Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
File:                     wtgszwyN6n1_atcujmJGLXviDVY.mft (raw, json)
Hash identifier:          ssrjPl0RJhHjDKBTMtzsIYf7PJdQbwObBKWUMDgVwLE=
Subject key identifier:   75:88:77:E7:F8:D6:D9:0A:6B:A2:C3:79:8E:EC:83:D8:83:06:54:13
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       019D382DC8106292CEFE217BA19ECC11C88A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
Manifest number:          1897
Signing time:             Sun 29 Mar 2026 06:00:17 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:17 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:17 +0000
Files and hashes:         1: YFh9-2nTeDmUHEyrVn852pFgnwo.roa (hash: yyThjzHGK9fG9mEurU44rgO6nvdWGooy3WaBaE5pipY=)
                          2: e-XOnC-I_poqKVcu-oTCyL0Qmz8.roa (hash: c2RKRL7A/fU0mRm1zb8DuJEx4OgsR06sHWdY9eY+h7M=)
                          3: wtgszwyN6n1_atcujmJGLXviDVY.crl (hash: 5Yn+XgxONkaczv3KtwChgPSq2SqR6LGimEx3FmPKDRU=)
                          4: xedrbfhupLPmqrs2cnazcNbuQ6s.roa (hash: Y/EDgTZimwkgVMZ0kvboCaG04PSLtb5uHoL17HArkIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:c8:10:62:92:ce:fe:21:7b:a1:9e:cc:11:c8:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Mar 29 06:00:17 2026 GMT
            Not After : Mar 30 06:00:17 2026 GMT
        Subject: CN=758877e7f8d6d90a6ba2c3798eec83d883065413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:07:ef:9a:93:2c:36:e1:af:8b:3b:27:64:
                    5e:4c:2d:65:cb:c6:df:39:86:85:f4:c1:92:23:3d:
                    c1:48:2f:2b:4b:93:d0:ce:88:46:50:ca:12:b8:8c:
                    03:08:fd:c9:41:d8:8d:06:ef:7b:4c:3b:cc:64:56:
                    a4:bc:b4:8f:42:20:cc:6c:ae:5a:d1:bd:f6:6b:10:
                    30:31:9a:03:e8:22:67:c1:34:c4:a1:4d:17:0e:9a:
                    89:9c:b9:6b:83:7d:0e:ac:5f:bb:bf:4d:02:af:ee:
                    b8:5b:61:4e:d5:a1:f2:13:65:a6:04:d9:ab:4c:3f:
                    3b:4b:f2:65:d3:b5:23:a1:27:69:b6:90:22:cc:22:
                    71:90:25:8f:11:aa:56:02:10:4f:06:ea:55:da:c0:
                    96:92:02:d8:90:32:6c:10:7c:e1:7c:54:58:8e:fe:
                    73:4f:07:db:8e:98:9e:63:b1:d6:89:a4:66:be:7c:
                    91:1e:9b:f8:76:27:31:dd:2d:78:9d:82:6b:aa:cc:
                    c2:b2:fd:5d:05:94:ae:b4:25:1b:3b:af:12:0b:05:
                    81:de:a6:f7:f1:67:f2:3e:ff:b1:61:a0:c5:ff:bd:
                    cb:85:3b:6f:63:52:49:34:f4:fa:54:a1:18:b3:55:
                    aa:4b:b4:d2:af:28:bc:3c:99:67:dc:f4:54:7e:71:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:88:77:E7:F8:D6:D9:0A:6B:A2:C3:79:8E:EC:83:D8:83:06:54:13
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cb:da:c0:37:5e:12:64:42:2d:19:9b:55:ba:67:fa:00:44:
         17:db:a5:81:59:78:59:90:30:1d:f9:84:08:e7:1a:b5:9d:cf:
         15:97:6d:3c:4a:50:04:0e:bf:1b:76:c6:84:d6:0c:2e:14:3c:
         2b:84:40:97:b8:36:3f:de:99:89:39:86:7c:06:e5:6b:2b:c0:
         bb:3b:5b:86:dd:8f:25:8d:2b:8d:6c:dc:73:7c:30:70:8c:f7:
         ce:e6:a5:c4:1b:d9:72:e0:39:fc:6b:75:9b:b4:11:b6:52:ae:
         2f:ae:e5:31:71:e3:a6:4e:13:c1:96:c3:21:bc:94:a5:c9:7d:
         b8:e9:c2:0d:36:5f:14:97:3d:e8:1e:9b:1f:66:63:57:e1:0a:
         bc:d5:08:69:78:7c:c7:74:e3:ca:69:7a:f9:f3:c0:8a:e2:8b:
         6b:67:26:ea:db:52:f5:c1:db:9d:e8:04:2c:c9:2c:7e:a0:88:
         a4:99:f7:7b:39:96:03:c3:fd:9d:1d:1c:7f:1f:25:fd:df:c1:
         db:4a:a0:6f:6e:5e:e3:6c:33:33:e6:69:bc:04:b5:83:36:78:
         51:0b:5c:72:6c:b7:ce:d8:8d:be:99:bc:71:8a:02:ea:c5:9c:
         ea:e7:f6:d4:d0:49:9a:69:21:21:47:3a:cb:a6:fe:86:a9:8f:
         3d:1a:3a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:01 2026 by rpki-client