Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File:                     WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier:          rGu1C2InF80CcXBBOqYPT3vdkLn0/S2yAkF0WexnEwY=
Subject key identifier:   72:9A:52:45:CA:D6:84:80:75:9A:5D:FD:2B:EF:08:EE:4A:FF:D1:EF
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer:       /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial:       019CAB3479AA075F48030A965B943CD85270
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 21:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 21:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 21:01:08 +0000
Files and hashes:         1: OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa (hash: iXyMvC2zcRw1kQk9NMVDBWBfZ7cLWCvnkd2tBslhHyk=)
                          2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: 9hjS+sr8vKqyj/Nwl8QoHFspGLk3q6/CB04hMQHFjuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:79:aa:07:5f:48:03:0a:96:5b:94:3c:d8:52:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
        Validity
            Not Before: Mar  1 21:01:08 2026 GMT
            Not After : Mar  2 21:01:08 2026 GMT
        Subject: CN=729a5245cad68480759a5dfd2bef08ee4affd1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:7d:54:61:b3:86:70:93:96:3d:92:d9:19:
                    63:60:d9:88:40:51:2c:73:bf:c4:e5:d9:36:4e:79:
                    ca:cf:cb:a6:1c:e3:4c:c9:dd:27:4e:60:49:b1:9d:
                    b6:38:87:b7:46:3e:15:88:ed:5f:d0:02:db:8c:8c:
                    a4:5f:25:70:e5:91:8c:c2:5d:d3:04:ab:85:67:21:
                    f8:42:3a:71:aa:7c:1a:4a:ec:e7:d4:a9:b5:b9:43:
                    bd:73:68:2b:df:76:6d:8d:ea:19:0d:7e:3a:6c:c1:
                    50:90:ca:43:50:5d:65:79:f8:6f:2d:8a:85:e7:eb:
                    08:9a:64:5d:11:d7:1e:a8:fc:2a:32:b9:1a:fd:13:
                    83:64:56:d0:b8:14:a0:0b:92:88:0f:e4:60:73:bf:
                    e2:1d:b6:32:0f:77:17:d7:7e:72:59:fd:c8:55:c9:
                    bc:91:62:12:ad:db:32:0c:07:9c:a1:28:15:74:dc:
                    53:07:ae:17:ee:2d:49:d1:00:12:ed:cc:98:5f:55:
                    45:3d:46:a7:ae:16:e7:29:1c:d8:43:53:77:58:0f:
                    e1:e3:e6:01:b7:55:e4:90:db:98:21:48:91:73:6c:
                    c7:05:22:ad:a5:44:8f:a5:25:30:14:ec:ea:ea:4a:
                    1f:11:21:19:81:27:7b:3f:b6:34:86:f3:87:e0:71:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9A:52:45:CA:D6:84:80:75:9A:5D:FD:2B:EF:08:EE:4A:FF:D1:EF
            X509v3 Authority Key Identifier:
                keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:81:12:d6:af:68:50:b6:43:22:bb:86:0b:da:cc:e5:ec:3a:
         05:70:8b:0b:23:c9:43:d1:53:b0:d6:a2:2e:36:27:45:eb:c1:
         8b:07:3e:8a:81:9a:4b:49:70:63:8d:3f:a1:0c:ec:f4:3d:3d:
         6b:2c:52:50:8c:f1:a4:d2:df:7a:85:9a:bf:87:cb:f2:8d:e7:
         f3:b8:72:3b:74:a2:52:7d:59:c7:a1:9e:cc:d6:dd:37:8d:63:
         8f:b0:dc:77:f5:a9:95:de:87:23:27:96:10:b1:30:6b:3a:03:
         7a:f6:20:a2:74:5c:b8:05:bb:a8:61:90:b9:b9:96:be:21:fa:
         4b:7d:f8:f1:22:21:bc:f1:59:9c:06:c3:7a:96:c2:af:fb:76:
         cb:a5:bf:73:14:4e:80:b0:5d:5f:5a:6a:ed:68:a3:77:44:76:
         a4:4f:96:2a:6b:a2:be:d9:50:84:61:f5:3d:65:18:0d:4b:d0:
         60:9d:b5:34:07:c4:a9:a2:ef:2c:48:a5:4d:1f:e5:dd:d3:bf:
         6f:99:d6:42:97:b6:6a:3c:c0:eb:c7:5d:ef:32:ba:dd:ee:29:
         5f:e0:3f:85:4e:73:ba:f7:6a:56:04:69:a8:75:2b:b5:cd:5f:
         f1:16:40:c2:06:5c:2d:7d:e3:cd:47:3d:78:c6:b6:08:f3:ae:
         ed:01:f0:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNHmqB19IAwqWW5Q82FJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YmI1NDk4NzYzOWJhMGM2Y2ZiY2FkNTk4YzNmNWUzOWZj
YTk0NWMwHhcNMjYwMzAxMjEwMTA4WhcNMjYwMzAyMjEwMTA4WjAzMTEwLwYDVQQD
Eyg3MjlhNTI0NWNhZDY4NDgwNzU5YTVkZmQyYmVmMDhlZTRhZmZkMWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPN9VGGzhnCTlj2S2RljYNmIQFEs
c7/E5dk2TnnKz8umHONMyd0nTmBJsZ22OIe3Rj4ViO1f0ALbjIykXyVw5ZGMwl3T
BKuFZyH4QjpxqnwaSuzn1Km1uUO9c2gr33ZtjeoZDX46bMFQkMpDUF1lefhvLYqF
5+sImmRdEdceqPwqMrka/RODZFbQuBSgC5KID+Rgc7/iHbYyD3cX135yWf3IVcm8
kWISrdsyDAecoSgVdNxTB64X7i1J0QAS7cyYX1VFPUanrhbnKRzYQ1N3WA/h4+YB
t1XkkNuYIUiRc2zHBSKtpUSPpSUwFOzq6kofESEZgSd7P7Y0hvOH4HH2qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKaUkXK1oSAdZpd/SvvCO5K/9HvMB8GA1UdIwQY
MBaAFFi7VJh2OboMbPvK1ZjD9eOfypRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYt
OGM5ZjJkNzA1OTQ4LzEvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8yM2EyYjItNjliYi00OTMzLWFlNmYtOGM5ZjJkNzA1OTQ4
LzEvV0x0VW1IWTV1Z3hzLThyVm1NUDE0NV9LbEZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoES1q9o
ULZDIruGC9rM5ew6BXCLCyPJQ9FTsNaiLjYnRevBiwc+ioGaS0lwY40/oQzs9D09
ayxSUIzxpNLfeoWav4fL8o3n87hyO3SiUn1Zx6GezNbdN41jj7Dcd/Wpld6HIyeW
ELEwazoDevYgonRcuAW7qGGQubmWviH6S3348SIhvPFZnAbDepbCr/t2y6W/cxRO
gLBdX1pq7Wijd0R2pE+WKmuivtlQhGH1PWUYDUvQYJ21NAfEqaLvLEilTR/l3dO/
b5nWQpe2ajzA68dd7zK63e4pX+A/hU5zuvdqVgRpqHUrtc1f8RZAwgZcLX3jzUc9
eMa2CPOu7QHwnQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:13 2026 by rpki-client