Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File:                     wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier:          cXOo1sgvQC3sI6J3nmXubnlCsMkhk7CXEj1S97RyE74=
Subject key identifier:   0C:3D:15:32:ED:BE:87:B4:2B:40:CA:BC:90:AE:A6:C5:66:CA:8D:E6
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer:       /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial:       019D99D042CF21413FEC05697C2178B17910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number:          0D3A
Signing time:             Fri 17 Apr 2026 05:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:55 +0000
Files and hashes:         1: uRKhnVnG5ahcONCLHxTMtWvrhtc.roa (hash: UA0ILSRoJWCUIQSmovc4YSm+7GF2eZguJHjrv0XpnQU=)
                          2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: ZmAJImD73Q3UNsyrRAmbg2AeBaUJpa9h9WyTiY4HJ1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:42:cf:21:41:3f:ec:05:69:7c:21:78:b1:79:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
        Validity
            Not Before: Apr 17 05:00:55 2026 GMT
            Not After : Apr 18 05:00:55 2026 GMT
        Subject: CN=0c3d1532edbe87b42b40cabc90aea6c566ca8de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:ab:02:16:2d:ff:48:ff:0a:95:da:b8:a9:
                    b9:ca:8d:fc:31:b6:ad:57:c7:98:5b:c4:2a:65:b9:
                    90:ec:94:cd:08:b2:9e:fb:92:e6:21:fa:56:ad:c5:
                    ac:80:74:ec:6c:9b:2c:b4:22:74:90:dc:f8:93:9b:
                    75:bc:87:dc:9f:f1:53:33:94:d4:c5:36:6e:81:39:
                    ca:04:69:11:c2:1b:21:c5:ca:f9:fd:d3:08:1e:3d:
                    5f:5a:9c:72:5d:67:ea:34:39:e3:b6:87:36:df:82:
                    41:8e:5d:e9:0b:24:cf:ea:fe:59:98:8a:93:71:31:
                    03:98:ab:a4:28:60:5a:85:6a:7b:01:f5:ab:d0:53:
                    91:0b:f3:f8:32:2c:48:54:22:6a:22:b7:e9:e9:f6:
                    c1:7c:78:6d:40:0c:6e:c5:62:5e:1e:ac:6f:ec:de:
                    91:e2:b8:f0:5c:9f:86:61:cd:cb:b0:06:d9:82:21:
                    be:b1:3d:6e:ca:4c:30:12:9a:54:e1:91:c5:52:dc:
                    ec:ce:95:7f:a5:71:ba:bb:63:0f:3f:72:ce:db:b1:
                    16:ee:1b:2b:4e:34:d9:80:7b:63:20:80:02:ef:82:
                    1c:55:2f:13:fd:b1:f7:f6:09:6b:19:92:c1:df:05:
                    dd:c3:92:f1:3e:cc:1f:65:ae:8f:9f:11:8f:8d:02:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3D:15:32:ED:BE:87:B4:2B:40:CA:BC:90:AE:A6:C5:66:CA:8D:E6
            X509v3 Authority Key Identifier:
                keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:37:f7:2e:d8:05:01:58:2b:c4:f9:5d:c6:85:8c:f7:c3:
         3d:97:93:82:1c:f4:00:1d:8d:9d:3f:88:21:28:a2:01:7e:e6:
         0b:db:d1:ef:3d:32:19:bc:d2:73:73:37:75:b8:7a:64:d7:6f:
         5f:ef:9e:87:25:43:a5:5e:b8:60:11:89:1e:5f:2a:16:14:1d:
         b7:b7:15:6a:d3:49:45:3d:b7:e3:d4:6e:35:e3:69:aa:56:cf:
         59:f0:cc:4d:1b:9a:93:07:1d:b3:ef:37:f3:84:7b:4d:ff:4a:
         9d:7a:b6:c4:d2:91:69:0f:fa:0d:e8:d2:da:b0:65:0d:f3:0c:
         a4:12:d2:63:88:29:4e:38:27:18:b0:ff:a5:0b:10:df:31:77:
         50:26:03:41:d6:f1:37:1b:86:98:6f:7d:07:e5:be:32:f2:3c:
         7e:cb:13:69:b0:a8:47:2e:7d:69:30:f7:3b:d0:56:d6:2a:36:
         e1:a9:2d:e5:18:03:1c:1c:05:c3:75:2f:55:40:8e:96:15:bb:
         2e:e9:dd:95:06:42:89:fc:f8:67:26:c0:f7:77:4b:d0:90:e4:
         23:aa:d8:ef:d9:97:d9:a0:2c:7d:0b:13:d6:61:04:38:8c:37:
         ce:76:4f:2a:8e:5e:75:34:5b:a6:61:a8:bf:0f:d0:bb:83:d4:
         33:e4:e9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:47:02 2026 by rpki-client