Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft
File:                     WvTebnPI4FPLZAt00rkSq9kLBYA.mft (raw, json)
Hash identifier:          nex88qWTmGAm5GG6PO3Md87WstGih3xt9B5hF+lqiIk=
Subject key identifier:   42:93:D3:9E:2A:AC:F9:36:CB:51:9A:EF:D7:87:4F:99:73:55:D2:53
Authority key identifier: 5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80
Certificate issuer:       /CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
Certificate serial:       019CAAC67B79F348FAC4F77CA8AE76C1EC9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 19:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:00 +0000
Files and hashes:         1: VC8NRBQFpiHlhRonZVIldhZGasE.roa (hash: n6eALs6Euv1KSbIitpCB0zQ5ftpmSt+HjVH1dtNV2eE=)
                          2: WvTebnPI4FPLZAt00rkSq9kLBYA.crl (hash: +4eNvDrJ6O0lU67XH7W8FSdt4sIyCD+gXzxCYdf+F0w=)
                          3: mSpE8WEFmSim1xWE3-vq18YaQIY.roa (hash: OpByS8eGeq0rAFISaOQbP6eTGU1KxTwqcjzlwXmx9Ns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:7b:79:f3:48:fa:c4:f7:7c:a8:ae:76:c1:ec:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af4de6e73c8e053cb640b74d2b912abd90b0580
        Validity
            Not Before: Mar  1 19:01:00 2026 GMT
            Not After : Mar  2 19:01:00 2026 GMT
        Subject: CN=4293d39e2aacf936cb519aefd7874f997355d253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:57:a1:f7:f4:e4:d1:cf:47:bd:d8:fa:c8:f8:
                    d3:37:df:5c:b8:56:b2:f6:d6:db:4f:08:eb:0e:08:
                    f4:56:a9:a0:9b:85:87:c0:0e:b6:a9:fc:47:7e:29:
                    f0:2c:ed:52:77:83:f8:23:43:75:ce:2c:e6:4e:92:
                    46:d9:e6:99:d6:13:14:f8:a6:76:ff:8f:47:54:6b:
                    f3:9d:df:93:a4:7b:d1:35:4a:3f:f0:1e:aa:0a:b2:
                    27:45:04:ba:8f:97:05:db:39:ce:0d:86:f3:5d:80:
                    f0:68:24:c7:b6:0e:db:9d:ec:85:aa:6a:c9:25:e0:
                    bb:4b:f6:5c:b0:87:f9:44:4e:63:19:61:f2:42:f0:
                    d4:7b:ad:6c:e2:7e:d0:a9:fd:8b:c1:5a:50:9f:d7:
                    3a:a2:4d:3a:29:59:f8:3c:8e:a7:fd:2b:ff:85:ab:
                    55:32:a4:16:62:43:ae:1f:27:44:d9:91:bf:57:ea:
                    b0:56:3c:f9:dc:dc:b7:ab:05:ab:01:47:56:fb:10:
                    66:da:7b:1a:cd:53:e0:ab:a5:27:4a:34:d6:c1:34:
                    60:05:3f:6c:50:22:93:5a:a9:f4:8a:06:87:06:c5:
                    e9:9e:db:f0:5c:e1:a3:b1:53:be:94:06:ef:bf:26:
                    e2:66:71:1d:bb:6d:09:7c:19:1e:a2:12:af:62:f6:
                    3f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:93:D3:9E:2A:AC:F9:36:CB:51:9A:EF:D7:87:4F:99:73:55:D2:53
            X509v3 Authority Key Identifier:
                keyid:5A:F4:DE:6E:73:C8:E0:53:CB:64:0B:74:D2:B9:12:AB:D9:0B:05:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvTebnPI4FPLZAt00rkSq9kLBYA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ad3696-f36f-4df0-b2de-c1e9362b1a51/1/WvTebnPI4FPLZAt00rkSq9kLBYA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:42:1c:62:fc:ab:64:ff:9b:82:f5:43:74:cf:8b:d8:6e:
         2a:50:87:8e:53:9b:eb:3f:4c:93:b1:2c:8d:b3:ca:e1:1d:d9:
         55:34:00:0e:52:30:e4:b8:ab:09:9f:b5:52:5a:9e:17:7a:37:
         02:98:b1:7b:82:30:fb:fe:e0:b3:42:a3:dd:56:bb:a4:9c:0e:
         80:06:0f:93:51:3d:d5:e7:e0:65:a8:da:3e:d2:e9:64:dd:00:
         8f:20:01:f7:09:1c:a0:af:d8:ec:5a:60:6b:9c:88:b5:f5:34:
         ea:a1:4e:1a:53:2a:6a:60:7f:c9:b3:bd:57:31:d8:e6:4d:d0:
         76:b2:c8:0c:63:76:09:28:58:4e:fe:a2:45:58:51:d6:d1:0a:
         59:7c:c5:68:6e:92:fb:69:b2:77:96:32:93:3e:c9:bd:39:a3:
         be:0d:ab:6e:b1:40:13:14:da:94:0e:d2:56:87:a9:9d:e5:f6:
         cc:7f:65:c1:5b:67:3d:9c:d8:cf:03:93:9b:54:26:a8:72:ca:
         ef:9c:ec:09:66:03:20:59:a2:6c:97:2f:85:9e:8e:f4:e7:96:
         b2:13:3c:e5:d5:10:12:91:43:53:e2:e7:53:85:5f:86:6e:88:
         00:c3:04:6a:43:e9:00:bc:7a:34:20:05:bb:b7:90:8a:b1:d3:
         06:c9:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:28 2026 by rpki-client