Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
File:                     fWjefEcC_lCTLX7NovJ4OR9Lms4.mft (raw, json)
Hash identifier:          WYJ+omrd+dAsRdn6OoqE38dX0olQ94BLGABQ/MuVTo0=
Subject key identifier:   64:33:8D:6E:B7:DF:0C:64:3D:A6:31:0E:A1:F3:D8:6A:65:1D:6B:B7
Authority key identifier: 7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE
Certificate issuer:       /CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
Certificate serial:       019CABD9D4E6A04B5C817FBC6BD7199FB416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
Manifest number:          07B5
Signing time:             Mon 02 Mar 2026 00:01:45 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:45 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:45 +0000
Files and hashes:         1: fWjefEcC_lCTLX7NovJ4OR9Lms4.crl (hash: Bg9vGIv6ARmI2tzPt1Fzs3O3np9E3byBkdrNz9p+iI4=)
                          2: prR3St_T-JCudPoZgk4y2vYURI8.roa (hash: 1HOWJUzi0cuRKIHRjrvVgn5q7O99JRjdWW0TYvqs9a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:d4:e6:a0:4b:5c:81:7f:bc:6b:d7:19:9f:b4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d68de7c4702fe50932d7ecda2f278391f4b9ace
        Validity
            Not Before: Mar  2 00:01:45 2026 GMT
            Not After : Mar  3 00:01:45 2026 GMT
        Subject: CN=64338d6eb7df0c643da6310ea1f3d86a651d6bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:35:ad:1f:b9:57:24:cd:56:c1:1e:b6:a0:06:
                    56:c6:de:50:13:bf:50:05:2f:c4:a1:65:01:4c:8b:
                    56:93:2f:e8:e8:f3:35:e6:b6:64:78:0d:19:f7:27:
                    b6:ec:a5:02:1d:df:42:2d:55:c1:ea:d4:d1:ee:b0:
                    8c:f8:09:e6:bd:be:33:3a:24:be:c3:ab:5c:32:31:
                    e5:1f:aa:07:16:47:41:84:ec:e5:9c:47:63:87:35:
                    c7:e9:08:9c:db:56:4e:72:44:b1:ae:73:28:d2:52:
                    9f:bb:1b:25:3d:98:55:88:ba:39:0b:94:61:f3:2e:
                    1b:3f:21:cb:2b:e2:2e:3d:81:d7:54:6b:6d:f1:30:
                    64:ef:52:86:30:3d:9b:a4:88:fa:6e:5a:bd:39:32:
                    40:a9:f1:6b:08:d2:56:cb:e5:35:47:11:41:90:05:
                    dc:3c:a9:bf:2f:13:ac:ef:18:9a:f8:76:89:57:4a:
                    ae:57:cc:de:50:08:3a:df:99:47:b0:b2:c1:14:d7:
                    26:f0:28:84:6a:12:6e:24:8e:b6:b9:6a:0e:8f:92:
                    d2:9d:ff:ca:50:4a:66:fd:cd:b9:b0:e7:52:fc:c7:
                    75:87:89:ef:40:a0:7e:c5:74:ff:e9:ca:d4:4f:b4:
                    ea:84:ca:05:f0:a4:40:04:ce:d7:f9:d6:98:0b:2e:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:33:8D:6E:B7:DF:0C:64:3D:A6:31:0E:A1:F3:D8:6A:65:1D:6B:B7
            X509v3 Authority Key Identifier:
