Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File:                     wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier:          Xt4roGUzCkHUEBvIpT8qamWQ+VJmbF/QWfXwDZGCzRI=
Subject key identifier:   9E:97:7F:4A:4D:33:B4:4C:5B:A3:F7:D7:E4:0C:EF:5C:63:0B:EE:83
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer:       /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial:       019D9CD13E342E9DBD8F3A65D075953BED5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number:          155C
Signing time:             Fri 17 Apr 2026 19:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 19:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 19:00:51 +0000
Files and hashes:         1: 8l9vvdAD5ig5DjTOEqHSWzxEtqI.roa (hash: /ZabFzyJivcnbLtz1Of+Qh0KFPOxtwgBRMKumxY4Dq4=)
                          2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: jkLAl3J5wcUQwFHhXoJ5XZs3We/KRXUY+HkbY7ahkbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:3e:34:2e:9d:bd:8f:3a:65:d0:75:95:3b:ed:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
        Validity
            Not Before: Apr 17 19:00:51 2026 GMT
            Not After : Apr 18 19:00:51 2026 GMT
        Subject: CN=9e977f4a4d33b44c5ba3f7d7e40cef5c630bee83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b5:fc:7c:c8:73:db:45:02:04:6b:3e:a1:96:
                    b5:96:e7:57:f4:81:36:23:18:f8:09:45:35:03:41:
                    d6:0e:23:86:e1:e5:28:05:cd:c3:aa:69:db:8d:10:
                    90:a9:48:2e:c0:7d:07:9c:84:b2:3c:c7:5a:61:26:
                    82:58:df:43:6b:74:4c:1e:01:94:58:ac:ae:5f:32:
                    0b:59:c3:5e:e1:31:89:d6:c7:f2:2e:54:b4:eb:11:
                    04:42:44:da:fd:87:7a:dc:86:98:7e:6c:86:b9:e2:
                    24:d7:04:e5:13:24:7a:80:a4:3b:ad:58:e6:b3:32:
                    6d:86:8a:45:e3:4d:41:31:e9:82:54:45:27:06:37:
                    2d:46:51:a2:76:26:f0:98:ac:ea:e2:b2:f1:9b:3e:
                    83:74:9c:7a:f9:84:3a:3d:2a:20:2a:91:b2:aa:0a:
                    f0:78:75:9f:c9:c0:f2:d4:cc:27:1b:8a:f5:ab:c2:
                    3f:2b:d1:23:72:80:6f:c1:50:c0:53:49:c8:0a:fc:
                    1a:2b:c9:13:29:16:38:2e:5d:82:05:b7:87:ad:77:
                    9e:24:d5:89:3f:62:de:e4:73:e5:60:d2:50:a9:97:
                    7d:c8:62:f6:f9:b3:e9:e8:4c:42:04:27:c5:2b:ea:
                    b5:2e:46:21:32:31:b3:85:da:7b:7e:f2:b6:e3:dc:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:97:7F:4A:4D:33:B4:4C:5B:A3:F7:D7:E4:0C:EF:5C:63:0B:EE:83
            X509v3 Authority Key Identifier:
                keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:54:44:5b:4b:76:63:6c:2f:79:80:61:0e:17:a9:57:ff:d4:
         d6:c3:96:85:7b:7c:63:dd:d3:3d:b9:06:84:aa:a8:43:8e:68:
         2e:48:77:31:6c:93:53:ba:77:0a:87:7b:b7:24:9d:2b:67:71:
         ce:29:a4:cb:20:9b:7b:43:7e:de:23:d9:1b:32:3e:6a:e0:54:
         2f:04:b0:2d:be:a5:c6:9e:b5:c0:5f:58:ca:b4:55:e8:17:97:
         8f:29:13:6a:37:08:ed:1f:37:63:90:30:c8:c4:6e:03:0a:bf:
         0f:29:f3:a5:5e:a2:d2:0c:dd:50:30:8f:b0:e0:c4:33:68:66:
         ae:93:8c:f1:23:22:58:8f:46:44:c0:0a:ef:35:c9:e3:e9:4a:
         72:d9:93:7a:23:87:67:fa:07:9f:7b:40:27:33:af:ac:56:90:
         64:97:76:0a:ea:47:14:52:04:fb:7c:81:2d:51:17:78:c2:b5:
         a0:2e:b2:a3:27:e0:6c:2d:f9:f7:d1:d0:47:1c:47:e4:98:9f:
         bd:92:ee:a4:40:4a:98:87:e7:3c:26:82:83:96:26:1f:4b:c6:
         35:3d:15:4f:f5:f3:f5:4a:7d:43:37:69:fa:19:e4:46:db:b2:
         0a:4d:4a:b0:2b:04:01:91:8f:ab:f1:57:cc:96:3c:0f:6f:47:
         24:17:9a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:23:26 2026 by rpki-client