Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
File:                     wyzHqWT083CSkpHhn_995T8ZvkQ.mft (raw, json)
Hash identifier:          E7tXC4P7B505XAlv6T+jIbjMJlb0zVuXQUFPAA3Ia5g=
Subject key identifier:   6B:1B:38:CE:50:AD:D4:BE:C4:C2:C0:BF:59:1C:F1:2B:7B:B3:37:37
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Certificate issuer:       /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial:       019CAB34872A22B52C6000A44A200B43B2AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
Manifest number:          137C
Signing time:             Sun 01 Mar 2026 21:01:12 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:12 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:12 +0000
Files and hashes:         1: Ad2BYNr4C8UGPtT46SLlPEvhYoE.roa (hash: iHuFlOzhqVh9TVA/RdSn3C6VoHbo7FF1nq7e3/ScdEM=)
                          2: wyzHqWT083CSkpHhn_995T8ZvkQ.crl (hash: upqsvlHDgqWKIBCg1YZyo+aOXVBmAmaazS5fv5O6MpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:87:2a:22:b5:2c:60:00:a4:4a:20:0b:43:b2:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
        Validity
            Not Before: Mar  1 21:01:12 2026 GMT
            Not After : Mar  2 21:01:12 2026 GMT
        Subject: CN=6b1b38ce50add4bec4c2c0bf591cf12b7bb33737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:83:3a:c3:89:a4:9f:2e:53:cd:92:5d:83:
                    14:08:e5:7a:10:2f:05:cc:34:7d:10:90:41:9e:b7:
                    8a:4c:75:c1:46:99:97:10:8b:1d:ab:49:63:25:40:
                    19:8d:c0:f3:e3:b7:bf:00:5b:6c:a4:2c:9c:a7:68:
                    4d:3a:22:b7:8b:fd:0d:7b:2f:cc:40:f3:3d:cf:b3:
                    9f:50:ca:81:d4:68:3c:9f:19:18:ab:16:fb:38:4b:
                    8b:24:dc:76:f8:4c:58:e0:05:7e:ae:30:1f:3e:cc:
                    74:91:97:b6:6b:ab:38:0a:c1:6a:62:09:02:20:0f:
                    6c:51:9f:79:b0:84:9b:1c:9d:7f:be:3a:c0:52:64:
                    c9:1e:7e:84:48:4a:b0:d7:d0:cc:42:f6:51:c3:75:
                    1e:a0:eb:c3:da:56:f7:34:45:da:d5:24:26:73:95:
                    b6:fe:50:48:57:5c:d4:3b:dd:70:16:d9:fe:23:ef:
                    db:0f:c4:75:ef:3c:bd:07:cc:18:64:7c:f7:81:a9:
                    56:da:8d:11:7c:ab:4b:7e:d8:29:e4:40:a3:7b:0b:
                    6a:df:7f:31:1f:b3:b5:83:1e:63:11:be:c5:4c:4f:
                    3f:80:7d:58:81:cd:d9:f4:1e:62:ab:96:b9:5e:c9:
                    c2:b8:19:6a:74:57:24:c9:67:a4:28:e9:98:6c:58:
                    44:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:1B:38:CE:50:AD:D4:BE:C4:C2:C0:BF:59:1C:F1:2B:7B:B3:37:37
            X509v3 Authority Key Identifier:
                keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:1c:14:d3:82:12:50:94:1c:f0:f0:cd:54:2e:96:79:66:9a:
         57:2c:87:17:f7:b6:66:0f:a9:b9:f2:1f:d1:d2:d3:21:1e:5d:
         78:f5:16:61:2b:97:a1:8e:3b:6f:7e:40:1e:cf:b2:b8:e7:8f:
         52:51:8a:3c:49:ac:a8:4a:4f:16:4b:ec:ee:e8:3c:05:9f:53:
         e0:a6:16:0e:4f:91:e2:5b:55:42:13:5b:20:96:dc:b6:14:f3:
         84:76:90:dc:86:d5:5e:b0:2a:dd:5e:18:45:cc:0f:08:be:2f:
         0e:d1:66:00:16:d5:b1:44:bc:fc:62:7b:82:ec:7f:8a:97:0f:
         fb:ab:00:40:e4:ff:43:d6:9a:08:71:1d:db:bf:54:89:02:71:
         84:9d:98:ce:5c:7e:4c:26:ce:9b:14:10:b5:b1:8b:49:eb:b6:
         55:80:e6:b3:3d:b9:72:10:eb:45:89:ec:3f:ed:32:d3:b2:0d:
         16:63:7b:75:8b:7c:4b:17:bf:46:3d:37:5b:2d:39:75:bb:fe:
         d5:d9:68:af:4a:9a:8b:d2:54:2e:df:7e:5f:b3:26:eb:fa:86:
         19:14:ec:8d:e5:e1:cd:4c:ad:e1:73:99:ef:54:97:4c:05:c6:
         13:0f:79:22:36:a0:e6:d6:eb:47:c6:38:f8:40:19:b7:f9:68:
         0b:10:85:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:02 2026 by rpki-client