Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
File:                     wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft (raw, json)
Hash identifier:          FQ64qAx1d08wuelpcTZff/4nKrd7FygKXsJe4q7ce+Q=
Subject key identifier:   DD:6E:C3:38:C5:79:4F:50:7B:FB:D9:C9:FB:AE:92:50:AA:F1:C4:90
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Certificate issuer:       /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial:       019CAD906978B18135A98C5224075D0BF808
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
Manifest number:          0794
Signing time:             Mon 02 Mar 2026 08:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:48 +0000
Files and hashes:         1: 2SN63uiR84jB4gjJ1oeZd3LxGmw.roa (hash: +QrxXlt+PAoes4BS6/9AYSbkj6CREEueCsrUnrPMn9w=)
                          2: nT_nq2qZpg_e8A-QbT4bDV9sY1c.roa (hash: wsGgO59uuOrZNxO5czJq2eFvkiFHzzzuspwORnyBouk=)
                          3: sux632LKHtGX1EXDlRH988a1FGU.roa (hash: xXf8M6qicMrsGk7jlbi/KFdZjjGpVZHB2RA7AQ0CnCw=)
                          4: wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl (hash: to05dqRl3MwmgIjaYjaBtgxtUCYHuh4yvOZkv+a2MAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:69:78:b1:81:35:a9:8c:52:24:07:5d:0b:f8:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
        Validity
            Not Before: Mar  2 08:00:48 2026 GMT
            Not After : Mar  3 08:00:48 2026 GMT
        Subject: CN=dd6ec338c5794f507bfbd9c9fbae9250aaf1c490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:c7:88:ff:ec:8c:0a:52:7c:02:f0:c6:b3:
                    45:78:86:d4:9d:ea:44:a7:af:12:40:90:8b:17:48:
                    e0:49:e2:f2:19:09:aa:b0:ec:2c:19:92:ea:5e:ed:
                    76:63:56:7d:d3:43:a6:55:4e:9f:dc:22:62:45:1a:
                    44:71:80:a5:73:91:6f:3d:82:1a:b7:3d:9f:00:7c:
                    0b:aa:fc:f1:c4:bc:c7:af:c4:c4:9d:0a:08:02:54:
                    cf:4f:b8:e6:8c:2f:bc:3b:64:22:d5:3f:ec:4a:c1:
                    04:6c:3d:39:ce:a1:4c:bc:c5:3f:f4:c6:11:68:aa:
                    95:c6:6a:0e:97:1e:57:e7:ac:99:73:8a:ac:fd:17:
                    94:4e:c9:40:e5:70:6d:d6:c3:dd:a7:05:61:51:f3:
                    c2:a9:19:1d:ae:76:7a:6e:8e:3a:a8:2a:99:25:ed:
                    e3:16:44:c7:31:4b:c2:09:a9:93:5c:12:01:e3:8f:
                    6e:91:2c:1c:44:c2:b4:7c:55:9d:a9:48:42:c3:73:
                    80:c0:1d:44:3c:6c:72:eb:45:fc:2b:ad:2b:4a:09:
                    ff:28:0e:10:cd:cb:3c:90:4a:38:05:15:e5:7c:be:
                    ea:35:d8:41:6d:34:05:4e:12:94:18:08:1f:1d:3f:
                    82:11:07:16:1e:3a:18:1a:fd:08:e2:90:b5:cf:0f:
                    b4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6E:C3:38:C5:79:4F:50:7B:FB:D9:C9:FB:AE:92:50:AA:F1:C4:90
            X509v3 Authority Key Identifier:
                keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2d:2a:96:1f:e9:9e:ec:8f:03:07:0e:d5:25:75:32:f4:80:
         70:ba:8f:43:01:8a:89:f5:91:35:d5:cf:02:54:9f:9b:a8:77:
         22:5a:9d:fe:90:e9:ed:e7:e9:f8:3f:75:6a:e5:d6:05:08:64:
         1f:d4:56:be:e3:f0:ba:18:b9:81:1f:c0:32:81:ab:62:58:b8:
         92:6f:c5:de:49:9d:15:62:46:e6:76:56:42:cf:6f:d6:9b:41:
         30:0c:ec:e7:43:97:2e:02:ac:a3:54:96:1d:1b:18:b6:85:bb:
         1a:83:78:77:dd:c6:11:25:95:ef:70:58:0d:78:c9:f8:82:78:
         b5:da:d7:ab:1f:f0:f8:55:e9:39:04:f4:a9:d6:ee:88:33:5e:
         e1:9d:01:0f:ab:bc:ab:36:6e:59:d0:c8:15:c6:1d:be:13:fd:
         01:e0:b7:10:43:ba:8f:6d:a3:a8:7f:dd:de:34:30:d2:af:46:
         39:a5:c0:e2:02:c0:00:c4:b9:b4:02:65:f9:0d:d8:d1:ed:1d:
         c1:8c:9b:36:36:6c:c1:6f:95:25:27:cf:e7:e0:16:df:d7:03:
         a3:74:a6:8e:90:07:62:12:3f:a2:70:4b:c7:b6:3f:13:f6:07:
         32:fb:3e:dc:fc:a9:c1:fc:fc:ce:21:b9:ba:24:74:fb:e6:43:
         c8:1a:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:42 2026 by rpki-client