Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
File:                     wwOJmXRU-gA-H_yM0ui35l2T9OI.mft (raw, json)
Hash identifier:          EOQjN2hDcSUwy4y5V7tr2PiwVDLkjQIjST4Dd0Tqw3o=
Subject key identifier:   29:82:85:B6:DD:5C:45:44:05:E5:31:39:A1:9A:E4:87:26:27:CE:2C
Authority key identifier: C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
Certificate issuer:       /CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
Certificate serial:       019CAD22501914A64CDC8E314480DD58FFFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
Manifest number:          0C53
Signing time:             Mon 02 Mar 2026 06:00:32 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:32 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:32 +0000
Files and hashes:         1: wwOJmXRU-gA-H_yM0ui35l2T9OI.crl (hash: /ijUHxPj+Prqw9nMqGR1BwceZwzE0fypraGvUcY3DRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:50:19:14:a6:4c:dc:8e:31:44:80:dd:58:ff:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
        Validity
            Not Before: Mar  2 06:00:32 2026 GMT
            Not After : Mar  3 06:00:32 2026 GMT
        Subject: CN=298285b6dd5c454405e53139a19ae4872627ce2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:48:5a:10:56:9c:44:64:8e:78:4f:83:2d:9f:
                    14:a6:07:dd:34:e9:fb:02:be:70:12:19:46:b9:20:
                    88:de:b2:4e:c9:5c:e2:d0:1d:ce:b9:ad:d4:49:6a:
                    66:06:9d:f6:74:c7:29:0a:e6:1d:33:b2:09:eb:7b:
                    3b:8b:f9:0b:61:ee:0a:8c:62:19:76:2e:7b:39:48:
                    e0:dd:4f:c9:59:30:fb:8b:dd:06:14:08:0e:39:94:
                    f4:62:86:92:06:58:b1:56:31:05:89:81:b0:e4:25:
                    1e:df:00:bc:b1:b3:f5:18:14:69:4b:00:70:5b:a0:
                    22:2b:d5:01:91:58:bf:53:9f:21:5d:07:4f:61:75:
                    a8:5e:24:8f:37:14:d2:ca:0b:c0:b0:5a:37:47:7f:
                    b1:69:62:e7:71:e6:5d:74:b6:c9:34:44:3d:dd:5d:
                    33:0b:f0:a1:36:69:ec:24:43:65:52:08:be:bd:2d:
                    36:75:d1:28:af:93:fb:b0:3f:e9:e9:c9:8c:86:1f:
                    51:e7:38:e8:b3:ef:f6:c0:d4:ee:de:94:7b:94:12:
                    bf:93:7d:d5:15:a3:4c:3d:c2:7a:0b:41:0b:c1:d8:
                    21:36:4f:07:ea:15:85:ee:ed:bb:0e:dc:ac:0c:47:
                    cd:ea:cd:7d:a5:b5:fc:76:9c:d8:90:cd:2f:71:3c:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:82:85:B6:DD:5C:45:44:05:E5:31:39:A1:9A:E4:87:26:27:CE:2C
            X509v3 Authority Key Identifier:
                keyid:C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:cb:1b:9c:7c:b1:6d:7e:19:18:e4:35:32:6f:b0:bd:d7:c0:
         1b:cd:cc:10:cf:65:cf:54:a2:29:48:71:0a:57:a7:de:ab:45:
         49:3f:5a:5c:e8:8e:4c:4f:90:51:12:b2:89:ff:31:a6:28:46:
         8c:b9:5c:6d:a8:2e:20:8d:94:91:b0:22:c0:5c:67:9b:36:e6:
         96:98:b4:60:49:fe:58:dd:03:d0:20:51:90:1f:ed:b9:ad:16:
         14:6c:a2:74:76:22:d7:d6:34:74:b4:ee:65:8d:6e:78:85:6e:
         04:b2:6b:4b:0a:38:f2:bf:30:19:3a:0c:a1:0e:77:15:43:51:
         1c:d9:51:99:ee:43:2d:7e:3d:5d:7a:39:6e:77:d4:a0:f6:a2:
         bc:4f:52:e6:78:14:07:80:8a:0b:f0:44:41:2d:ef:f0:e1:fc:
         ff:47:04:e0:f9:50:b4:e9:6d:bd:e8:5b:af:eb:8d:10:b6:02:
         fc:4d:13:58:f4:15:a7:82:7c:0f:76:6b:4d:c7:23:82:e5:f0:
         27:ee:d0:b9:52:2b:b1:c5:93:47:b4:1b:20:8d:84:40:5c:09:
         14:aa:ce:0e:7d:e4:82:8f:b6:b7:1c:8d:78:b4:60:a6:b3:84:
         1a:82:d7:90:b6:0d:1c:b9:5d:40:09:6d:0e:b2:ad:ec:26:09:
         3d:28:26:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:35 2026 by rpki-client