Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
File:                     wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json)
Hash identifier:          Gje+s3cNtQUcd93ygW5uDY/AAtsXhwsdw2fnEVKXBbQ=
Subject key identifier:   62:D4:DD:11:68:2A:42:4E:DC:F9:9E:5C:2C:D2:C5:1A:BE:C4:2A:51
Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52
Certificate issuer:       /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
Certificate serial:       019CB1363A99D84F8DE112748FD3FF4A9BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
Manifest number:          032C
Signing time:             Tue 03 Mar 2026 01:00:46 +0000
Manifest this update:     Tue 03 Mar 2026 01:00:46 +0000
Manifest next update:     Wed 04 Mar 2026 01:00:46 +0000
Files and hashes:         1: VWtjnNvXw2oFvoIAgaW9MGZHKMY.roa (hash: 4V1zNjbwx1AfunPBNqK+Id57z1b1okSXeFi8Sx8pi/M=)
                          2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: /Znc4hqUc588ADgYeJ498lrpbZ6lt9+e7JV4lCtKPGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b1:36:3a:99:d8:4f:8d:e1:12:74:8f:d3:ff:4a:9b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
        Validity
            Not Before: Mar  3 01:00:46 2026 GMT
            Not After : Mar  4 01:00:46 2026 GMT
        Subject: CN=62d4dd11682a424edcf99e5c2cd2c51abec42a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:15:d5:77:65:05:75:67:0a:02:0b:36:81:
                    2e:f6:c8:73:60:27:69:f2:92:83:25:cb:3c:b3:7b:
                    cd:97:56:eb:8a:dc:d7:9c:69:c4:b6:76:dd:97:34:
                    13:9c:cb:d8:3e:c9:45:01:41:86:7b:b8:77:05:bf:
                    eb:f9:b6:c1:83:ff:2d:54:81:4e:a7:21:89:f4:90:
                    8e:67:41:ef:f3:b9:ac:a4:9b:d8:50:f0:f4:5f:4a:
                    2b:8e:01:0e:b7:1d:c7:3e:5b:05:a1:41:28:00:a4:
                    26:12:45:eb:56:73:d6:ee:67:55:84:a7:3b:7b:82:
                    16:18:4b:a8:0f:f8:bd:5d:d3:ac:e8:ca:b5:c2:f4:
                    e2:f7:02:50:e4:0d:50:3e:3d:13:36:f2:95:2f:34:
                    6d:d7:5f:d0:05:2d:9e:56:4c:39:0b:aa:d6:c7:02:
                    0e:fd:9c:f9:26:d2:1a:b4:89:61:00:4b:18:21:32:
                    cb:bb:71:e7:d9:93:f3:8b:b1:12:f1:fd:c4:d1:4e:
                    7f:77:b1:40:0a:5d:09:13:21:3c:1b:04:43:1e:08:
                    a4:73:db:78:a0:03:dd:3c:34:ca:88:58:67:fa:bb:
                    35:9d:8b:bb:93:39:81:87:3d:85:44:12:0c:e7:cb:
                    d9:47:be:bc:e9:b6:cb:08:e9:2d:f7:42:38:31:f2:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D4:DD:11:68:2A:42:4E:DC:F9:9E:5C:2C:D2:C5:1A:BE:C4:2A:51
            X509v3 Authority Key Identifier:
                keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:42:95:ba:4e:95:11:65:fa:6e:e6:63:57:53:80:09:86:d2:
         99:f0:40:95:6b:c0:5a:e0:1d:b7:4b:8e:87:a3:76:96:47:0f:
         2b:90:2c:1a:b8:28:87:1d:b2:51:3d:41:50:e4:9d:b4:0f:b5:
         fc:a8:14:3c:2a:0a:c3:f2:c4:9c:6d:a8:51:a4:d1:37:52:29:
         12:ff:c5:f0:6c:22:49:7e:9e:fc:53:6c:6b:15:42:c7:ed:30:
         5f:ae:e7:95:52:30:4f:02:5d:79:0e:86:80:76:65:cc:c1:89:
         8e:82:e8:af:aa:7b:eb:bd:ba:c5:f2:ae:77:fb:83:05:07:bb:
         62:fb:de:f8:7a:ff:fc:cb:dc:36:02:34:71:78:bf:38:9b:d8:
         9f:a9:8b:11:23:29:c3:1e:c4:1f:fa:23:09:69:b8:8a:ec:06:
         09:1e:04:e2:44:da:0b:fd:c9:b0:af:df:18:02:e9:93:5c:b6:
         e9:d3:4b:d3:1d:f3:c7:cf:28:8d:0c:b0:71:b7:3f:86:6c:29:
         fb:1d:68:1a:0c:ff:a5:a8:e9:e6:6c:c4:1f:89:84:6c:5c:51:
         c9:75:37:27:03:f6:ed:2a:20:1e:6c:a2:09:e3:5c:a9:1d:6f:
         b0:1a:5e:a8:13:a6:ee:d8:e7:73:73:ca:ab:e3:f9:ff:3f:c8:
         8e:68:af:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:14:28 2026 by rpki-client