: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          5: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: x69Xs9lFXqHuVCFCvRu7m/dDI1PCOpzGfwnahAGKTQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:18:e9:15:52:a0:9a:2e:95:83:3b:ab:7e:f9:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Mar 28 04:00:52 2026 GMT
            Not After : Mar 29 04:00:52 2026 GMT
        Subject: CN=016295e5df032fd2f7d6668de58effa1dee0ff3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:df:e6:d9:a4:b1:33:63:e1:ec:0b:33:60:
                    81:20:2c:a5:4f:52:ec:80:74:5a:5d:27:a7:17:eb:
                    f5:4b:0f:89:5a:67:78:69:5f:58:f2:d0:e0:14:98:
                    c8:c5:d9:e2:01:f9:89:b7:38:ef:00:1f:6a:ff:97:
                    02:1a:3c:5b:4f:a5:9f:1d:3c:03:f4:f0:af:ab:5d:
                    ea:5a:2d:5d:d6:b0:89:18:99:3e:fd:61:cb:00:50:
                    a9:34:6a:95:00:01:9b:51:2d:0b:58:42:f2:ae:e1:
                    3c:e0:9d:7d:3d:a7:2e:03:3b:87:fe:c6:49:bc:74:
                    11:67:04:4f:90:36:71:55:00:a8:b2:b6:54:3f:60:
                    fa:94:b8:47:7b:4a:fa:6f:35:43:e3:0f:c2:ea:bd:
                    79:b7:12:bf:2e:ec:7a:a3:d0:cd:26:be:fc:e8:23:
                    9d:2a:0f:98:9f:22:d0:bf:10:7e:15:2f:c4:87:27:
                    a0:14:69:f2:0b:07:64:47:2c:45:89:02:35:d6:b1:
                    56:d5:a3:aa:0f:1e:ff:e5:7b:ac:73:90:8c:d1:58:
                    03:09:f9:06:54:10:b8:a1:13:bc:ca:11:3b:49:0a:
                    47:0f:00:a0:a8:76:1d:b9:f9:68:f9:01:94:dd:64:
                    2a:84:ab:69:d0:9b:0b:8f:f8:cb:e6:8c:55:46:b0:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:62:95:E5:DF:03:2F:D2:F7:D6:66:8D:E5:8E:FF:A1:DE:E0:FF:3D
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:c6:c4:db:c1:84:d9:68:8c:a9:fa:19:03:6d:0c:ab:b9:33:
         2d:7c:17:e6:b4:40:f2:2e:83:6a:bf:88:95:9b:42:5d:db:87:
         10:1b:71:d3:d5:87:d3:40:16:bf:77:58:eb:8e:a3:19:7f:6b:
         7b:ea:26:8b:32:87:85:fd:33:08:44:0b:4d:33:37:a2:93:ce:
         3f:9a:81:22:10:2e:a0:f1:50:04:37:c7:53:c0:0f:75:85:c1:
         2a:77:0c:1a:00:a3:4e:85:0b:71:c1:9e:10:5f:5e:14:10:a4:
         23:4a:32:63:24:10:16:00:8a:10:ba:63:7c:7c:d3:c4:c4:f2:
         f9:54:08:42:6b:a6:f0:26:88:bf:36:38:23:c7:71:5b:6b:f6:
         4d:ff:61:ef:8e:cc:20:03:6d:e5:f1:6e:66:1a:e1:32:a5:c6:
         4e:cf:75:37:09:2f:84:8e:e8:b8:fd:a6:a1:95:50:5e:13:3d:
         ac:51:1c:3c:0b:51:e6:37:0f:ad:f2:a0:2c:d4:6a:49:53:e5:
         cd:36:0f:ce:44:cc:6c:22:72:eb:b6:be:3d:7a:bd:cd:2a:e1:
         dd:a4:15:a6:6a:f0:9c:19:ac:b0:31:21:26:70:76:2e:f5:64:
         ad:e7:84:dc:60:99:1a:9a:56:c8:56:e0:18:03:53:79:e1:93:
         0a:b3:58:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:40:03 2026 by rpki-client