Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File:                     WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier:          oGPCb3GE1RMQ62V5eMY+A68mVlSy7gCBWcnrLSzoQTE=
Subject key identifier:   F9:47:FF:66:59:BE:E9:B1:0B:B2:6A:3A:E7:3F:B9:5C:87:87:A2:4B
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer:       /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial:       019D394145B9695A445B162EAC9BCF5700C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number:          111E
Signing time:             Sun 29 Mar 2026 11:01:12 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:12 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:12 +0000
Files and hashes:         1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: xln/jK/rkYLtSfiCuceHKVj8F3DyJ0MJXNbLLicQTaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:45:b9:69:5a:44:5b:16:2e:ac:9b:cf:57:00:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
        Validity
            Not Before: Mar 29 11:01:12 2026 GMT
            Not After : Mar 30 11:01:12 2026 GMT
        Subject: CN=f947ff6659bee9b10bb26a3ae73fb95c8787a24b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:2f:65:90:1e:d4:b5:40:61:e8:75:74:c6:
                    40:ea:3c:45:85:81:4a:58:2d:ce:94:9c:01:77:ee:
                    ef:5b:fd:a1:dc:d8:86:a6:a6:ad:44:4c:c8:98:78:
                    f7:99:30:f5:c7:e4:6b:13:c0:01:b5:96:98:5c:6e:
                    60:99:cc:00:2e:0d:d4:46:67:a5:94:32:70:9b:02:
                    d9:0a:50:3b:e9:97:52:8f:a9:5f:59:ea:17:53:ad:
                    71:d3:dc:7e:4b:74:d9:1c:a1:1a:25:34:c3:23:f8:
                    72:9f:98:8f:0b:9b:d5:cb:38:b4:2d:6f:d5:47:05:
                    1e:b4:de:ed:87:f0:22:ac:0e:67:44:26:ac:15:0c:
                    40:c0:32:61:44:f2:26:09:5f:aa:1d:91:36:c4:0e:
                    62:42:2d:53:03:06:37:4e:42:bb:43:86:ce:1b:d7:
                    52:0d:33:bf:0c:ed:07:41:93:56:fb:80:f0:49:b2:
                    15:71:81:94:2e:80:b3:5c:34:f6:1a:e5:4c:61:f2:
                    8c:54:72:88:b8:f9:cd:3d:84:8f:f7:25:f8:ee:2b:
                    e5:6c:53:75:4e:b9:ae:29:30:5b:84:ad:70:57:45:
                    20:f4:b4:7d:3d:c9:e0:29:91:76:68:cd:68:f3:91:
                    0d:60:da:c0:0f:a4:7f:ee:34:d1:0d:01:dc:e7:3c:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:47:FF:66:59:BE:E9:B1:0B:B2:6A:3A:E7:3F:B9:5C:87:87:A2:4B
            X509v3 Authority Key Identifier:
                keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:93:88:4c:c3:02:1f:6c:e2:0e:a6:3f:22:3e:48:60:cf:27:
         72:e6:36:c4:73:09:ac:38:76:73:a6:63:8b:b2:48:40:ad:44:
         70:78:94:10:14:fc:41:b3:c4:77:91:e2:47:fb:6a:b9:62:a8:
         5f:20:86:73:69:a0:54:a9:05:b4:e1:af:05:6b:90:18:44:27:
         e3:8b:18:ae:c8:4c:dd:dc:bd:8c:c6:93:b6:81:03:7d:73:59:
         a2:d8:60:1c:54:a1:d1:7c:0f:15:0a:24:db:5a:1d:4a:b5:2b:
         62:a9:76:2a:48:4f:90:e8:3e:64:63:48:c2:4b:80:00:ba:8b:
         7b:7a:21:13:3e:c6:2d:25:41:bf:05:a5:96:25:47:f6:88:d8:
         ba:c1:ec:ec:25:12:6b:1e:7b:3b:b9:21:fb:33:cf:31:07:2c:
         d8:54:15:f5:5f:12:df:bc:53:59:25:96:82:39:31:45:4b:bd:
         01:eb:4b:8e:39:8f:bd:1b:f6:30:11:ae:63:92:ab:bc:1b:be:
         e7:de:5f:1c:7c:8b:31:ee:23:f6:28:5e:f0:85:b8:60:d1:d3:
         d1:a2:61:42:d9:53:6f:f2:b7:fc:63:99:03:01:b7:c7:77:3c:
         bb:43:a1:d8:5f:b7:6b:42:22:86:59:02:76:2e:10:93:6d:89:
         c2:76:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:36 2026 by rpki-client