Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File:                     WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier:          dlcsOJvQ/o/PGCIpXYyrpvngtq7nuXtoTTESJA/EDPQ=
Subject key identifier:   DA:98:14:BD:B5:2E:D4:D5:B7:96:AA:AC:86:80:43:2E:EF:2E:5C:67
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer:       /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial:       019D37892AC3C9EFA6424613F7CFE552C848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number:          073A
Signing time:             Sun 29 Mar 2026 03:00:29 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:29 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:29 +0000
Files and hashes:         1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: isx3/bs746Z/vTc2M8K5swxCyTLwwAZ4B7qwv2Rsh80=)
                          2: fpv7X-TkVwCqqHH5fj7Z_fTN4Kc.roa (hash: cOqWQjIviZMextqrFLsf3gf8It8rhkkR5FV+uRamQxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:2a:c3:c9:ef:a6:42:46:13:f7:cf:e5:52:c8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
        Validity
            Not Before: Mar 29 03:00:29 2026 GMT
            Not After : Mar 30 03:00:29 2026 GMT
        Subject: CN=da9814bdb52ed4d5b796aaac8680432eef2e5c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f8:b3:5d:ee:7a:25:af:32:b6:aa:2c:73:33:
                    2e:3b:39:99:0a:51:e8:ea:3e:8e:fa:27:77:f4:c1:
                    72:3c:35:fb:3e:51:fc:a2:90:7e:5a:2b:aa:93:47:
                    27:48:06:26:94:3a:f6:1d:be:f0:d5:25:a8:44:88:
                    38:90:fb:49:04:31:90:8d:8c:d6:25:a1:f0:10:f0:
                    df:0e:32:0a:9f:d2:6c:cf:e9:a8:64:b4:ae:f8:74:
                    07:84:f1:16:1f:25:56:de:f9:4a:41:7b:3d:98:bc:
                    39:df:9f:0e:95:7e:35:a7:ea:bc:75:75:d0:2b:23:
                    f9:27:27:52:73:5e:a9:db:77:8f:6e:56:01:87:f9:
                    d7:65:9b:d1:a7:9e:6b:fc:da:4f:c1:c5:36:90:cc:
                    c9:7e:d5:64:01:73:ce:3e:bb:8b:c3:71:ad:1b:e2:
                    59:0a:e9:2d:d3:f7:fa:35:ce:23:fc:4e:d5:84:db:
                    bc:66:d1:bc:42:df:b2:08:67:4f:f9:bc:ca:ee:47:
                    cc:ae:65:b4:3d:b0:40:3b:a0:ca:ba:6d:2f:a3:30:
                    fa:28:ab:23:16:10:8e:8c:04:a3:b6:c2:25:3e:ec:
                    09:06:4f:41:6e:8f:70:6e:50:25:97:60:15:e9:79:
                    ca:82:fa:66:ff:3d:9c:c0:cf:04:bc:52:4d:e6:99:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:98:14:BD:B5:2E:D4:D5:B7:96:AA:AC:86:80:43:2E:EF:2E:5C:67
            X509v3 Authority Key Identifier:
                keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:8a:8f:9c:49:51:23:6b:db:d0:a2:2c:ab:60:f7:e5:77:f2:
         b5:48:39:f2:fa:21:15:e0:66:0d:2c:7a:a3:10:9b:1d:1f:cd:
         72:a8:82:86:0a:a7:cb:08:e1:99:91:67:7b:42:c2:36:31:d6:
         3e:94:44:d9:eb:52:2d:78:ef:1e:c2:cb:7a:71:34:0b:c3:e1:
         ff:d6:1a:de:3a:0d:79:e6:db:47:8a:d1:11:b1:b7:32:7d:ec:
         35:ba:50:e9:7d:b0:c8:09:21:dc:32:db:9a:4e:83:ab:84:77:
         b1:87:0a:2a:f6:e0:fb:7f:5f:8f:6f:00:7c:2f:51:c2:6f:1d:
         56:f6:cb:f4:ef:c0:14:2b:c9:34:a3:43:28:14:d0:48:d4:a7:
         b0:da:a7:45:f2:b4:30:ae:18:53:c0:54:ad:d6:09:b9:2b:82:
         c5:a7:9a:b7:8a:95:e1:51:ae:6d:10:1c:63:50:bf:bd:9f:c9:
         10:87:6d:90:44:db:7f:5e:e9:03:fa:45:b9:1f:b3:96:eb:d6:
         06:0d:f2:7f:06:ac:c8:39:9d:65:1c:ae:45:8a:08:c8:27:93:
         0d:58:79:c1:5d:c2:92:8f:4d:fe:ae:4d:ba:a1:bc:70:bf:05:
         16:16:7c:8d:84:e5:09:bf:13:04:20:76:e5:22:1a:ed:60:dd:
         21:88:64:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:21 2026 by rpki-client