Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/wiRd-J1oweNePg4K7e7z8qbC-jY.mft
File:                     wiRd-J1oweNePg4K7e7z8qbC-jY.mft (raw, json)
Hash identifier:          UofxvfneoEdEO0LsBblu3IspDUW21xrx1IuOmSBKuFM=
Subject key identifier:   98:BD:E7:0E:A1:18:DC:FA:64:C2:73:1E:0C:4C:B5:BA:97:41:22:94
Authority key identifier: C2:24:5D:F8:9D:68:C1:E3:5E:3E:0E:0A:ED:EE:F3:F2:A6:C2:FA:36
Certificate issuer:       /CN=c2245df89d68c1e35e3e0e0aedeef3f2a6c2fa36
Certificate serial:       019CAEA3D531E83C669AC31198C05E26E262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wiRd-J1oweNePg4K7e7z8qbC-jY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/wiRd-J1oweNePg4K7e7z8qbC-jY.mft
Manifest number:          20
Signing time:             Mon 02 Mar 2026 13:01:38 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:38 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:38 +0000
Files and hashes:         1: v1QfP-kLBM45ha8iPX7i6k9Tg6A.roa (hash: g6oGtMxkI7S9/6AMsbvT+ajwBWoe9tqon+DzYkI6T6s=)
                          2: wiRd-J1oweNePg4K7e7z8qbC-jY.crl (hash: E+G21GpE8Ihdh9ucF8yUOnOEsfO4v3t6+hMKGyFLoGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/wiRd-J1oweNePg4K7e7z8qbC-jY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/wiRd-J1oweNePg4K7e7z8qbC-jY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wiRd-J1oweNePg4K7e7z8qbC-jY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:d5:31:e8:3c:66:9a:c3:11:98:c0:5e:26:e2:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2245df89d68c1e35e3e0e0aedeef3f2a6c2fa36
        Validity
            Not Before: Mar  2 13:01:38 2026 GMT
            Not After : Mar  3 13:01:38 2026 GMT
        Subject: CN=98bde70ea118dcfa64c2731e0c4cb5ba97412294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8b:b1:4f:bb:8f:93:6a:b7:40:ae:3b:8b:8a:
                    21:1f:52:35:f7:84:e9:55:62:12:5c:a7:7d:17:fa:
                    57:ec:a0:36:e2:62:6e:fd:eb:00:be:a1:ca:1c:ae:
                    49:c8:7d:f1:74:35:ee:70:76:ec:49:ee:dd:f6:e6:
                    4c:a6:ae:d1:b5:fd:c2:d3:76:ce:ce:3d:86:62:20:
                    49:c6:43:9c:d1:e9:e1:d5:67:84:96:5e:b7:67:47:
                    6a:2d:e9:e7:47:d2:0e:cb:db:e4:b7:66:83:77:5f:
                    2c:a4:84:5c:3c:c4:38:3a:9f:fc:13:1c:8a:83:a1:
                    76:b9:fd:05:14:76:14:1d:f3:86:ce:4e:b0:db:7e:
                    5f:66:fe:3d:3d:f6:1d:97:80:34:d5:0b:7a:f5:2f:
                    0d:c1:e3:9e:f4:dd:b6:42:01:16:47:28:a2:2e:b0:
                    4f:62:6f:37:80:18:4e:c3:69:3c:4f:a1:9c:ff:99:
                    29:9d:c1:7e:f0:c0:c7:9b:11:69:d5:66:1b:de:7a:
                    68:03:4d:34:c3:b0:9d:69:cb:6e:e1:d7:97:6a:e3:
                    a6:b0:15:ba:d9:76:8d:41:98:2e:0d:e0:54:72:8a:
                    3f:ef:e6:08:7a:69:26:80:6f:72:22:72:4a:fb:e8:
                    82:9a:45:18:8b:51:9f:f8:58:a2:e1:66:c2:5b:da:
                    2c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BD:E7:0E:A1:18:DC:FA:64:C2:73:1E:0C:4C:B5:BA:97:41:22:94
            X509v3 Authority Key Identifier:
                keyid:C2:24:5D:F8:9D:68:C1:E3:5E:3E:0E:0A:ED:EE:F3:F2:A6:C2:FA:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiRd-J1oweNePg4K7e7z8qbC-jY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/wiRd-J1oweNePg4K7e7z8qbC-jY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3b2a9e-fe84-4a8a-be0e-8dd15c9e3145/1/wiRd-J1oweNePg4K7e7z8qbC-jY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:64:00:49:ee:c6:c4:59:2e:93:12:17:09:b5:ad:f3:67:2b:
         98:54:fb:35:99:49:e7:5d:14:ef:5e:b0:c9:52:42:83:96:21:
         71:f4:70:5e:ce:bc:a2:92:82:96:db:10:0e:4f:4e:47:d3:00:
         e4:14:ee:cd:48:29:03:e6:d8:07:61:4d:98:52:0b:34:62:a9:
         87:6f:6e:da:6d:85:6e:16:f1:d5:10:6d:a7:1f:c7:ef:b4:bd:
         52:86:10:0a:b7:5f:a1:3b:19:20:ca:71:4c:65:8d:8f:64:75:
         47:cf:bd:d9:48:ae:72:84:0f:f5:30:81:43:01:c9:37:f8:8d:
         1f:52:94:65:65:7d:2c:c1:a2:08:52:7e:27:88:69:3b:49:de:
         f2:78:cb:02:98:26:5f:4b:f5:ae:9f:2c:66:11:6c:f7:23:75:
         fb:3a:0b:f9:43:18:61:59:90:a8:2b:3e:9b:1e:3c:27:61:29:
         e7:26:fe:e0:1b:ea:3a:e7:d8:f5:6c:bc:76:0d:fa:89:26:50:
         9a:44:87:a2:e8:88:ba:d0:70:a6:c9:c8:5d:bc:5d:86:b4:d8:
         9f:6a:4f:f0:3d:38:d0:3a:da:cb:1b:2f:e3:78:d8:f6:80:03:
         fc:d2:45:c8:37:e1:a5:f6:c9:44:a7:c9:db:21:6a:bd:57:23:
         2c:8c:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:01:21 2026 by rpki-client