Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File:                     wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier:          pZdGHA8zjkOAQvGoP62QEKC6sP8l8iE+uvZjpoV3MvA=
Subject key identifier:   C0:21:FA:B9:A1:16:71:CE:04:E8:D3:D6:A1:27:D9:54:BA:91:49:7A
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer:       /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial:       019CAD5A31CCFA89727D994251CB75CC06AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number:          0F3B
Signing time:             Mon 02 Mar 2026 07:01:35 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:35 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:35 +0000
Files and hashes:         1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: Nq/V7PI2+Lgug/F7oc/P32DOs7457KARv3DU84N6TbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:5a:31:cc:fa:89:72:7d:99:42:51:cb:75:cc:06:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
        Validity
            Not Before: Mar  2 07:01:35 2026 GMT
            Not After : Mar  3 07:01:35 2026 GMT
        Subject: CN=c021fab9a11671ce04e8d3d6a127d954ba91497a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ae:be:40:70:a6:cc:6c:04:cf:67:39:8f:39:
                    48:c3:c3:2b:1a:8c:40:24:15:10:20:69:34:39:1a:
                    0f:7f:64:20:35:cb:8e:0a:72:e3:ad:5b:6e:78:f8:
                    71:64:ab:d7:f2:22:69:33:d0:8e:b3:79:02:32:2e:
                    bf:3c:66:c4:a9:37:5c:76:c0:37:3b:2e:29:c0:e1:
                    21:34:1c:23:49:bb:0c:54:29:4a:dd:60:18:3f:bf:
                    de:21:7f:a2:04:19:44:20:4f:4f:d6:1b:75:ca:48:
                    e5:28:25:3d:ed:3e:7b:48:45:b0:7e:ef:a1:75:3c:
                    27:d0:10:9a:c4:21:ba:f0:1e:14:43:bb:e6:2d:7d:
                    2f:e1:75:02:33:3f:0c:04:9b:24:57:7e:ef:d4:e7:
                    1e:58:a6:55:2a:c8:5e:e6:10:19:0b:44:34:8e:22:
                    56:bc:44:2c:6c:44:25:a4:27:fe:d9:39:9b:dd:a4:
                    96:8b:24:3e:82:1f:8b:21:1a:b5:41:9a:51:24:29:
                    fd:2a:fb:64:0a:39:6c:fd:97:f2:aa:65:e5:8a:5b:
                    97:5a:3f:42:bc:22:d4:e5:d8:d2:5b:0f:c6:83:b2:
                    e7:a4:64:87:72:23:e2:ec:03:33:11:08:14:22:46:
                    f1:a3:d8:6a:7a:9f:dc:76:6d:63:2f:a3:56:43:0f:
                    b2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:21:FA:B9:A1:16:71:CE:04:E8:D3:D6:A1:27:D9:54:BA:91:49:7A
            X509v3 Authority Key Identifier:
                keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:77:50:6a:e6:57:72:24:db:5e:19:73:30:2c:0e:40:57:50:
         d8:79:ae:45:0a:21:c5:40:17:17:1b:a8:5e:51:db:51:d7:2e:
         38:fa:cd:cf:53:77:1c:11:22:bc:8e:0c:60:4c:3b:91:f8:65:
         62:78:7d:93:ba:ca:e5:69:3e:e1:ac:1c:04:9f:26:10:63:15:
         65:07:0e:bd:91:c2:0b:6f:74:6b:6c:dc:96:14:65:9a:8f:44:
         d8:09:0c:5b:3d:ea:cf:ff:08:4c:2a:33:8e:22:b6:ed:e5:d3:
         57:0a:01:fe:b3:fc:e6:79:50:b1:da:70:38:ed:28:d8:88:0b:
         20:06:02:2c:ee:ba:1b:f5:02:85:f1:ee:2d:ed:e1:b8:69:04:
         11:1a:81:ba:97:ef:db:7f:00:54:b9:95:2e:5b:9a:83:3d:d5:
         c4:85:0a:b3:9a:36:15:cf:39:ab:b5:81:b7:87:3a:d1:c8:62:
         bb:28:51:26:ae:02:27:56:be:02:fc:be:13:b7:db:42:cb:49:
         d3:a9:ac:5e:28:d6:95:6a:00:bc:da:dd:79:2d:7e:84:01:7e:
         4b:a2:64:e6:5a:30:da:40:05:cf:4f:4a:d9:13:cd:51:5c:4b:
         5d:0b:a9:a8:82:16:d3:f4:f0:f6:c7:93:21:8a:14:30:45:f7:
         ec:47:d2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:35 2026 by rpki-client