Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
File:                     wPadL0dEdNu1f2vsjC1l1eDClmE.mft (raw, json)
Hash identifier:          D2sem7tbolN9CHkQ4GPsoDEuUmllCq/cKmeO6f4UxWs=
Subject key identifier:   3F:63:AF:B7:FD:92:A9:62:23:63:C6:A7:C0:66:EC:83:27:A8:F0:55
Authority key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61
Certificate issuer:       /CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661
Certificate serial:       019D378981BBD603D1BDBC4ADA2A768060EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
Manifest number:          12DE
Signing time:             Sun 29 Mar 2026 03:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:51 +0000
Files and hashes:         1: qBQX2ieUcjSJMeOnz5x90DMBmzw.roa (hash: SiBuSJws9wcCmsXHnZeb1owvcMrdO2awe1ttr/zG8B8=)
                          2: wPadL0dEdNu1f2vsjC1l1eDClmE.crl (hash: Q8Bq0xAxRaxdMIKtSMYcPWHe616TLXV1XGwrO74Wn5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:81:bb:d6:03:d1:bd:bc:4a:da:2a:76:80:60:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661
        Validity
            Not Before: Mar 29 03:00:51 2026 GMT
            Not After : Mar 30 03:00:51 2026 GMT
        Subject: CN=3f63afb7fd92a9622363c6a7c066ec8327a8f055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:e9:dc:34:fc:ed:74:26:50:44:49:d3:95:
                    66:49:5c:2a:7f:eb:48:1b:ca:a8:4f:8b:25:e5:24:
                    3e:f0:59:30:59:6a:cb:d5:16:a4:00:0e:7c:98:c9:
                    04:2c:70:23:4e:2b:7a:f2:ea:e0:20:28:b3:08:b9:
                    9f:92:9a:58:d1:bc:75:4c:15:91:dd:57:56:56:30:
                    7e:52:e9:84:2a:79:6a:81:a8:09:80:3a:19:85:56:
                    e0:aa:34:08:e8:19:bb:b1:e3:03:99:27:05:84:73:
                    03:c7:15:f3:ed:4b:be:c0:e5:3c:fa:ac:3d:21:63:
                    4c:67:eb:98:0b:58:63:36:05:40:9e:69:33:2e:c2:
                    ce:7e:65:9c:60:0b:e8:db:88:5c:b4:c5:01:d4:5d:
                    c5:21:72:2c:2f:d2:7a:0a:af:a5:33:3c:b8:8f:4e:
                    d4:d6:ed:0a:a2:5a:fd:6f:78:7b:47:31:a5:d1:cd:
                    d4:b2:7f:7c:6c:2a:70:dc:5b:d9:b2:42:4a:bd:bc:
                    ce:3c:5c:5c:20:76:71:65:81:f9:42:bf:7e:55:47:
                    e9:49:58:71:3b:9b:f8:db:80:14:16:f9:50:4a:34:
                    e3:c1:de:e7:a1:95:c4:5f:99:9b:d6:79:74:d9:f0:
                    57:7b:74:61:2e:2d:05:1d:71:00:b7:3a:a9:92:a5:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:63:AF:B7:FD:92:A9:62:23:63:C6:A7:C0:66:EC:83:27:A8:F0:55
            X509v3 Authority Key Identifier:
                keyid:C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:52:01:78:5a:f0:bd:85:10:52:1f:10:8c:e1:8a:96:54:92:
         fb:6b:76:8e:17:da:41:23:63:b1:a2:cf:f8:32:2d:63:27:44:
         f9:d9:36:2e:10:b8:64:4c:73:03:3f:45:c6:9f:b8:3c:f7:06:
         3e:93:50:31:06:5c:16:83:26:24:bd:65:19:91:81:d3:d9:9a:
         f8:4d:db:14:02:ff:bc:46:58:4a:f0:75:5d:1e:7f:e4:31:18:
         3c:64:86:a7:29:c9:87:f3:54:09:0d:05:fd:61:61:38:e2:18:
         47:80:58:9d:4d:54:8c:1f:11:b0:07:60:f0:83:e4:4d:52:07:
         32:c7:54:2d:b8:89:d5:fd:4d:8d:40:a7:a6:2d:a2:60:4e:7a:
         f9:94:15:23:38:35:79:2b:e9:a5:68:75:d6:7c:f8:ad:4d:5e:
         bb:8e:62:a5:28:8e:f4:ce:95:17:53:3d:6d:2c:69:65:9f:70:
         a6:67:f6:b8:b6:f4:b2:c1:d7:91:20:1e:3c:76:9d:c9:35:48:
         57:a1:6b:ce:44:ca:ab:f4:6a:50:12:f8:d7:51:f4:2d:d5:e3:
         17:c1:7c:9a:8c:b1:90:bf:1e:47:0b:94:6c:66:64:f2:85:90:
         52:70:16:69:3d:84:34:26:06:b9:87:99:c8:ed:ef:59:46:4a:
         e7:44:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:04 2026 by rpki-client