Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
File:                     hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json)
Hash identifier:          1rnxUj7JRm3SOYtRGy+ZzYCFn6kGs3BYIHUJcl8Ui1c=
Subject key identifier:   8B:8D:F8:AB:CD:54:B9:5C:77:FA:C6:9B:8C:D8:34:3C:D3:F7:88:8F
Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38
Certificate issuer:       /CN=8564824b6dafbd33f10a3696e00acb948c112a38
Certificate serial:       019D37C013E242DFD91DF700A2D0726BC565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
Manifest number:          06C3
Signing time:             Sun 29 Mar 2026 04:00:27 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:27 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:27 +0000
Files and hashes:         1: JD-fJFwQnYMI64eLzt1EZdO8xZg.roa (hash: SmdG1CgUBFaqBpssn0iz5Ev++iu6coHjX7fE1/FoyJ4=)
                          2: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: QxENWUO0pbVgqE+tSFHPQgqmmgpxyaRptJ6hOdKX8KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:13:e2:42:df:d9:1d:f7:00:a2:d0:72:6b:c5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38
        Validity
            Not Before: Mar 29 04:00:27 2026 GMT
            Not After : Mar 30 04:00:27 2026 GMT
        Subject: CN=8b8df8abcd54b95c77fac69b8cd8343cd3f7888f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cc:04:5a:d4:80:28:72:f6:05:b2:5b:9e:06:
                    c0:76:45:f2:bd:ec:ab:67:d4:47:63:94:18:81:dd:
                    cd:44:76:90:fd:73:5f:7f:02:f4:c7:d7:09:1c:05:
                    e1:65:77:95:f5:27:be:b3:d4:56:df:57:8d:ee:c3:
                    29:37:21:4b:9a:fb:d6:d9:94:c8:3b:ca:d4:3f:de:
                    33:96:7b:e6:4d:47:66:25:94:57:52:86:1a:0a:3a:
                    d8:ec:77:00:7c:d3:8a:ec:2c:d2:7e:ff:d2:d0:2b:
                    a5:4f:bb:a2:67:30:bd:30:f5:da:31:cd:d3:f2:44:
                    e6:c8:fb:55:8c:3a:cd:40:40:b8:03:34:f2:f4:32:
                    32:e0:4e:db:a4:ae:b8:6b:c6:4d:b0:24:58:18:34:
                    9e:ca:13:47:d5:75:08:98:a0:2d:4a:80:28:62:dc:
                    4d:c3:6e:51:43:1c:52:0d:7c:b7:80:7b:34:1a:be:
                    cc:e7:da:dd:53:a0:13:44:65:14:15:a8:31:74:b9:
                    86:85:e1:0e:0a:a1:03:bb:96:9e:8d:a1:d1:bc:1e:
                    67:21:e6:62:92:fe:3e:6a:4c:f0:53:29:f3:7d:05:
                    25:0b:62:6f:c0:64:b3:42:f6:dd:86:a7:fa:9e:87:
                    3b:5e:ad:f6:be:94:f2:1a:02:cc:18:57:a3:fa:63:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8D:F8:AB:CD:54:B9:5C:77:FA:C6:9B:8C:D8:34:3C:D3:F7:88:8F
            X509v3 Authority Key Identifier:
                keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:aa:a9:92:69:d3:b8:40:30:55:2a:7e:68:5f:fd:36:62:70:
         c8:73:f6:3f:d1:57:63:ea:d2:2e:dd:ae:03:9d:12:ed:63:41:
         bd:24:6d:bc:19:34:00:f7:b4:09:d2:d8:83:55:8b:bf:f8:e1:
         41:38:9d:1e:52:ba:24:03:b2:d7:e3:bc:06:98:ba:e8:ce:ef:
         47:7b:67:39:bc:d3:cd:91:ce:52:62:a3:7b:7a:c6:3f:11:44:
         d0:b5:c7:bf:9d:54:78:af:e5:01:5d:79:e2:e1:1c:47:08:06:
         df:e3:55:35:75:25:b7:01:fc:39:b0:9d:d9:6f:80:c4:d7:8a:
         d1:c4:e6:56:ff:11:2e:7a:25:32:e6:42:bf:5f:f2:29:0a:12:
         47:1e:02:fc:13:1d:9d:36:33:d7:ef:5c:f4:38:6b:88:63:11:
         ce:8a:87:e0:39:b9:50:9f:45:ba:f6:93:82:01:90:a0:dd:21:
         2e:e4:2f:17:b1:f4:b3:60:65:57:1f:8f:39:17:5a:2a:ec:81:
         4b:34:d0:4e:f4:55:03:70:72:57:9f:2d:be:25:d1:14:55:80:
         7b:f4:d8:85:70:d2:ca:68:26:22:99:f2:16:8d:57:d6:f1:07:
         01:85:4f:d1:24:97:1e:3a:2c:ad:ed:e0:6c:7a:0f:09:5c:93:
         1a:77:4e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:27 2026 by rpki-client