Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
File:                     wOuGHF00WeA57O8QTP2T8ggnx0U.mft (raw, json)
Hash identifier:          CGx/A218jUTSheuyNtYjmwlkF+UFmT1oMWIMMegz1CE=
Subject key identifier:   06:2B:F1:63:28:77:88:65:BC:42:77:48:1F:2E:B9:18:38:B7:0B:25
Authority key identifier: C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45
Certificate issuer:       /CN=c0eb861c5d3459e039ecef104cfd93f20827c745
Certificate serial:       019D39E56977AADC4A52825460CF0DEB51EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
Manifest number:          0430
Signing time:             Sun 29 Mar 2026 14:00:29 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:29 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:29 +0000
Files and hashes:         1: wOuGHF00WeA57O8QTP2T8ggnx0U.crl (hash: cc0Ir433d2xPIddMY68HeEGcCZ9fPYk95oHRYbgnLo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:69:77:aa:dc:4a:52:82:54:60:cf:0d:eb:51:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0eb861c5d3459e039ecef104cfd93f20827c745
        Validity
            Not Before: Mar 29 14:00:29 2026 GMT
            Not After : Mar 30 14:00:29 2026 GMT
        Subject: CN=062bf16328778865bc4277481f2eb91838b70b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:f4:7f:4d:98:4e:07:a6:e0:8e:66:ec:91:
                    54:c2:e9:cc:da:cd:ee:a9:5d:68:4d:c4:c8:c9:5d:
                    70:06:72:8e:53:6d:74:d9:3e:86:27:17:08:b3:3c:
                    c1:61:c4:fd:f2:81:0d:98:44:32:0c:0c:a5:99:7f:
                    ec:c8:e5:90:b3:65:9c:09:dc:72:20:24:45:12:4b:
                    62:e0:4d:ac:8e:6b:ed:f0:56:bd:56:b2:fd:a0:f6:
                    49:f2:2f:15:56:5f:94:b6:19:b3:94:e4:5b:78:cb:
                    18:f1:94:5d:53:b5:d8:99:cb:59:43:0a:d7:e9:e6:
                    e6:be:c2:92:95:0b:57:a6:35:fb:2c:74:8f:3c:39:
                    61:87:5b:56:0b:7c:7a:65:65:a6:ec:0d:f0:95:aa:
                    e5:5b:b8:36:69:36:e2:87:a4:ba:f8:fd:55:a3:0f:
                    bc:c7:c0:d0:b1:49:17:d4:db:b9:0b:bf:39:0d:85:
                    95:4d:14:85:d3:9b:4f:66:12:19:00:d7:27:38:0c:
                    79:21:a4:b3:5b:cc:44:96:ab:3c:f3:d3:41:fc:95:
                    63:f2:94:1b:88:86:35:b6:a9:39:6f:65:0c:03:bb:
                    8a:19:8c:a2:74:9b:ff:66:22:c9:c0:b2:1c:4c:47:
                    5d:c3:d7:5e:cc:cc:0e:4d:47:d1:05:b0:68:e9:2b:
                    0a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2B:F1:63:28:77:88:65:BC:42:77:48:1F:2E:B9:18:38:B7:0B:25
            X509v3 Authority Key Identifier:
                keyid:C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:c2:f8:b1:77:44:c3:1d:b3:fa:31:34:d4:c0:65:ed:7a:a3:
         37:64:c8:9f:52:7b:31:27:79:13:b6:34:14:8e:1f:34:65:87:
         4a:29:9f:c2:7a:85:71:f5:a1:ea:c9:a3:42:0e:0c:7f:18:72:
         31:06:3f:68:ac:04:65:e3:a5:df:b0:71:af:f2:73:e2:59:19:
         c8:71:77:91:24:bf:2f:81:30:2c:08:d8:98:5f:5e:0d:ec:93:
         63:cb:47:8b:c6:fc:b1:4d:a3:44:fd:be:91:89:71:10:cd:e5:
         1f:2f:f5:63:25:0a:02:49:87:e6:36:45:2d:00:50:df:09:17:
         e5:f9:f4:14:27:31:0b:8b:30:22:d6:e4:85:85:72:b0:c3:d4:
         72:41:ce:1b:1d:3a:21:ae:fe:58:f8:dc:de:5a:03:59:81:20:
         4a:9f:cd:ac:5a:67:e7:e9:3b:ea:47:ee:34:59:b8:0b:31:5b:
         22:53:f3:24:81:b5:ab:1a:cb:ac:df:34:a7:01:20:d4:6f:2a:
         4d:d9:1a:37:26:45:48:2d:1f:14:b9:2e:3f:ad:62:92:d1:2b:
         f7:3a:35:57:f5:01:bc:63:3c:7e:38:ca:59:fd:26:f5:0d:bb:
         a0:63:b1:04:5e:1b:f6:32:db:a6:b1:43:fb:e0:f8:ca:6a:5b:
         21:a5:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:32 2026 by rpki-client