Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
File:                     wj_7f9rDV5zXAB3FBjAgFT3s56U.mft (raw, json)
Hash identifier:          lgPmy8oOPwKlhByMzkV9fIt6nmtjclMG5j8l5cU/zFQ=
Subject key identifier:   DE:F9:D6:A1:10:F1:1A:C8:92:99:6A:59:47:DC:78:4C:50:02:CB:43
Authority key identifier: C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
Certificate issuer:       /CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Certificate serial:       019CA97CF3FAB056B81F94D1260163B62787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 13:01:04 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:04 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:04 +0000
Files and hashes:         1: wj_7f9rDV5zXAB3FBjAgFT3s56U.crl (hash: /tWJioaqOi40RKbWVZMNd3HqnLx0fp1fbwBEzRtb2JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7c:f3:fa:b0:56:b8:1f:94:d1:26:01:63:b6:27:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
        Validity
            Not Before: Mar  1 13:01:04 2026 GMT
            Not After : Mar  2 13:01:04 2026 GMT
        Subject: CN=def9d6a110f11ac892996a5947dc784c5002cb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:2f:27:08:c3:64:e9:43:8a:a7:90:da:82:
                    49:1e:ba:16:17:0c:f5:57:3a:a2:c3:e4:c3:24:d5:
                    17:94:26:b0:aa:78:f1:bf:fb:3f:38:18:83:97:16:
                    cb:ca:ef:15:71:86:31:a3:12:05:21:0c:99:cc:ff:
                    37:40:f1:b9:97:df:89:8f:c3:8d:5e:43:ad:c0:e3:
                    97:c0:e4:8e:78:51:72:97:74:8e:7f:cb:18:dc:62:
                    f3:16:2f:09:1e:7b:71:11:60:2d:2b:2a:be:56:1f:
                    c9:72:a0:6b:64:bc:c1:f6:d5:30:59:fc:04:db:eb:
                    52:74:77:66:9c:54:1c:f6:6d:f9:e4:40:c6:74:41:
                    07:31:bd:77:9d:7a:07:50:c3:de:23:91:c0:7e:ea:
                    83:e8:5f:7a:fc:87:3f:ed:9f:17:dc:5a:a8:c3:9e:
                    aa:f3:f8:72:f6:ef:46:8f:01:52:8f:bf:77:f6:65:
                    03:d8:76:c8:f3:89:e7:a3:48:93:d5:59:23:12:52:
                    63:78:0c:06:c4:5c:29:a5:ee:b8:e9:9a:d0:e9:5e:
                    b4:05:d6:8e:8a:99:4f:4c:a2:97:cb:31:c2:21:a1:
                    ba:bc:ff:2d:14:42:63:a1:28:29:1a:9d:4f:88:37:
                    8c:95:0d:61:66:6c:08:d6:b0:37:60:eb:d5:4d:d1:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F9:D6:A1:10:F1:1A:C8:92:99:6A:59:47:DC:78:4C:50:02:CB:43
            X509v3 Authority Key Identifier:
                keyid:C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:39:b9:49:4b:d0:61:da:52:50:35:e4:2f:b2:f5:7b:4d:3b:
         ae:2a:62:8e:b2:c4:c3:e8:7a:93:04:bc:0f:4b:33:78:5a:1c:
         8d:ae:5b:b2:ce:12:7c:e5:47:58:f9:55:37:64:48:ec:e4:30:
         5e:d5:9d:12:f4:49:39:77:f4:ee:aa:52:11:fc:c3:c1:3e:08:
         1d:10:45:a7:46:51:2d:55:1d:a1:d1:52:a8:02:d4:52:3e:22:
         ee:69:f3:5e:c5:07:05:6b:bd:53:b4:3a:fb:ed:c2:82:56:b1:
         98:0a:1e:03:24:83:de:ad:72:52:99:be:b2:a2:1a:b9:cd:fe:
         e8:aa:72:4e:b3:63:59:39:80:b9:31:39:97:77:3b:6b:23:c1:
         cc:73:2d:7e:55:59:50:f8:ae:f9:e8:d7:c5:9b:5e:25:37:7e:
         cd:b2:ab:78:12:3a:67:1c:39:0d:9c:61:49:e8:90:4a:56:22:
         97:bb:5e:da:58:a0:70:a9:ec:99:65:6a:e8:c8:75:72:3b:78:
         4e:dc:97:1e:e8:53:6b:84:73:68:28:08:6a:41:ae:75:b7:71:
         bf:59:54:ab:37:39:b5:0f:76:9c:26:56:1b:b0:a0:36:fa:d3:
         de:5b:7e:2b:54:46:e7:4a:1b:10:a0:1f:dd:8d:a7:a7:29:26:
         04:fd:42:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:32 2026 by rpki-client