Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
File:                     DWE_6YRKY0OerooaoMPKjGC0XUU.mft (raw, json)
Hash identifier:          zvg6YHP9YjsiFdWe3eBoufturI8UQq6Qn6inZb7khxQ=
Subject key identifier:   0E:24:8E:81:AC:69:33:BD:BE:88:C2:29:D5:B6:3B:83:4B:98:18:6A
Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Certificate issuer:       /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Certificate serial:       019D37897D38154D0E891489EFD1A7304505
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
Manifest number:          188F
Signing time:             Sun 29 Mar 2026 03:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:50 +0000
Files and hashes:         1: 70uwjS23ojWYkHOJF-QA_XGJ95c.roa (hash: CvnO7mT1jduzqhCIW8qOqSz+l6S7AQzxDDVic7aHm4s=)
                          2: DWE_6YRKY0OerooaoMPKjGC0XUU.crl (hash: icdmk6RZyhzFJc+rfGN4QoxGljIAIuQavuHn8G5Obh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:7d:38:15:4d:0e:89:14:89:ef:d1:a7:30:45:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
        Validity
            Not Before: Mar 29 03:00:50 2026 GMT
            Not After : Mar 30 03:00:50 2026 GMT
        Subject: CN=0e248e81ac6933bdbe88c229d5b63b834b98186a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:04:7f:92:4b:b1:e9:a3:e9:c8:0a:2e:f2:c0:
                    99:f9:4f:7e:7e:7f:02:61:04:f9:5e:40:f3:83:64:
                    13:23:a0:3d:6b:ee:6e:49:d4:e5:cc:52:e0:c8:7a:
                    44:c2:ce:da:17:48:db:2b:19:06:14:b0:13:2b:c7:
                    0a:90:08:62:f8:30:50:b6:3b:de:e8:48:54:df:c9:
                    e2:44:b8:c3:6b:b3:ea:85:46:0f:3a:81:38:e5:47:
                    88:be:ed:d6:99:82:20:b8:8d:bd:21:70:6e:75:87:
                    56:12:cf:67:c6:11:c8:12:b8:56:b1:52:55:c9:b0:
                    30:cd:be:df:13:b1:09:d5:0d:28:e3:ab:2b:c6:5d:
                    71:3c:11:b9:b4:0c:23:1d:4c:74:f0:23:1f:ec:78:
                    2a:23:86:20:e3:a1:a7:ec:0b:26:3f:73:6d:f1:9b:
                    f4:b0:e5:ba:eb:ef:32:c6:2f:a6:cc:c1:d4:e5:71:
                    32:12:b8:dd:5d:a3:ce:d2:ff:d8:12:5e:f4:df:fb:
                    ce:e3:01:8f:10:7c:9e:91:56:65:fa:29:ae:dc:59:
                    37:df:2f:bb:48:b3:a8:b7:72:3d:74:e1:bf:c9:87:
                    bb:1d:58:f7:f1:16:c1:b0:17:f4:68:ac:62:63:c8:
                    1a:36:f8:05:b0:a2:ca:23:f3:cd:db:3c:d2:73:59:
                    4d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:24:8E:81:AC:69:33:BD:BE:88:C2:29:D5:B6:3B:83:4B:98:18:6A
            X509v3 Authority Key Identifier:
                keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:96:3c:9b:3b:ab:d6:a1:e1:93:ac:9f:7a:9a:c7:96:c2:
         58:6c:ec:7e:e4:c5:30:26:40:f9:85:2d:a9:7e:61:2a:04:9c:
         2b:e4:25:d7:f1:fd:dc:95:d7:71:50:d4:6c:24:99:21:06:0d:
         ad:63:a7:aa:da:38:6f:be:e0:2c:bc:1d:7e:3c:d8:0c:29:6c:
         9f:65:3b:be:a2:7e:93:d2:0d:db:fe:70:4f:d5:aa:6d:d8:20:
         12:45:a1:a2:4a:14:04:55:1f:03:06:5e:4f:ef:24:bd:ac:e9:
         fe:9e:57:31:9e:5c:a8:b2:82:18:c7:34:d4:d2:2c:4d:d5:d8:
         f3:f4:15:7f:99:e0:e6:55:aa:a6:26:89:72:a5:d3:49:ad:0e:
         8b:67:f7:1f:16:73:54:73:da:e2:8d:4c:ae:65:4d:e1:d7:75:
         88:ae:0e:ba:71:20:d5:5d:13:68:b7:ec:96:49:4c:67:22:67:
         12:14:3a:12:2d:83:9e:49:c3:80:1b:74:32:67:51:52:34:f4:
         aa:81:c6:84:87:2d:d6:97:a1:da:5f:da:8a:66:6c:b5:03:07:
         fb:56:b2:3d:af:2c:1f:99:0c:b2:3a:17:6a:4f:fd:d1:fc:bd:
         09:64:05:6c:99:75:82:3a:0f:a1:80:81:1b:fe:e7:b8:8d:31:
         57:8f:2d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:50:02 2026 by rpki-client