Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
File:                     ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json)
Hash identifier:          MuC4bNmGe9lkFtrezedrJwYGRyqvmbFvoZ8kgYB2kkw=
Subject key identifier:   96:9F:88:A2:9D:A5:C9:82:CB:DA:71:56:F8:5E:82:5C:D8:D5:37:4A
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Certificate issuer:       /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial:       019CAD90C617D519A609902FCECB3FCAB447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
Manifest number:          06B0
Signing time:             Mon 02 Mar 2026 08:01:12 +0000
Manifest this update:     Mon 02 Mar 2026 08:01:12 +0000
Manifest next update:     Tue 03 Mar 2026 08:01:12 +0000
Files and hashes:         1: gcIF_hdGqJ7_cAl4qBgM1TlFs_g.roa (hash: lNPpPOHEC/zdLkM4NKZLlqoEpC2gYzrZ7YoVYNwOZZs=)
                          2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: NRzWmEWoWZnTHgoBUmeod9BElMic0v4+jJNyIN2gdak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:c6:17:d5:19:a6:09:90:2f:ce:cb:3f:ca:b4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
        Validity
            Not Before: Mar  2 08:01:12 2026 GMT
            Not After : Mar  3 08:01:12 2026 GMT
        Subject: CN=969f88a29da5c982cbda7156f85e825cd8d5374a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:ee:91:26:77:8e:09:16:e5:84:3f:24:e5:
                    3a:5f:ce:97:e3:72:3b:6e:0a:59:e8:02:8e:f9:ec:
                    78:fb:72:1f:19:f8:0f:4b:56:9f:d8:6c:d6:77:ec:
                    d6:54:cd:1e:1f:48:a2:01:d6:cc:f9:07:73:75:25:
                    28:a7:3b:74:e3:be:f3:0a:e0:f9:cc:42:ee:13:c2:
                    1a:d5:d4:43:20:fa:ec:77:83:14:c9:e8:f9:14:12:
                    67:e0:31:88:c4:49:7c:1e:0f:a6:62:dc:d7:77:bd:
                    18:4d:93:d6:b2:9d:4c:da:a1:27:64:2f:b9:0b:22:
                    69:d3:5b:c4:34:6d:4e:98:a9:4d:e0:55:37:53:d2:
                    7c:1f:e4:29:96:cb:7f:72:44:89:eb:3f:0e:b9:a2:
                    e4:1f:c1:da:3c:4e:a6:7b:34:63:33:dd:9d:a4:17:
                    16:70:0d:0c:46:a9:43:e8:0a:59:31:f4:c6:81:25:
                    a9:4e:84:44:35:bc:3a:f9:4a:b7:06:f4:a8:1f:3e:
                    04:98:52:53:69:38:fd:73:90:98:59:55:b7:53:28:
                    9e:37:9a:c7:26:58:e6:e9:57:ab:8c:73:d1:5e:58:
                    ad:e2:19:43:d2:46:7f:3b:22:7d:62:51:be:5e:71:
                    90:52:8d:89:67:44:6d:3f:7a:b5:31:4f:ec:dd:2c:
                    1f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9F:88:A2:9D:A5:C9:82:CB:DA:71:56:F8:5E:82:5C:D8:D5:37:4A
            X509v3 Authority Key Identifier:
                keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:84:d2:b1:87:51:4a:62:72:3f:5a:36:34:37:3a:b4:e7:8b:
         35:be:46:92:ef:57:5e:73:b1:d8:f5:3b:39:9b:fd:fb:c7:9b:
         dc:3d:d3:5e:3b:de:2b:a3:30:ab:30:5a:ca:56:fd:73:3d:48:
         4d:06:1a:b8:b2:1e:2f:f0:fc:2d:83:cc:c2:8f:c9:59:da:65:
         d4:e7:88:22:b5:a7:d8:ca:98:73:19:4c:f3:0f:30:62:fb:aa:
         57:ea:e3:c6:fe:30:39:95:c6:f0:f5:90:53:9b:74:5c:05:05:
         54:ab:67:f7:73:41:db:3b:25:29:12:22:19:2f:2f:8e:13:31:
         23:d2:4f:57:36:df:10:cc:6d:0b:41:24:ac:ca:7f:c8:5a:2c:
         fc:20:01:c6:e1:79:09:ee:f3:74:2b:99:1b:df:06:1c:a7:7f:
         58:02:61:12:7c:45:af:d5:49:75:2e:6a:cb:28:66:92:5d:cf:
         de:54:bf:38:9a:fb:72:45:42:43:71:74:ad:d5:26:96:31:23:
         20:c8:31:08:69:3c:2d:9e:30:e8:62:86:03:b7:3b:09:90:20:
         f1:88:54:c4:e9:ab:01:61:cb:55:92:03:45:f3:7e:4a:9d:1b:
         12:54:a0:9c:cf:97:1e:b7:5d:ca:cf:df:d4:f9:f0:e4:69:70:
         23:c9:bf:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:08:04 2026 by rpki-client