Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File:                     WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier:          Z96Cspd/LPYtVo0TWVI/kgg2h8V+Hjfh73rwcPelrfY=
Subject key identifier:   51:D3:E0:3C:56:38:F7:BA:34:4E:DD:4B:A9:D9:28:19:43:34:CD:32
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer:       /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial:       019CAF113165A68490345673AD6B87C73000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number:          0A27
Signing time:             Mon 02 Mar 2026 15:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 15:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 15:01:05 +0000
Files and hashes:         1: 9Wfw7dNgON3Iv-f4gZLKJwmqfdk.roa (hash: VxggZehfP0xQ0L6heJyDzgszhdPfd2ExPOVBUF5TwOE=)
                          2: GsroAK5IWq3NdNiW9BwK5WuY-VE.roa (hash: H3yE7psnQWokNhBsDlT4htqiP5CFlu91pIZ4Z5Ln4rg=)
                          3: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: 0T6zrCaRzePAymCS4lLayD2/dAcp2mfoUszp/OzUhe8=)
                          4: hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa (hash: iKpwOj9nTc417SKhdao7QMWeIdAHHJ1ZRWb6QVPeswk=)
                          5: hT5gh2FKGh6IG9dmw-QznV50n6I.roa (hash: W5X/W4lZOgN4/2A3moguGVvki8jP+tJhJCN4aT+0thA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:af:11:31:65:a6:84:90:34:56:73:ad:6b:87:c7:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
        Validity
            Not Before: Mar  2 15:01:05 2026 GMT
            Not After : Mar  3 15:01:05 2026 GMT
        Subject: CN=51d3e03c5638f7ba344edd4ba9d928194334cd32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2c:cb:a9:2b:6b:20:73:29:35:04:8d:59:c1:
                    a5:1c:0e:33:f5:71:ee:b2:aa:aa:f4:aa:ea:5a:d1:
                    37:7a:c2:c2:b1:1c:ff:ce:4f:95:84:a6:7b:5b:f6:
                    3d:76:e7:5b:7f:b3:26:7c:84:18:69:bb:79:b0:6b:
                    ba:7f:57:d3:f7:15:c6:31:55:6e:8c:6f:4f:92:99:
                    ca:d9:97:cf:a2:53:79:d1:e2:bb:1c:ed:85:13:0a:
                    1d:38:e8:12:3c:02:83:31:ad:f2:9e:9d:ec:70:17:
                    96:6d:0c:71:d5:8f:3a:65:ba:5e:ba:0b:ec:16:46:
                    c7:d8:c8:50:42:7b:7d:95:e8:32:c2:f6:a3:ee:01:
                    a9:a7:32:e9:67:93:02:89:01:d7:c3:14:e7:37:a4:
                    0d:a4:c3:e9:00:aa:66:de:20:b9:48:83:8f:6b:43:
                    93:e9:af:c2:29:b6:cc:a3:ba:2c:f9:2d:87:78:fa:
                    c6:60:8c:2a:69:01:5f:fe:0f:64:05:9c:65:8b:7d:
                    18:14:b2:e8:a7:d2:ce:08:9a:f7:08:76:e8:90:26:
                    c2:31:15:02:a8:1d:0b:61:75:e8:d0:22:6b:61:3b:
                    12:ef:f9:bb:46:db:54:92:60:6b:ed:df:76:60:d2:
                    7d:ae:d7:4d:ab:64:fd:41:a4:1d:08:73:73:b8:e5:
                    f0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D3:E0:3C:56:38:F7:BA:34:4E:DD:4B:A9:D9:28:19:43:34:CD:32
            X509v3 Authority Key Identifier:
                keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:66:3c:74:25:58:17:63:27:da:51:73:77:1e:d7:2a:cf:a0:
         35:68:f2:5e:38:cc:9c:3c:9b:ae:2e:9a:ba:b0:14:6f:14:8c:
         f6:ab:e0:b7:12:ee:6b:40:eb:3d:31:65:59:9b:58:fd:16:58:
         fa:6c:e6:aa:76:33:86:dc:a5:1a:69:83:0e:14:ca:e0:fd:cd:
         64:c7:98:65:40:f1:67:e1:e0:68:0f:80:a5:76:f5:c1:cc:28:
         51:a7:6c:84:b7:5c:90:ad:5e:12:28:ab:51:0c:fc:14:f4:8e:
         09:32:7b:5f:fd:8c:50:97:37:03:4c:3c:00:d3:f1:79:e3:f9:
         58:93:4b:5d:29:90:be:6d:54:08:26:03:85:d8:0f:1f:a3:78:
         bd:bb:2d:2a:7e:9a:27:12:fe:4f:92:56:aa:a1:79:12:3d:95:
         77:05:ad:f2:e4:c8:fc:90:dc:57:2c:0b:fe:9c:fd:a0:d4:15:
         16:7c:a1:15:56:ce:21:48:63:16:66:f5:55:98:5d:ff:90:4c:
         af:fd:e8:60:ca:bd:ed:9f:7a:f7:49:10:c5:14:f1:4f:0d:04:
         21:0b:76:9b:33:65:c9:56:3f:93:f5:c9:c8:10:14:5c:28:75:
         e4:2a:9f:da:a6:93:6b:14:a8:46:33:18:fb:06:0d:7e:8b:9f:
         9c:d8:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:13 2026 by rpki-client