Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          PKrhcLbwva+hZLt3zoQ6MAaYDITF9xM2Ga0obZhIvmw=
Subject key identifier:   6A:EA:B9:0D:6F:1B:90:B3:DC:A1:63:E3:FA:30:C4:31:7F:34:2F:1A
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       019CAC469A977DB041A4E276D0911D0C885F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          103F
Signing time:             Mon 02 Mar 2026 02:00:34 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:34 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:34 +0000
Files and hashes:         1: 6VbI7oUC0dBbZg3i9SodlSg7Kw0.roa (hash: 3VLaWZwv4PotoR2QVZDo8zSpOLpGfe3D0W6k8+xvkJ4=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: jhtjuscfh9ZtAfay9EdkQlQAv7zuAtnLY7qeEOopq3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:9a:97:7d:b0:41:a4:e2:76:d0:91:1d:0c:88:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Mar  2 02:00:34 2026 GMT
            Not After : Mar  3 02:00:34 2026 GMT
        Subject: CN=6aeab90d6f1b90b3dca163e3fa30c4317f342f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:be:dc:59:bd:82:6b:99:f4:a3:e0:58:79:
                    74:15:3f:53:f0:50:e2:6f:af:f4:a6:d2:dd:37:52:
                    a0:e5:40:ed:3d:4f:c3:73:1e:76:a6:67:33:0d:47:
                    b3:10:6d:18:b0:1a:cd:fb:d7:47:a1:8d:54:58:c0:
                    da:d0:e3:77:7a:88:61:a6:b3:3c:64:e3:9b:be:38:
                    62:59:20:22:ec:c0:43:32:d1:a9:8b:44:90:32:b7:
                    6b:15:9c:bd:36:cf:3c:73:4e:38:8e:e9:79:a8:41:
                    2f:54:64:b5:e9:80:99:ad:8e:98:64:43:08:32:8d:
                    5d:75:5a:c4:d6:26:a1:ea:bd:b3:4b:0d:95:51:cd:
                    d3:cc:7a:3a:8c:b0:98:90:29:66:09:33:04:62:70:
                    90:16:d5:cb:5b:f0:7a:22:bb:a7:fe:9a:bb:6c:0d:
                    04:7f:f4:5b:52:ca:29:76:4f:97:f1:41:1a:0c:d8:
                    ef:17:97:b8:54:5f:1e:c4:19:54:a1:11:6a:6f:75:
                    f5:b1:88:b9:38:23:0f:6b:58:dd:5f:68:08:24:c1:
                    15:90:16:38:d5:f6:f1:ac:3a:a1:7a:0e:e5:60:9a:
                    8e:21:12:df:19:30:f9:95:eb:c9:79:6e:9a:b8:cf:
                    2a:79:54:54:33:a0:84:68:d1:7d:5a:11:dd:f0:6d:
                    18:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EA:B9:0D:6F:1B:90:B3:DC:A1:63:E3:FA:30:C4:31:7F:34:2F:1A
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e7:bc:08:54:79:4b:a0:00:97:44:1a:ec:6b:3e:c5:57:78:
         69:e9:be:f8:9f:37:75:89:17:79:e5:bc:35:b4:2c:cb:d4:49:
         e3:91:89:91:f3:86:0c:77:e5:eb:38:48:eb:f0:1a:67:f3:23:
         48:41:3e:dd:bc:bd:e1:c0:46:c8:ba:85:19:97:5b:bc:7c:07:
         ac:95:fa:b8:91:09:20:b5:21:00:72:cf:94:23:fd:5d:26:c7:
         a7:c0:bd:11:5b:23:65:91:cb:cc:03:c2:2c:e6:71:ba:d3:02:
         a8:58:e8:ca:e6:3d:08:26:45:9c:5d:0b:4b:ab:4d:d1:b0:58:
         1c:c6:36:e1:59:98:cc:4e:2e:bd:cb:01:74:e4:bc:13:36:64:
         80:ae:81:ef:65:e5:1c:a9:df:df:8d:3c:52:08:8b:30:6d:dd:
         97:3b:15:a6:b7:1c:4e:37:8d:7e:6d:a1:bc:7e:89:5c:47:b8:
         7d:61:ed:a2:c9:92:46:3f:52:c4:30:96:a8:3d:43:8a:52:e0:
         b1:3c:e5:13:7e:d0:06:24:8d:d4:f4:8e:1a:71:d8:7c:32:f1:
         43:62:4b:af:ea:08:d9:4f:c3:c1:21:bf:a2:97:c6:ba:e4:ee:
         4d:22:d6:1a:10:0f:83:f9:a5:e2:6b:21:2c:0f:9d:32:55:cd:
         10:7b:98:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:46 2026 by rpki-client