Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
File:                     WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft (raw, json)
Hash identifier:          2yUx4zLyeW/ypK7MH5Hx1WWJZ5OjwEFjYfGroqcNq0s=
Subject key identifier:   10:4D:31:36:DA:AF:25:93:65:97:14:41:39:EC:35:16:FE:40:1F:BF
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Certificate issuer:       /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial:       019CABA25C782692CD2FCF725D75A673CBEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
Manifest number:          184B
Signing time:             Sun 01 Mar 2026 23:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 23:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 23:01:10 +0000
Files and hashes:         1: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl (hash: PqPSMu3mWL2JqhXFxk65247wAJayIuhwCElujCcH2wM=)
                          2: aM3jDyUSBlPTCNMfpXY5YwnPsA8.roa (hash: jUnTNL0+v3OE/gFOXVeP3LxsqBN3nJHAQLUeEsSvDk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:5c:78:26:92:cd:2f:cf:72:5d:75:a6:73:cb:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
        Validity
            Not Before: Mar  1 23:01:10 2026 GMT
            Not After : Mar  2 23:01:10 2026 GMT
        Subject: CN=104d3136daaf25936597144139ec3516fe401fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:01:42:37:12:64:9d:34:bb:40:97:f8:65:
                    74:43:80:35:57:0f:ca:54:7c:0a:f4:b2:64:26:c9:
                    c3:3d:91:30:85:ba:ee:a4:42:d1:80:10:86:ae:4d:
                    87:fe:95:5f:20:51:d9:19:ce:b1:d1:fa:ea:84:bc:
                    39:1e:c5:bf:e4:42:51:5a:68:5a:42:b7:4e:15:e6:
                    71:50:6d:47:b1:b2:14:00:1a:2d:c3:20:98:1c:6f:
                    c7:59:1a:4c:5a:e9:a3:dd:8f:d5:83:1b:53:54:52:
                    38:be:99:ee:cd:e5:d5:4a:52:ba:ba:a1:a6:23:b5:
                    a2:f9:b6:ea:b7:01:7c:57:63:6a:c0:eb:23:d3:60:
                    0b:64:eb:75:84:60:e0:12:25:43:35:e8:f8:b9:1e:
                    c1:bf:44:d5:96:e5:50:1e:91:7b:7d:6d:c8:f8:fe:
                    64:f7:91:d5:a6:07:8f:51:be:6b:df:b2:a6:2e:35:
                    72:a1:4d:ee:6e:2a:5b:cd:94:59:f7:06:ae:de:3b:
                    30:f3:ca:23:9d:5a:f8:ec:4d:6a:e0:af:c6:9f:5c:
                    42:43:93:9d:ec:91:d6:3a:01:33:53:c6:21:59:14:
                    a1:c9:d2:92:e6:0d:60:2d:f0:1a:3d:eb:39:bf:25:
                    3f:5a:88:5a:cc:c5:5c:1b:0d:fb:cb:48:7d:9c:e9:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4D:31:36:DA:AF:25:93:65:97:14:41:39:EC:35:16:FE:40:1F:BF
            X509v3 Authority Key Identifier:
                keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:41:26:a7:1c:c2:7e:a1:23:58:55:0b:00:3c:0c:0a:ae:04:
         88:17:14:44:b6:d1:a1:6b:fa:8d:5a:f4:33:15:99:ad:d4:f5:
         69:ad:1f:03:3f:a5:fa:db:8b:35:03:dd:00:01:0f:24:df:f0:
         fd:28:86:7f:96:38:14:59:1f:00:54:65:f0:e0:ab:d1:32:55:
         ee:33:9e:f0:71:a1:98:24:c0:17:b1:7a:7a:c9:8a:21:6b:96:
         19:d9:df:b5:c4:f6:a3:6f:b1:d7:3b:60:28:f9:26:27:81:92:
         86:78:82:ce:5f:90:a3:23:25:69:95:3e:7d:80:7a:95:15:d7:
         84:85:01:0d:7c:71:b9:47:09:bd:73:1c:52:37:25:d5:6f:e9:
         31:77:29:97:0f:85:1a:40:e8:47:10:3d:b3:6b:57:7a:28:37:
         df:0e:0d:f9:1d:ca:49:65:22:25:c8:c7:95:2a:9e:8c:9e:99:
         90:3b:d7:76:6e:ee:2c:47:a7:02:28:4e:1d:6b:85:24:3d:a9:
         fb:9e:dc:e1:d9:f0:88:60:92:74:52:27:95:31:e5:0a:ca:ed:
         67:f7:c0:0b:e1:02:eb:43:8e:3f:7b:bf:93:16:41:d1:30:62:
         95:37:d3:14:81:24:60:ef:f8:5b:ac:92:97:8d:95:7b:fc:26:
         a7:ef:3b:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrolx4JpLNL89yXXWmc8vqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NzE3MjBhODg4NDE2N2ZlZjgyYTQ5MjY3NjYxZmIzNDZk
NzU2MWEwHhcNMjYwMzAxMjMwMTEwWhcNMjYwMzAyMjMwMTEwWjAzMTEwLwYDVQQD
EygxMDRkMzEzNmRhYWYyNTkzNjU5NzE0NDEzOWVjMzUxNmZlNDAxZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWoBQjcSZJ00u0CX+GV0Q4A1Vw/K
VHwK9LJkJsnDPZEwhbrupELRgBCGrk2H/pVfIFHZGc6x0frqhLw5HsW/5EJRWmha
QrdOFeZxUG1HsbIUABotwyCYHG/HWRpMWumj3Y/VgxtTVFI4vpnuzeXVSlK6uqGm
I7Wi+bbqtwF8V2NqwOsj02ALZOt1hGDgEiVDNej4uR7Bv0TVluVQHpF7fW3I+P5k
95HVpgePUb5r37KmLjVyoU3ubipbzZRZ9wau3jsw88ojnVr47E1q4K/Gn1xCQ5Od
7JHWOgEzU8YhWRShydKS5g1gLfAaPes5vyU/WohazMVcGw37y0h9nOk3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBNMTbaryWTZZcUQTnsNRb+QB+/MB8GA1UdIwQY
MBaAFFhxcgqIhBZ/74KkkmdmH7NG11YaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYt
N2RhODljZGE5ZjcxLzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYtN2RhODljZGE5Zjcx
LzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0EmpxzC
fqEjWFULADwMCq4EiBcURLbRoWv6jVr0MxWZrdT1aa0fAz+l+tuLNQPdAAEPJN/w
/SiGf5Y4FFkfAFRl8OCr0TJV7jOe8HGhmCTAF7F6esmKIWuWGdnftcT2o2+x1ztg
KPkmJ4GShniCzl+QoyMlaZU+fYB6lRXXhIUBDXxxuUcJvXMcUjcl1W/pMXcplw+F
GkDoRxA9s2tXeig33w4N+R3KSWUiJcjHlSqejJ6ZkDvXdm7uLEenAihOHWuFJD2p
+57c4dnwiGCSdFInlTHlCsrtZ/fAC+EC60OOP3u/kxZB0TBilTfTFIEkYO/4W6yS
l42Ve/wmp+87TQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:05 2026 by rpki-client