Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
File:                     RwwsmDticWkhhXHGuClHru6l984.mft (raw, json)
Hash identifier:          KqZzzBvVVGjDKpX16OM8KKyfAxEqVjriFMQNs/nTvjw=
Subject key identifier:   16:20:36:34:0C:C6:0F:3E:03:DD:B6:04:02:F0:42:26:44:25:29:23
Authority key identifier: 47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE
Certificate issuer:       /CN=470c2c983b627169218571c6b82947aeeea5f7ce
Certificate serial:       019D394163A0B9EF8354C85F38AFC40AF0BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
Manifest number:          1894
Signing time:             Sun 29 Mar 2026 11:01:19 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:19 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:19 +0000
Files and hashes:         1: RwwsmDticWkhhXHGuClHru6l984.crl (hash: q6mLeH9BG+s12RfTuHrl9D18w5jx1DCJTNU1C/isbcM=)
                          2: cgpS6bexT0Usb-mxM5p40zTbByk.roa (hash: FwUyErHN7yMeD8Trs4nWcj+6ZTBD3QkRxNZbPOMD/PU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:63:a0:b9:ef:83:54:c8:5f:38:af:c4:0a:f0:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=470c2c983b627169218571c6b82947aeeea5f7ce
        Validity
            Not Before: Mar 29 11:01:19 2026 GMT
            Not After : Mar 30 11:01:19 2026 GMT
        Subject: CN=162036340cc60f3e03ddb60402f0422644252923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:48:d7:f4:6a:0a:67:ba:9c:35:97:a3:4a:84:
                    a7:ca:57:e5:1a:a4:fb:a8:80:34:7a:ee:09:1d:1e:
                    3d:53:6c:12:7e:65:a8:97:d2:0f:a9:f1:f1:a9:dc:
                    96:a1:19:c3:4d:ac:38:62:60:62:22:5a:16:4d:15:
                    85:2b:36:92:d2:3b:79:d4:2b:a1:10:bf:eb:ea:70:
                    a3:a8:ad:ce:7f:42:f7:24:56:60:84:88:de:1b:05:
                    12:0d:30:d7:c0:23:37:25:41:c6:1b:14:87:c2:ad:
                    04:8d:62:02:bd:b5:d1:f7:26:5d:3c:ad:22:75:b8:
                    51:09:75:58:38:5d:af:93:37:aa:ee:5f:90:4e:f7:
                    93:b4:72:c6:45:6b:b6:37:21:5c:ca:62:bd:27:9a:
                    0a:33:5f:24:51:6c:4e:d9:10:38:3f:bb:ab:51:28:
                    77:97:ee:12:e2:88:75:36:63:c1:d6:fd:cf:bc:83:
                    77:09:6f:3e:72:cd:ee:bd:cc:b1:ef:63:85:4c:af:
                    70:b7:59:2b:6b:bf:5c:f6:0b:56:d5:9b:ad:29:cc:
                    80:c1:71:9c:7a:89:c5:cd:89:65:5f:71:76:c7:ee:
                    83:1d:d4:8f:42:a3:69:e3:0f:77:9a:ea:5b:7f:ff:
                    b4:7e:6a:52:8d:4c:83:dc:9f:91:3b:74:e9:d0:45:
                    39:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:20:36:34:0C:C6:0F:3E:03:DD:B6:04:02:F0:42:26:44:25:29:23
            X509v3 Authority Key Identifier:
                keyid:47:0C:2C:98:3B:62:71:69:21:85:71:C6:B8:29:47:AE:EE:A5:F7:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwwsmDticWkhhXHGuClHru6l984.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/481408-b215-4d1a-b330-115aac92e9bf/1/RwwsmDticWkhhXHGuClHru6l984.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:82:8b:85:d4:c2:a0:f3:9b:d2:e3:91:93:d0:ac:05:50:7e:
         04:36:ae:de:cb:28:70:c6:f3:b1:d0:57:63:41:63:44:23:a3:
         fa:80:7f:09:9a:ae:ec:d9:93:53:07:fc:05:fd:38:e7:1c:be:
         04:21:3c:cd:9d:b3:14:8c:3b:1d:ad:ff:7d:4d:47:28:1c:b3:
         4b:9b:b3:2a:9a:f2:3b:e6:95:bb:d2:55:6e:31:b7:16:17:db:
         96:ba:1f:76:b2:1d:da:2d:dd:56:e0:5e:95:10:95:15:8f:1f:
         5f:2a:ab:c6:68:b6:37:e2:ba:bf:a6:8d:7b:b7:8a:78:75:a9:
         72:c3:a2:78:3d:b3:8f:f5:b6:1f:d6:5e:6c:3d:c3:ca:63:92:
         61:bb:fd:32:98:ce:49:a8:88:be:46:b7:75:cf:39:27:d3:61:
         d4:9e:20:e5:56:cb:f6:10:80:d9:09:0a:c0:d1:e5:ee:02:3c:
         84:27:59:a8:30:6f:ea:ea:a6:c2:4e:78:90:4d:58:7d:b6:ac:
         b7:9f:d1:81:4f:8a:76:d6:88:05:fd:2d:7a:05:23:62:31:13:
         62:b8:ef:f2:ff:94:cf:85:6e:d7:f1:e0:c8:47:6e:99:90:a6:
         6f:0e:61:1b:4a:ad:cf:ed:37:fd:1c:f9:bf:14:71:d0:43:42:
         0c:31:e1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:45:42 2026 by rpki-client