Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
File:                     Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft (raw, json)
Hash identifier:          8dIg9O67V8d+2SfPugxfsFvhqgz5MymFT2kfPxh+0As=
Subject key identifier:   B6:9E:C3:5D:F6:F6:C4:9B:42:86:6B:B2:54:22:6F:35:84:71:0D:E3
Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Certificate issuer:       /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Certificate serial:       019CAA587FB3CC64249B0D938247FFE4492F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
Manifest number:          12B3
Signing time:             Sun 01 Mar 2026 17:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:52 +0000
Files and hashes:         1: J63Xt7-yCtCeAOrP4fi5cBFgyo0.roa (hash: dDfL0X88LeIYm5lvfojYlVc/wL+pOG6NCq0L45cW30w=)
                          2: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl (hash: so6SXNr49RmQZOz73kakefDCmtz4G7AtfCYGHE3gJ/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:7f:b3:cc:64:24:9b:0d:93:82:47:ff:e4:49:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
        Validity
            Not Before: Mar  1 17:00:52 2026 GMT
            Not After : Mar  2 17:00:52 2026 GMT
        Subject: CN=b69ec35df6f6c49b42866bb254226f3584710de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:82:c6:d7:51:70:f1:8c:81:8b:0c:e4:fb:
                    99:75:4d:35:38:61:b9:4b:27:e2:b3:50:4a:2c:02:
                    31:e5:12:88:78:0f:8e:a5:17:81:55:b1:db:21:f5:
                    e5:6c:c8:71:14:f7:dc:4a:86:c5:8f:7d:a3:0f:48:
                    f4:26:5e:f9:66:1d:99:46:85:a3:89:0f:a0:62:cd:
                    84:50:9f:51:94:9a:22:dd:c4:e9:49:64:32:1b:0c:
                    5a:c4:8b:b9:2d:2e:32:43:4a:5f:59:17:1e:08:ef:
                    db:e8:4a:79:09:5f:7a:66:4c:f3:4b:02:4e:9b:11:
                    1a:97:52:b9:a3:36:b2:24:af:51:79:a7:43:d1:df:
                    43:b5:5c:10:0f:5f:2c:fa:17:d0:70:46:ea:77:19:
                    62:e5:fd:43:9c:b6:98:ac:96:e1:b6:39:9e:d2:57:
                    3b:eb:49:e0:70:52:4c:d7:20:2a:d4:78:86:db:0c:
                    b5:0f:9a:5d:04:c1:0c:21:5b:c8:5d:ec:d2:86:70:
                    82:cb:39:44:e1:e0:82:05:04:f5:a0:75:03:52:48:
                    33:4b:a2:5e:78:6b:af:bf:8a:0b:94:36:38:31:6d:
                    77:28:49:0c:1f:4e:8a:c1:4c:f8:38:7e:0e:b8:c1:
                    6c:4e:97:74:cc:72:d5:e6:c9:b0:e6:6f:7a:08:c0:
                    41:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9E:C3:5D:F6:F6:C4:9B:42:86:6B:B2:54:22:6F:35:84:71:0D:E3
            X509v3 Authority Key Identifier:
                keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:e6:6c:42:c7:cc:56:e2:f1:07:2c:b9:ae:6b:10:b7:96:
         f9:93:3d:30:d2:6e:8d:b1:73:a3:75:c6:0c:ba:fb:9d:f4:e0:
         d4:2f:fa:4b:04:dd:fd:0e:34:3a:ec:3e:aa:fb:48:02:c2:90:
         88:b5:5c:d7:f4:ec:14:0b:4b:4c:9a:1d:06:b7:32:1d:3c:ae:
         5c:ae:c5:73:8e:5c:85:f0:9d:d5:e2:14:df:62:30:2c:a7:32:
         80:ca:7f:ee:f9:36:d8:b3:26:bc:42:a2:b8:33:bc:76:d3:d4:
         42:6d:58:62:98:3b:f8:16:39:f6:22:89:a3:00:4d:70:2c:85:
         b6:67:da:91:15:9a:9c:e1:33:f6:f4:24:27:33:3b:56:b4:b9:
         a6:65:93:39:71:70:5a:d7:d6:a5:aa:2f:d5:90:b4:97:bc:13:
         84:f5:38:cb:de:33:6e:e5:9f:d9:72:42:31:61:12:0a:82:4c:
         65:96:02:f8:52:93:ed:36:22:82:9b:72:cc:b2:a6:ee:2e:dc:
         f9:18:0a:2d:e8:b9:c7:69:9d:c3:fd:29:d5:e1:0d:e0:2b:ae:
         b1:8a:ef:cf:e8:8b:98:5b:41:33:a8:e3:36:74:4c:4c:3e:2a:
         d9:fb:62:76:89:03:53:e5:f9:36:71:6a:33:8f:75:41:db:59:
         0a:67:70:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:39 2026 by rpki-client