Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
File:                     Wu6ShG_jj96OD2KUjKmIPBopt1U.mft (raw, json)
Hash identifier:          OcjqsBa+KJhQcLjFJVKO+scRPfQIYeQDDw5JPUwjLmk=
Subject key identifier:   05:85:F3:E6:81:52:67:8B:66:31:79:16:D8:97:13:42:B8:DD:A8:1B
Authority key identifier: 5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55
Certificate issuer:       /CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
Certificate serial:       019CE6365138B0FDF171CBBFE99FAAF41EAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
Manifest number:          0CA6
Signing time:             Fri 13 Mar 2026 08:00:45 +0000
Manifest this update:     Fri 13 Mar 2026 08:00:45 +0000
Manifest next update:     Sat 14 Mar 2026 08:00:45 +0000
Files and hashes:         1: Wu6ShG_jj96OD2KUjKmIPBopt1U.crl (hash: CqUeZLroiXp33FZuLsRoqVIlMgxD/VNHSTpf55y92n0=)
                          2: rP5nHNYdqEAJLssTyCJ5gOdDH2I.roa (hash: yOB632STL0Rw5rEnDDsr56AUQMoN3jjS+xa8opoFvzA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e6:36:51:38:b0:fd:f1:71:cb:bf:e9:9f:aa:f4:1e:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aee92846fe38fde8e0f62948ca9883c1a29b755
        Validity
            Not Before: Mar 13 08:00:45 2026 GMT
            Not After : Mar 14 08:00:45 2026 GMT
        Subject: CN=0585f3e68152678b66317916d8971342b8dda81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fe:d7:d0:05:f0:4e:9c:65:9e:d1:a2:bb:b1:
                    05:c0:17:34:89:66:e5:7e:5a:05:14:29:5e:49:8e:
                    11:fa:57:39:c7:6d:74:92:70:50:03:c6:ea:95:66:
                    05:3a:17:98:2a:1e:39:cf:a5:0c:71:bf:e3:a6:6a:
                    5d:2b:70:3a:6c:47:d8:4c:04:08:8a:63:87:87:0b:
                    d2:72:21:f1:3a:a0:20:c6:9a:ed:6d:f5:64:ee:3e:
                    88:ce:53:e2:b6:23:33:b9:2f:40:62:a1:09:6c:62:
                    1e:f2:a5:9b:dc:bb:15:24:e5:86:19:3f:87:6f:8f:
                    ec:56:b3:94:ab:11:13:19:ef:f4:37:4f:be:f9:b3:
                    7c:b1:09:29:00:5a:6b:28:ee:12:ec:91:14:fe:ab:
                    dc:53:0e:f3:cc:c8:43:63:b3:e7:af:00:bf:93:04:
                    07:f5:d2:58:dd:26:c5:f6:fb:6c:c4:e7:4e:0f:dd:
                    ab:ef:df:75:00:20:9a:d8:73:4c:9d:9c:69:70:4d:
                    3f:7f:d3:cc:da:af:0e:db:78:7c:7d:a5:a1:32:64:
                    30:1f:7f:2b:71:ba:b2:e8:6b:d1:36:64:ad:d8:13:
                    d1:e6:24:81:40:7d:cb:b0:cb:a0:bf:6a:6b:16:ce:
                    61:61:64:e8:a1:51:b7:89:9d:64:23:5c:99:28:a0:
                    29:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:85:F3:E6:81:52:67:8B:66:31:79:16:D8:97:13:42:B8:DD:A8:1B
            X509v3 Authority Key Identifier:
                keyid:5A:EE:92:84:6F:E3:8F:DE:8E:0F:62:94:8C:A9:88:3C:1A:29:B7:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu6ShG_jj96OD2KUjKmIPBopt1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/1db0cb-79fd-4d69-9515-42fcfb755744/1/Wu6ShG_jj96OD2KUjKmIPBopt1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:a2:5d:dd:50:90:b4:4e:0b:51:b1:c1:cb:d9:0b:98:e9:5e:
         18:39:1f:8b:35:5f:fd:06:53:64:03:fe:56:de:14:08:bc:c8:
         54:bb:3e:5f:3a:49:af:b1:b7:8b:3b:87:25:25:e9:05:7e:e3:
         6f:68:64:07:88:a0:07:c0:4d:70:a9:39:89:b6:45:4b:a3:f7:
         b6:a5:55:a1:cd:72:05:95:9a:3a:50:cd:48:4c:28:b9:5a:5d:
         32:53:df:8b:b1:64:3a:07:60:ba:bd:20:42:7a:63:a6:16:26:
         18:7e:96:d2:3c:b3:15:e2:da:d1:d1:44:9f:ba:db:e4:56:f0:
         2d:45:37:23:99:cc:1b:d3:5c:1e:a1:ba:f6:ca:95:51:68:a5:
         bd:bc:52:70:2c:85:a4:9b:6c:e2:32:3f:c3:32:55:93:4d:aa:
         6f:f2:fb:54:9f:76:85:31:4b:1f:9d:da:e8:39:9d:b4:12:db:
         fb:e3:80:22:4c:7c:00:e4:d6:cd:f1:83:a0:b0:fd:d1:a7:d9:
         b6:a4:28:ec:69:1a:7e:37:92:70:a8:28:40:da:70:c7:1d:06:
         a3:7c:9b:dc:35:e2:37:bb:21:6a:74:a0:1a:d8:1a:a7:a9:cd:
         a4:c4:92:ec:b7:2d:d3:2b:00:3c:0f:43:8a:07:55:f9:8b:32:
         fc:bd:34:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:38:48 2026 by rpki-client