Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File:                     w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier:          AZ4PNw23RR3OTHlyo7zZyyWUAbkk02QMqYyQ/OGKVds=
Subject key identifier:   FB:7A:4E:E2:E8:C6:D2:53:FA:34:A7:2F:A4:93:C3:47:DF:31:40:38
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer:       /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial:       019CAB6B898895A4BD1CED3533FFB0094435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number:          01E1
Signing time:             Sun 01 Mar 2026 22:01:17 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:17 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:17 +0000
Files and hashes:         1: 6eKn3uMQuUNTMkTpT0y-3vnuj_s.roa (hash: WZXQFULC/IwGTQvmcWdtzTS7QYlU+Fpmd+6cLbWavvM=)
                          2: iLmwMggqjEBnQ1t5qTCIk0-Ops0.roa (hash: f7hSU9eQL9QO+9vWgF04GRMwKj8b5Zh3CLrT+16gfVU=)
                          3: ualECGFgELK8Ub0WIu1zKOrzdLw.roa (hash: m+NzeDbR9O7unWoYNRmh2DUqdEvHCo2FWMfMNRs15bs=)
                          4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: ibMD/hhsB6g611zywDOcpXPgi2JAsp6POD1a6NvanVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:89:88:95:a4:bd:1c:ed:35:33:ff:b0:09:44:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
        Validity
            Not Before: Mar  1 22:01:17 2026 GMT
            Not After : Mar  2 22:01:17 2026 GMT
        Subject: CN=fb7a4ee2e8c6d253fa34a72fa493c347df314038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:ca:24:b8:d1:b7:cf:31:64:91:bb:94:b4:
                    ab:02:c0:a0:74:f2:5c:4f:83:27:55:16:30:a2:28:
                    3e:ba:26:36:32:d7:c9:07:0f:05:ef:bb:e5:a2:d0:
                    cf:7f:1d:d3:78:c0:ab:9d:ad:8d:90:17:e2:73:77:
                    1b:b6:a2:6e:3a:a3:a7:71:9a:d0:de:cc:b2:1e:6c:
                    84:ef:27:aa:91:93:18:a5:72:a8:1a:a2:f5:b6:a7:
                    db:09:b7:f1:8e:7c:af:58:39:08:49:97:d9:c9:a5:
                    0c:80:bb:c8:fb:6e:a2:a9:8e:4c:1e:26:19:ce:28:
                    d5:13:b9:a3:13:38:00:98:29:d5:bd:9b:bf:d4:38:
                    0e:21:89:a7:60:77:24:01:83:2b:dd:d7:ed:52:05:
                    55:45:f6:6d:32:b0:d7:7f:c8:97:71:f6:07:45:23:
                    62:78:6d:27:a6:8d:f2:29:e3:3d:ea:4e:e6:78:20:
                    44:f2:b9:e7:b7:2c:a8:cc:0a:82:e3:ee:37:e0:1f:
                    46:23:42:03:72:e7:09:47:54:4b:be:cc:3b:24:91:
                    9c:a4:22:5f:39:c9:5a:79:e4:d8:99:83:be:e6:1f:
                    a1:7a:50:83:23:b3:3e:d9:eb:a5:b0:07:82:e9:f6:
                    fe:91:7d:30:2c:7b:e5:61:d1:57:7c:cb:f4:bb:10:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7A:4E:E2:E8:C6:D2:53:FA:34:A7:2F:A4:93:C3:47:DF:31:40:38
            X509v3 Authority Key Identifier:
                keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:fd:bb:d8:13:54:c7:19:cc:35:ea:4c:2d:7f:e7:8c:56:9f:
         82:41:1d:17:00:a5:b5:53:cf:c8:f0:57:16:0a:4c:6a:f6:41:
         c1:2c:89:7d:d9:9b:09:93:2e:eb:c2:3e:f9:30:90:83:cc:7b:
         eb:bd:5f:8a:ff:1a:ce:86:d7:cf:cf:c2:35:3f:ce:ed:45:1c:
         d2:b2:de:57:8e:99:5b:87:4d:ea:72:89:d8:08:a4:7d:b5:4f:
         49:c7:47:3d:ec:ab:75:47:31:99:5f:82:10:0f:b0:bd:fd:09:
         cc:db:10:dd:0a:83:cc:bd:e3:30:b9:70:d9:cf:1e:28:0e:17:
         7f:6e:0e:d3:d4:71:6f:37:c7:54:22:ec:23:48:0e:06:fd:cb:
         c9:89:3b:53:52:4f:40:2b:03:fc:70:c0:66:55:ab:82:d1:34:
         c6:e3:44:fe:e7:f0:1f:ca:17:6e:62:89:13:58:00:46:2f:73:
         20:9a:c8:f3:8e:94:51:68:07:a8:50:63:2d:a0:07:75:aa:21:
         23:64:17:c4:8f:27:d6:4f:14:40:fb:4c:f4:b3:9d:c5:ea:64:
         bb:d5:9a:dd:03:c5:c2:11:44:0c:15:2a:d4:7e:7f:60:51:23:
         eb:a8:14:b6:b9:b9:e5:56:ab:5f:ce:8a:ff:d8:ac:f1:2d:8f:
         ed:07:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:56 2026 by rpki-client