Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
File:                     wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft (raw, json)
Hash identifier:          jlmB7VUoCLe3jfUpytxKNMGFJvgA5f/+NgyoBYP3sl4=
Subject key identifier:   B3:CB:7A:46:6E:5E:D6:B2:99:08:55:0B:2E:BB:6A:39:D7:1D:CC:25
Authority key identifier: C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09
Certificate issuer:       /CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
Certificate serial:       019CACB5086A0204063EE8AD5EFEB68AFC10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
Manifest number:          04AE
Signing time:             Mon 02 Mar 2026 04:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:11 +0000
Files and hashes:         1: sESThJoImWepiHXICmCyiUQO13c.roa (hash: /EXA+hsAhf5yELjtFqrr5qslACb1l1qBz89KSCq1yVw=)
                          2: wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl (hash: jfwLBsIsGQEUSJQXZJeHb9Q9cJsnytdODc301jhZTgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:08:6a:02:04:06:3e:e8:ad:5e:fe:b6:8a:fc:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1497b4efdb8bcca5460d189d7618f6b8ac68b09
        Validity
            Not Before: Mar  2 04:01:11 2026 GMT
            Not After : Mar  3 04:01:11 2026 GMT
        Subject: CN=b3cb7a466e5ed6b29908550b2ebb6a39d71dcc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:51:21:c7:0a:53:0f:e6:4b:37:7a:7f:b9:ef:
                    b7:35:f8:fe:8f:07:d8:c7:0b:a0:7e:71:0c:e4:65:
                    d3:b0:c4:92:2f:81:5d:3e:24:1a:e3:dd:cd:af:f5:
                    74:21:ee:d2:94:33:b8:16:0a:b7:4b:72:89:ad:f2:
                    bc:ca:5c:7d:65:6d:b3:78:e6:09:88:90:52:60:71:
                    07:5c:0b:a6:48:ab:59:21:18:61:e7:13:84:43:bd:
                    1a:30:44:b0:02:c7:ae:1a:03:5d:f0:6b:44:7d:d7:
                    c5:08:ce:cf:a0:85:fe:31:f8:5e:a1:08:cd:78:ad:
                    63:bc:9b:7b:fb:fc:82:fe:6c:4a:56:6f:8f:c1:9e:
                    de:70:55:2a:47:0e:99:ac:18:d1:27:c6:19:fd:26:
                    78:d2:55:28:98:cc:3e:02:3c:4e:af:0f:67:16:2d:
                    99:a4:9d:87:c1:81:7a:32:a9:00:f5:ce:ea:5d:28:
                    b8:0d:59:de:8e:24:7c:69:be:32:35:ec:c4:95:f3:
                    ff:bd:eb:80:68:22:9e:58:35:75:71:2a:e6:26:eb:
                    0b:e5:cb:e1:eb:ee:da:d3:f3:38:a7:a9:55:c7:01:
                    1c:18:1b:f5:e6:89:9c:7d:f1:10:6c:03:ae:7f:f8:
                    61:9f:82:bf:52:e9:b6:ab:2f:55:0d:39:c6:0d:f1:
                    33:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CB:7A:46:6E:5E:D6:B2:99:08:55:0B:2E:BB:6A:39:D7:1D:CC:25
            X509v3 Authority Key Identifier:
                keyid:C1:49:7B:4E:FD:B8:BC:CA:54:60:D1:89:D7:61:8F:6B:8A:C6:8B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUl7Tv24vMpUYNGJ12GPa4rGiwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a81df9-e84e-4d94-ada9-c4cdec104667/1/wUl7Tv24vMpUYNGJ12GPa4rGiwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:29:29:ac:44:dc:82:c7:97:57:68:b0:c0:71:58:8d:60:06:
         77:63:dd:d9:00:4c:d7:e1:4d:8e:c0:b3:27:1c:27:ac:87:d1:
         65:df:7a:c6:8d:d4:a5:c8:a9:58:dc:4c:c1:c7:79:95:cc:6c:
         fc:86:be:e9:5c:15:3e:c4:6d:d8:39:a8:a3:bb:bc:b8:cd:20:
         28:08:3d:7d:e0:77:34:ec:24:7c:c2:7e:5d:b6:80:17:bd:51:
         02:30:f1:a3:cb:e0:9c:7d:cb:8a:2a:74:2a:5f:a2:7c:ef:c0:
         3d:ab:85:81:bc:13:bd:2b:a3:f6:87:d1:9c:ef:45:70:6f:06:
         4b:32:a1:eb:c9:90:90:5b:d3:2a:c3:16:60:4f:46:3e:90:00:
         d1:e3:6b:31:7a:c3:df:23:50:83:07:fb:fb:5d:8d:b1:44:b5:
         d6:49:25:b6:86:5c:78:66:53:20:9d:b9:a0:35:09:e7:42:da:
         af:61:2b:f8:85:45:1b:0e:0c:e6:54:65:36:0c:15:ee:1d:c0:
         cb:f7:c4:fc:d9:bc:18:29:fc:82:e0:7d:d5:7a:81:5b:d7:d2:
         e3:33:f9:e5:02:a8:04:92:42:7d:0e:37:71:82:a5:8f:9b:b3:
         50:c8:5d:78:2d:65:17:f2:24:e0:79:1d:b3:60:79:9a:2d:90:
         43:96:1f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:51 2026 by rpki-client