                keyid:7D:68:DE:7C:47:02:FE:50:93:2D:7E:CD:A2:F2:78:39:1F:4B:9A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fWjefEcC_lCTLX7NovJ4OR9Lms4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/82be99-5195-4774-8254-0c0246c6f623/1/fWjefEcC_lCTLX7NovJ4OR9Lms4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:93:15:c0:83:47:01:e6:9c:54:c6:e6:9d:11:6c:69:0c:6f:
         5f:4c:56:ef:1c:98:18:5f:ea:5f:12:fb:a6:b7:f0:de:01:3f:
         5e:13:0b:ff:d2:b5:16:85:54:26:74:de:7c:71:27:ae:fc:1e:
         08:73:ac:42:fd:57:c8:38:c3:c8:02:db:d9:2f:75:cf:83:dc:
         f9:81:77:84:dc:fc:bf:9d:df:47:ff:fa:01:e1:09:1f:a1:77:
         c5:f2:9a:dd:1f:7e:b9:7d:fd:27:03:b8:c2:d6:9a:f8:61:3d:
         96:de:8a:64:ee:aa:32:35:ab:06:ea:92:fc:c1:8b:53:d3:ad:
         2a:68:5e:b2:15:47:10:84:d0:20:1f:d0:58:f9:0b:2b:58:5a:
         7b:15:ef:b6:27:a1:4f:3c:58:89:bd:f2:3e:a8:3e:38:70:38:
         15:01:3e:20:9c:c7:63:68:60:a7:d0:77:fe:cd:29:0a:d1:d5:
         35:5d:6b:ac:a6:7c:48:e4:6a:19:1a:c5:98:dc:e5:aa:e9:dc:
         cd:12:ee:cd:30:fd:a3:f5:97:c4:2d:d5:e4:23:9e:c0:35:2d:
         56:72:f1:a3:a1:7b:46:e3:89:45:51:a8:64:e1:f1:43:df:8b:
         07:d9:78:4d:8a:f5:e6:51:59:cb:eb:a6:2e:89:39:6e:22:76:
         96:01:c6:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2dTmoEtcgX+8a9cZn7QWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNjhkZTdjNDcwMmZlNTA5MzJkN2VjZGEyZjI3ODM5MWY0
YjlhY2UwHhcNMjYwMzAyMDAwMTQ1WhcNMjYwMzAzMDAwMTQ1WjAzMTEwLwYDVQQD
Eyg2NDMzOGQ2ZWI3ZGYwYzY0M2RhNjMxMGVhMWYzZDg2YTY1MWQ2YmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDWtH7lXJM1WwR62oAZWxt5QE79Q
BS/EoWUBTItWky/o6PM15rZkeA0Z9ye27KUCHd9CLVXB6tTR7rCM+Anmvb4zOiS+
w6tcMjHlH6oHFkdBhOzlnEdjhzXH6Qic21ZOckSxrnMo0lKfuxslPZhViLo5C5Rh
8y4bPyHLK+IuPYHXVGtt8TBk71KGMD2bpIj6blq9OTJAqfFrCNJWy+U1RxFBkAXc
PKm/LxOs7xia+HaJV0quV8zeUAg635lHsLLBFNcm8CiEahJuJI62uWoOj5LSnf/K
UEpm/c25sOdS/Md1h4nvQKB+xXT/6crUT7TqhMoF8KRABM7X+daYCy4P4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQzjW633wxkPaYxDqHz2GplHWu3MB8GA1UdIwQY
MBaAFH1o3nxHAv5Qky1+zaLyeDkfS5rOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQt
MGMwMjQ2YzZmNjIzLzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84MmJlOTktNTE5NS00Nzc0LTgyNTQtMGMwMjQ2YzZmNjIz
LzEvZldqZWZFY0NfbENUTFg3Tm92SjRPUjlMbXM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpMVwINH
AeacVMbmnRFsaQxvX0xW7xyYGF/qXxL7prfw3gE/XhML/9K1FoVUJnTefHEnrvwe
CHOsQv1XyDjDyALb2S91z4Pc+YF3hNz8v53fR//6AeEJH6F3xfKa3R9+uX39JwO4
wtaa+GE9lt6KZO6qMjWrBuqS/MGLU9OtKmheshVHEITQIB/QWPkLK1haexXvtieh
TzxYib3yPqg+OHA4FQE+IJzHY2hgp9B3/s0pCtHVNV1rrKZ8SORqGRrFmNzlqunc
zRLuzTD9o/WXxC3V5COewDUtVnLxo6F7RuOJRVGoZOHxQ9+LB9l4TYr15lFZy+um
Lok5biJ2lgHGpQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:02:44 2026 by rpki-client