Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
File:                     wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft (raw, json)
Hash identifier:          J7idNjWgBROk2bdewMeCCCMkGJyoSaONwrGlUF7RYFo=
Subject key identifier:   67:1F:CC:CE:40:64:86:EE:A2:95:04:A9:30:08:FF:F9:71:D2:F4:F7
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Certificate issuer:       /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial:       019CAAFD19D7622F95698A3DEBB573FEB5A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 20:00:39 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:39 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:39 +0000
Files and hashes:         1: CuOUP7K5FFs9hp6Y2PT6u5JckCo.roa (hash: ZsAGggLHZ5c9tfsaL3W8Tzgr18wNOwRPUVw/KIp0Zec=)
                          2: UTrB-eqS9W6US57i4mIaxwF_LT4.roa (hash: /qJvylYZag2Wv3AD9lsMVc7eYv0lH1eOQvu0T60dUUc=)
                          3: neQNKLpCfakNl9D-xr1vgggjRHw.roa (hash: fXE9P5Vbl/ZNMcrpupVcZ1b+IXnjJzLD2Jyf3B1lxGU=)
                          4: wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl (hash: uJZlRuHQykuWy0GdJd3y6Fs1o9yNdKSFjEDwcXbmkhM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:19:d7:62:2f:95:69:8a:3d:eb:b5:73:fe:b5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
        Validity
            Not Before: Mar  1 20:00:39 2026 GMT
            Not After : Mar  2 20:00:39 2026 GMT
        Subject: CN=671fccce406486eea29504a93008fff971d2f4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:da:d5:83:90:2c:89:b5:2f:09:8f:c4:1c:57:
                    eb:ac:d2:4f:d9:7d:6c:34:4f:c7:ed:e4:e9:94:2a:
                    29:ac:57:d5:01:1d:3e:77:11:61:93:40:5e:61:92:
                    84:ea:f8:62:b4:73:16:fe:3d:bd:e5:e8:da:d4:ee:
                    93:93:e3:f6:96:8c:5b:4f:00:ef:52:f1:61:be:28:
                    3a:d0:e1:c9:32:c8:ed:4c:f6:96:fa:07:5c:fa:a4:
                    82:c2:bd:04:cc:ad:4b:03:24:ad:01:27:e2:cd:cf:
                    76:ac:46:3f:ff:07:56:b3:ed:20:0d:ef:b2:7e:36:
                    bd:5f:5d:59:c9:41:0b:ab:2c:05:68:1c:44:67:24:
                    7f:f1:30:af:12:45:80:d0:60:2d:4c:1c:da:70:f5:
                    21:62:ba:dc:0e:d5:a5:e0:50:80:5d:a4:80:3d:03:
                    65:ac:2a:52:2f:79:47:45:13:53:78:dc:a8:5d:c2:
                    16:06:aa:54:aa:cb:23:6d:3e:5a:04:d3:46:95:aa:
                    fd:f4:ec:36:22:c4:a3:1a:38:0a:9f:b7:6a:33:8b:
                    6f:3f:88:f1:eb:60:f9:6d:4a:60:9d:0c:87:a0:1f:
                    17:e7:c7:90:e0:f4:b2:48:67:26:7c:27:50:f9:46:
                    76:fb:9f:4c:ff:52:22:62:1c:02:18:1f:e8:02:02:
                    2e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:1F:CC:CE:40:64:86:EE:A2:95:04:A9:30:08:FF:F9:71:D2:F4:F7
            X509v3 Authority Key Identifier:
                keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:19:97:4f:d0:36:45:46:ae:e1:e2:4c:47:35:7c:68:a8:38:
         91:2a:3c:d7:60:3c:de:f5:3a:09:6d:8d:c6:fe:79:c0:61:7c:
         94:60:26:77:d6:10:b8:bd:4d:25:1f:5c:0f:73:44:dd:1d:9a:
         33:f7:f8:f4:3d:8a:bc:00:dc:4d:e4:8c:64:cb:04:58:74:a4:
         5b:cf:44:36:f5:7c:0e:74:3d:30:16:a7:39:f9:96:60:84:75:
         c8:da:fd:cc:a5:ab:86:f0:66:d7:4a:16:c9:e3:11:b2:6d:72:
         f7:8d:1c:09:1f:c8:6b:d8:d3:3c:86:b0:25:58:55:a7:c7:73:
         57:05:4e:e9:1d:c2:10:5e:14:76:86:4b:85:df:61:fd:1b:d6:
         3c:43:cb:14:2e:7a:9f:ec:e2:01:4a:90:d6:45:9f:83:34:f4:
         dd:ab:93:6a:5c:9c:7e:cf:52:65:67:50:da:b2:c5:84:5a:8d:
         36:a7:d0:88:bf:18:72:06:b9:b2:f2:b4:d1:33:a5:b9:b3:56:
         91:51:d9:33:d6:c4:da:ea:a4:c6:53:14:0d:9b:87:77:45:99:
         f3:21:28:f2:9c:f9:71:5b:de:cf:03:89:75:2a:2d:5d:df:ca:
         5c:0b:84:59:a9:cc:5a:67:df:b9:44:f5:42:8f:3d:f5:44:b6:
         67:22:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:01 2026 by rpki-client