Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
File:                     wUuc2uDH11fKow4dR7Nz3uffdW0.mft (raw, json)
Hash identifier:          NAmRB0pwwuvmTGmK7fKrYX9KYlo7x+RKM86GMNR3UGQ=
Subject key identifier:   25:7A:D6:0F:7E:99:F8:37:F7:09:56:93:8F:9C:7D:15:29:27:9B:51
Authority key identifier: C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D
Certificate issuer:       /CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
Certificate serial:       019D3AC18CCA1CB98887A913C06BB03F3D5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
Manifest number:          0514
Signing time:             Sun 29 Mar 2026 18:00:56 +0000
Manifest this update:     Sun 29 Mar 2026 18:00:56 +0000
Manifest next update:     Mon 30 Mar 2026 18:00:56 +0000
Files and hashes:         1: wUuc2uDH11fKow4dR7Nz3uffdW0.crl (hash: d4ufikKuYjFE8w1EFGUpo0T0X25w9cnoJBqq7gbxads=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:c1:8c:ca:1c:b9:88:87:a9:13:c0:6b:b0:3f:3d:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
        Validity
            Not Before: Mar 29 18:00:56 2026 GMT
            Not After : Mar 30 18:00:56 2026 GMT
        Subject: CN=257ad60f7e99f837f70956938f9c7d1529279b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:72:3c:4c:65:40:4a:24:9a:20:d3:bc:0e:
                    7c:53:5f:7c:4e:c7:d6:fd:fa:d0:31:9e:d4:03:3c:
                    25:26:fc:40:15:9b:99:7e:07:94:20:00:10:34:a5:
                    a2:f4:62:1b:2f:7e:53:e3:b3:5a:e3:14:c1:ae:06:
                    43:13:6c:49:9e:93:b1:0f:a1:9f:80:de:65:0d:bd:
                    bc:ea:d3:70:8e:41:04:61:30:b1:5f:b8:8d:d5:5d:
                    f7:d8:a9:e9:18:6b:f0:5f:a4:06:33:cb:5c:b2:9e:
                    a8:2d:ed:48:c0:27:a6:65:c7:68:21:09:af:60:dd:
                    a2:fd:02:89:3c:de:84:a9:93:89:d0:b6:1e:3e:8c:
                    c1:24:1c:c7:6d:b8:62:90:87:82:d6:41:49:e4:1a:
                    2b:6c:a2:2c:77:68:71:2c:85:60:12:ee:fe:88:36:
                    a7:2a:84:b0:2e:87:0c:45:31:52:4b:27:49:d1:9c:
                    f3:bd:ec:06:58:cd:77:b4:80:57:aa:91:73:d6:60:
                    cc:44:93:a5:93:d3:3c:c8:fd:1f:dd:b0:ac:0a:3c:
                    27:e8:93:5c:98:15:4f:64:90:f7:d3:b0:e7:cb:a0:
                    07:4b:06:fd:24:73:11:8f:02:17:d7:96:cf:19:ad:
                    af:81:12:65:3a:0a:91:96:60:30:66:55:e4:30:93:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:7A:D6:0F:7E:99:F8:37:F7:09:56:93:8F:9C:7D:15:29:27:9B:51
            X509v3 Authority Key Identifier:
                keyid:C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:b9:2d:ff:f8:7e:69:fb:a1:52:d6:98:55:29:c5:d8:06:64:
         ba:21:42:ec:2c:ef:3b:fc:a1:07:36:8b:d7:f5:c3:6c:f0:b1:
         36:12:7c:0f:3c:41:7f:d1:28:fc:f6:95:01:66:0f:94:0c:4b:
         11:99:00:57:d3:c5:fd:bd:bb:0a:84:81:b9:99:b4:68:54:aa:
         28:a9:a9:b2:ad:a8:33:34:9f:63:b3:d8:fd:ca:ce:3d:6e:e1:
         67:a0:eb:b5:a8:12:42:b5:6e:44:45:5a:99:d0:e6:87:bc:07:
         80:3c:fd:6c:e1:33:c5:3e:20:3b:47:31:ef:ca:82:c5:e1:b8:
         a9:5c:0c:4f:17:b7:a5:e3:6d:c9:8d:72:43:51:b2:14:a6:90:
         5a:d9:fb:4c:ea:9c:32:1f:4e:a2:b5:52:95:eb:8b:41:cd:a9:
         11:0e:d4:cb:85:f8:41:2f:bc:dd:f5:f8:84:22:e8:a0:f0:81:
         2e:f2:43:e0:ff:6a:8d:3a:c5:48:64:19:ef:67:76:36:8a:c2:
         40:83:bf:e7:2b:28:f5:e8:7b:51:4a:1d:97:6f:cd:75:cc:70:
         ee:fc:ab:99:f4:3d:3d:3d:ad:a7:d7:8c:5e:c0:95:87:5a:f1:
         28:b7:ba:9d:71:49:94:e3:b5:72:54:15:24:e9:73:6c:74:a9:
         01:33:3b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:39 2026 by rpki-client