Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
File:                     wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft (raw, json)
Hash identifier:          +W0rm0UUosDqWNPq8j1o27hQu9oInY1jWOK2hFmOm7M=
Subject key identifier:   DD:89:FF:28:66:9E:8B:F9:EF:07:77:74:AB:FF:51:F1:54:C8:E3:E4
Authority key identifier: C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60
Certificate issuer:       /CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
Certificate serial:       019F1867E4548F10C1149D1965612783A99C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
Manifest number:          17A3
Signing time:             Tue 30 Jun 2026 12:01:29 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:29 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:29 +0000
Files and hashes:         1: ZxOMX8jLnOMNJ0h5pILVLwIuapU.roa (hash: 2tuw1jY2OxZRTtvUxqcy7Nsr44VQDPN/Do/SNOdYK/s=)
                          2: wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl (hash: wJAPn+XRSH2KG3nG7axmXFOeEz1J8sT9Xgz99Org2sA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:e4:54:8f:10:c1:14:9d:19:65:61:27:83:a9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3037d2e7b09a0fbd108168a44874f6bd1689b60
        Validity
            Not Before: Jun 30 12:01:29 2026 GMT
            Not After : Jul  1 12:01:29 2026 GMT
        Subject: CN=dd89ff28669e8bf9ef077774abff51f154c8e3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:1e:89:ea:f9:f0:44:c7:71:9c:50:0d:04:
                    a8:56:56:4b:58:53:b2:eb:41:bb:53:22:ce:8d:bb:
                    38:38:90:5f:a9:1e:0d:74:e8:6e:86:80:d8:d9:4c:
                    58:c9:1d:2a:6b:09:a9:c6:fa:20:08:29:0e:b2:99:
                    9a:63:bd:13:2e:e9:1c:62:0e:c3:e5:66:03:58:15:
                    86:5b:62:9b:f3:21:d3:9a:a9:6d:a5:62:d0:8d:bc:
                    d7:53:a5:c5:dc:f7:ad:10:16:81:90:4c:bb:35:9b:
                    c3:fe:24:ba:e6:f3:7b:2b:22:d9:8d:86:e6:0e:fa:
                    2d:ca:dd:0c:f7:8f:06:84:fb:cc:16:60:77:0b:a8:
                    40:0a:1a:76:a6:21:80:8c:c9:40:95:c4:9d:64:09:
                    b8:d1:33:16:5e:31:0a:3c:6e:af:11:ce:a1:50:a5:
                    94:d9:70:54:d7:cf:5d:30:a3:42:00:d4:fe:15:ca:
                    89:9a:4b:8f:c0:aa:ab:b7:ef:30:df:60:95:f0:60:
                    4d:85:f9:50:e5:5d:c6:1d:fe:68:6c:63:aa:1d:29:
                    cd:b0:2b:97:c4:86:90:aa:2c:c8:ae:33:77:11:3f:
                    52:d8:61:01:7b:24:af:45:9a:b1:77:90:f7:5e:ab:
                    cc:5a:c8:0d:f9:64:ca:ce:16:ca:a4:fc:3e:f6:dd:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:89:FF:28:66:9E:8B:F9:EF:07:77:74:AB:FF:51:F1:54:C8:E3:E4
            X509v3 Authority Key Identifier:
                keyid:C3:03:7D:2E:7B:09:A0:FB:D1:08:16:8A:44:87:4F:6B:D1:68:9B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwN9LnsJoPvRCBaKRIdPa9Fom2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6cb72d-690a-406f-8add-80e7bbb041b2/1/wwN9LnsJoPvRCBaKRIdPa9Fom2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:8f:68:5c:a1:e4:07:28:1f:04:2d:39:6c:8d:de:de:be:c3:
         d8:1d:02:17:40:de:bb:a8:80:e1:58:50:79:b2:f1:8a:c0:74:
         a9:e1:be:9d:96:a5:ab:59:44:80:de:8d:79:80:bb:02:5a:3f:
         eb:ee:d5:57:40:7d:46:76:25:17:2d:29:d5:04:c8:05:57:67:
         ea:10:a5:7b:88:ed:29:34:16:3b:0a:85:99:a9:83:c7:53:35:
         e0:d5:2e:13:57:51:2c:37:c4:6e:ef:d7:05:47:b6:d7:b3:dd:
         b5:f5:7f:dd:e8:0b:69:fb:bc:ff:fa:87:77:04:47:ba:12:4f:
         5d:66:9f:5b:d3:53:b4:d6:eb:e0:3a:f0:26:9e:26:71:a0:d2:
         55:13:73:d2:c9:74:66:5e:c2:40:3a:24:16:37:76:80:61:c1:
         3f:de:33:0a:9e:38:69:69:61:88:23:34:af:21:45:aa:34:7f:
         1b:fd:0d:4d:1d:e6:11:6e:63:a1:5c:83:b2:dc:08:e9:0a:37:
         28:5e:aa:46:44:69:79:e4:70:12:04:d9:0f:65:fe:33:6f:c7:
         18:1a:e4:44:53:88:a7:06:86:ed:d1:13:a1:58:da:1f:14:dc:
         d1:dc:94:b1:52:04:86:8f:19:11:9f:07:c3:ee:b4:35:ba:1c:
         f7:21:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:00 2026 by rpki-client