Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
File:                     wzExr3-gKXnG6h3eCdjHYtiupB0.mft (raw, json)
Hash identifier:          YcVeRDaY3FN627gOEFybbT5ujnaqPLx79u8pnxWIN50=
Subject key identifier:   36:E3:E0:BB:BC:DF:E6:50:75:57:9C:55:83:AE:7D:E6:57:D2:DA:68
Authority key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D
Certificate issuer:       /CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
Certificate serial:       019CA78F11EA3FB18FE59591BDD543894AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
Manifest number:          67
Signing time:             Sun 01 Mar 2026 04:01:37 +0000
Manifest this update:     Sun 01 Mar 2026 04:01:37 +0000
Manifest next update:     Mon 02 Mar 2026 04:01:37 +0000
Files and hashes:         1: b68wUGWBseMkcjS44Gr7jhy5Jqo.asa (hash: +m+tsXbOZCdRGi1rCes1IS9Kt7hkM0KJcsusakEBgHY=)
                          2: wzExr3-gKXnG6h3eCdjHYtiupB0.crl (hash: kZ3Lmw3QNBcyrbZSx9yNMdk7eroAlq682RGZ77rMGvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 04:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:8f:11:ea:3f:b1:8f:e5:95:91:bd:d5:43:89:4a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d
        Validity
            Not Before: Mar  1 04:01:37 2026 GMT
            Not After : Mar  2 04:01:37 2026 GMT
        Subject: CN=36e3e0bbbcdfe65075579c5583ae7de657d2da68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c0:a3:ff:a6:82:ca:94:c1:94:d2:da:e0:0f:
                    bf:36:13:e8:e2:a9:bb:e8:62:e2:c3:5d:93:a5:5f:
                    7a:38:99:74:e2:e2:c1:a9:18:f1:3d:a7:ed:ae:1a:
                    63:ce:aa:fe:16:d7:90:d2:f5:a2:64:ba:7e:1e:23:
                    b5:27:0e:bd:00:c4:73:07:27:43:c4:06:9a:27:0f:
                    6c:dc:4b:b5:40:f2:a7:aa:cc:e7:fa:2f:bb:f6:0a:
                    9e:c2:c7:67:e7:8b:ee:1b:c8:9c:a5:e0:4d:48:90:
                    2c:c3:78:87:de:af:0e:ef:ec:19:47:d4:f8:98:b8:
                    87:6e:4a:da:c2:6f:3d:b5:a2:b8:c2:62:1c:dc:ff:
                    95:47:28:86:2c:f7:15:c6:a7:92:2b:1f:d6:c3:22:
                    be:c1:07:ef:83:9f:07:29:67:cd:92:06:e0:ab:7d:
                    af:50:d2:38:9b:90:ec:b1:23:9c:b5:15:de:27:b6:
                    55:23:ca:85:48:fe:48:12:32:38:53:98:ab:2e:3d:
                    a8:51:a7:cb:87:19:c1:70:33:54:3a:3a:35:af:ea:
                    05:64:87:9a:e0:96:ee:56:fc:10:fb:8c:cb:04:1d:
                    b4:67:33:95:d0:16:ac:95:41:81:51:f6:9f:80:d2:
                    d7:f5:c1:9c:fd:f6:72:70:fc:4a:ff:45:6e:48:38:
                    a8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E3:E0:BB:BC:DF:E6:50:75:57:9C:55:83:AE:7D:E6:57:D2:DA:68
            X509v3 Authority Key Identifier:
                keyid:C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:13:5d:f0:1f:cc:92:b3:d4:dd:2e:2d:6b:2f:f3:f4:21:52:
         83:80:52:de:bf:28:13:8c:f2:60:01:62:fc:64:f2:a6:c6:b0:
         e1:c1:53:ca:c1:f7:b4:cc:89:8d:18:3c:8c:1c:29:05:09:8f:
         41:84:6e:48:15:1c:ea:37:62:84:27:bc:b9:10:5e:a5:a9:51:
         35:69:d8:c7:9f:87:cf:bf:ff:51:0b:c2:77:69:1c:ac:41:4d:
         2b:60:d4:5f:16:64:98:f9:06:9b:6d:f7:4b:43:2c:0a:25:ee:
         b6:bb:7b:25:c7:af:ce:9f:67:58:a9:e7:f8:dd:c7:bf:86:48:
         b6:ac:a3:22:6c:ea:be:87:3f:e2:99:5d:66:18:71:ca:41:2b:
         49:23:97:51:25:b0:4f:38:2c:cb:c9:02:17:8b:6c:57:af:e1:
         50:ac:aa:da:0d:b7:81:b0:12:b2:b3:ba:f6:5d:44:a3:57:2e:
         bf:ec:3d:b7:ec:ff:ba:d8:c1:28:86:bb:88:67:2d:2f:a7:ee:
         98:e0:e7:9b:2e:00:92:21:bd:70:5b:ea:7f:8e:d2:ec:a7:12:
         5f:c4:16:08:a8:aa:bb:57:b3:48:1f:63:15:c9:5a:91:2d:03:
         aa:82:3a:40:a3:98:72:10:0f:cb:2e:ce:e8:a9:20:79:f4:1c:
         2c:f4:54:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:41:57 2026 by rpki-client