Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          Y0kbeQo5mBW8l1TbTJ6hxAyzt+dHDJkoCvd07kgsQuA=
Subject key identifier:   26:EB:15:C8:3A:FF:3D:CF:6F:8A:6A:E4:0A:A0:A5:67:EA:E9:5C:49
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       019CAAFD642CF0D4582CCAA05070761559CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          12CF
Signing time:             Sun 01 Mar 2026 20:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:58 +0000
Files and hashes:         1: IYD48FobX2QtW7l4Nlux0f3C9cQ.roa (hash: HnyhMFK+hrRQqY1dmM0kJ8BUc9CaYhp0OvPZ/NcZJXc=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: lK9P03IRFlLpzdSzK8fU8Sto9ewjBIMybUue1dK5Kdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:64:2c:f0:d4:58:2c:ca:a0:50:70:76:15:59:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Mar  1 20:00:58 2026 GMT
            Not After : Mar  2 20:00:58 2026 GMT
        Subject: CN=26eb15c83aff3dcf6f8a6ae40aa0a567eae95c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ed:89:3b:1d:8e:20:38:90:65:1d:32:25:31:
                    77:56:a4:40:95:9f:65:22:2f:66:dd:0c:14:db:3c:
                    ed:4d:66:d0:c5:6f:6f:75:46:93:f6:9c:c8:7d:6d:
                    e4:5e:63:39:f1:d5:bf:35:cc:25:ea:4d:e5:03:c7:
                    53:e5:a4:dd:75:16:f4:af:3e:46:cd:4b:f2:fb:55:
                    73:cb:32:c0:00:c8:eb:1e:ec:14:05:e4:aa:60:a5:
                    87:e7:f4:d9:ed:c1:fd:5f:81:30:14:69:04:80:7e:
                    61:4a:56:2c:98:04:87:71:6a:c9:3e:dc:86:23:82:
                    9c:66:10:fc:82:92:cf:15:39:48:61:84:d3:33:1a:
                    27:8d:9a:65:93:20:1f:cf:cd:82:b9:97:d2:62:18:
                    cf:90:da:fb:e2:42:db:bc:41:31:10:98:bb:24:3e:
                    bc:1f:2c:9b:4a:dd:b5:35:a5:8b:03:32:09:6e:92:
                    c9:01:74:a6:69:0a:20:58:41:55:61:3d:0c:e1:7c:
                    8d:0c:b0:49:88:ca:84:e6:9a:93:f4:35:53:d0:19:
                    01:bd:99:c8:f4:78:f3:24:68:3b:4a:95:74:1f:04:
                    96:89:8a:01:bd:c9:be:59:41:26:76:69:4c:9a:38:
                    2e:15:49:03:b3:af:6b:00:25:cf:01:9d:18:f8:4a:
                    0d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EB:15:C8:3A:FF:3D:CF:6F:8A:6A:E4:0A:A0:A5:67:EA:E9:5C:49
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:f5:28:1a:11:53:c9:8f:3f:82:bd:8f:5e:6a:0c:b0:c5:b0:
         3b:f4:ef:cf:df:b3:19:8b:59:6f:86:00:6e:6b:9d:f4:53:ca:
         8a:d4:f6:a9:1f:ca:1d:ec:22:d6:ca:d3:68:b2:cf:a1:d1:c2:
         43:2a:ee:32:1b:08:f3:ea:f0:9c:14:8a:e0:f7:80:41:48:06:
         1a:8a:86:2c:a7:e5:c1:8e:31:4a:98:9e:23:23:2c:47:52:62:
         60:60:f5:67:8f:71:4c:3e:eb:3b:01:8b:4a:ef:4b:48:18:ce:
         6c:2c:a7:df:b3:89:c6:cf:00:25:3e:94:d3:6d:dc:a2:bd:56:
         87:f8:30:54:29:7b:f1:d9:d0:8c:d7:78:b8:44:e1:27:38:36:
         91:5c:55:49:b1:ad:21:22:a2:64:1d:e3:9a:68:a6:c7:20:a2:
         f0:df:b9:e7:52:4f:79:e2:2e:a3:f2:1a:c7:b6:f6:27:04:7b:
         9c:18:a4:0e:d9:23:2c:c5:1f:65:f0:47:27:29:ee:26:60:18:
         96:a3:ad:97:cf:66:78:31:80:d5:e7:a7:db:ab:15:2f:89:b5:
         3e:cd:17:a6:5d:90:ae:6e:45:e7:19:d8:a5:82:f9:0b:ae:50:
         24:46:01:f5:dc:2f:6c:cd:3f:2d:b5:8f:37:62:9f:1a:d3:b8:
         92:3f:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:34 2026 by rpki-client