Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
File:                     wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft (raw, json)
Hash identifier:          dOZPbRGuABuer8ibNnjOwXqn+CC9ui4jmHI67CWax3c=
Subject key identifier:   C9:1E:6A:88:60:25:B7:AB:FD:BB:C1:96:76:C7:5E:79:96:23:0F:84
Authority key identifier: C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5
Certificate issuer:       /CN=c11f603de409a710fdae62cac1c55393a953b5b5
Certificate serial:       019CAA5879F81E9840DF29BF1BC4E018677F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
Manifest number:          053B
Signing time:             Sun 01 Mar 2026 17:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:50 +0000
Files and hashes:         1: gV9crIDUuxzdFMitCgOaVsZoy_M.roa (hash: pE8mlv/DDAD/v56xUsBEPIpYP5HBve6yv4Le8BMYrag=)
                          2: wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl (hash: IawxAp3Mh+8MZvThdB0CveE205HR2AII3M0lUZE5X44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:79:f8:1e:98:40:df:29:bf:1b:c4:e0:18:67:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11f603de409a710fdae62cac1c55393a953b5b5
        Validity
            Not Before: Mar  1 17:00:50 2026 GMT
            Not After : Mar  2 17:00:50 2026 GMT
        Subject: CN=c91e6a886025b7abfdbbc19676c75e7996230f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:08:2c:cf:17:8a:a4:b2:af:6c:60:4b:c6:
                    7c:b0:c9:63:f6:9f:92:ca:b3:ff:ee:f5:1f:4d:df:
                    17:61:74:27:b8:0a:cd:60:13:67:41:80:84:03:9c:
                    f6:89:62:7f:61:a0:13:ea:e2:ab:60:be:2e:a9:90:
                    96:31:9a:d4:76:02:c3:5f:ea:9d:56:f7:5e:7a:3b:
                    ae:73:81:d1:c5:d8:11:d2:56:93:03:e5:76:ed:b7:
                    15:d4:13:e1:f2:cb:31:5c:7d:4c:44:b3:04:13:50:
                    8b:69:c0:0d:6b:2c:81:42:e0:73:4f:57:57:73:0d:
                    ab:d9:c9:8b:3e:d7:23:83:a1:5a:7d:39:04:d8:5e:
                    31:44:1c:3d:1d:35:e4:a0:bb:fd:d6:76:b6:d0:f6:
                    7c:43:d6:f3:df:19:7b:ca:e0:90:21:89:8f:92:62:
                    a4:a7:68:9f:aa:2a:49:93:29:65:82:7e:07:b8:2a:
                    d3:47:e0:70:fc:23:61:9b:4d:35:99:69:f0:2e:6e:
                    a2:a5:7d:35:2b:0f:a8:4e:a4:67:65:ca:49:41:e2:
                    22:31:79:6b:58:82:12:90:4f:5e:9e:8a:1f:57:0b:
                    bf:a8:72:49:5f:fe:37:ec:ba:f2:74:1f:c1:56:8e:
                    4c:46:6b:98:42:cd:6d:81:db:5b:51:85:e1:a7:d5:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:1E:6A:88:60:25:B7:AB:FD:BB:C1:96:76:C7:5E:79:96:23:0F:84
            X509v3 Authority Key Identifier:
                keyid:C1:1F:60:3D:E4:09:A7:10:FD:AE:62:CA:C1:C5:53:93:A9:53:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR9gPeQJpxD9rmLKwcVTk6lTtbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c7e47d-c08e-4769-86d2-c7f8b057aed0/1/wR9gPeQJpxD9rmLKwcVTk6lTtbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:4e:e6:cb:34:6f:15:2b:11:fc:84:e6:2d:c9:d7:e7:83:64:
         2d:dd:ab:1a:70:d1:c6:06:ea:4e:56:14:7e:e0:21:8a:e4:58:
         ed:35:f5:50:32:ba:04:9f:b4:5c:17:81:36:6e:8e:59:c5:6c:
         e6:11:ba:1c:20:cf:fa:a8:00:77:d3:e6:88:c1:f8:75:ed:7f:
         ed:0e:99:1b:32:da:b9:23:2c:26:80:e9:90:46:fc:5c:03:cb:
         e0:b6:ee:6a:47:dc:b2:3c:69:62:af:85:99:79:a6:84:08:95:
         e8:f7:1e:57:35:56:ee:ec:47:9a:04:d4:86:74:a9:3e:7e:9f:
         c5:cf:62:53:72:31:bd:e8:53:2e:0e:f6:61:e7:78:05:16:7d:
         ae:00:d3:99:0a:db:e0:26:70:28:0e:6e:d6:25:00:5e:1d:ed:
         4b:51:0f:15:2e:63:de:e4:e1:49:47:7f:f2:d3:49:68:c8:91:
         3b:b2:cd:ff:42:c0:d9:ee:2a:8b:12:6a:3a:01:5f:c1:38:09:
         61:94:f9:26:56:b3:37:0a:b6:95:08:b0:23:32:88:57:fb:e7:
         36:8e:b8:f8:55:13:c1:ad:cc:3b:78:ac:b3:02:cc:0b:61:ef:
         3c:f4:b8:ca:5b:a6:e4:ad:87:6d:4c:c8:20:d3:4a:69:14:7b:
         be:3c:ee:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:02 2026 by rpki-client