Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
File:                     Wc4cxXrNTYGB7TBThd7njbF14iE.mft (raw, json)
Hash identifier:          xrKs1Jt4auMdS6QzNoBfDLZYAvZeS7BE3iccZjdNF1Q=
Subject key identifier:   14:40:6A:92:E1:B4:A4:B9:81:63:A4:00:03:21:73:8D:5F:75:7D:81
Authority key identifier: 59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21
Certificate issuer:       /CN=59ce1cc57acd4d8181ed305385dee78db175e221
Certificate serial:       019CAAFD62D2E21C10FC53C0DC42B6A550B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
Manifest number:          1824
Signing time:             Sun 01 Mar 2026 20:00:58 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:58 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:58 +0000
Files and hashes:         1: JHzr-fDxgEMp9ezJsIm0piJhMic.roa (hash: xjYg8AyxN1oM4uVPsqeVh/5zmMR24rFQndC0jX4CsDk=)
                          2: Wc4cxXrNTYGB7TBThd7njbF14iE.crl (hash: 7RP3hTWU1l5XLDwS+9kjFqQvPg/AIgZXXKNp1a/p6NE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:62:d2:e2:1c:10:fc:53:c0:dc:42:b6:a5:50:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ce1cc57acd4d8181ed305385dee78db175e221
        Validity
            Not Before: Mar  1 20:00:58 2026 GMT
            Not After : Mar  2 20:00:58 2026 GMT
        Subject: CN=14406a92e1b4a4b98163a4000321738d5f757d81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:87:75:6e:19:e1:00:51:58:83:d2:77:9c:
                    c2:b0:25:57:0d:ed:e7:85:25:72:af:a5:a3:2e:e9:
                    cb:67:51:9c:54:8b:a1:e3:ec:eb:68:ba:04:51:31:
                    f0:97:ba:18:8e:7a:ea:f9:b9:64:ba:08:48:90:9a:
                    19:16:e6:51:00:09:da:d2:78:a6:1d:e8:2d:c5:8b:
                    ad:81:46:80:64:73:43:00:81:92:af:7d:38:46:ec:
                    40:9c:34:4f:fc:e5:f6:03:ab:d5:9b:cf:0a:53:d7:
                    5a:3b:7d:a8:6d:55:84:bd:42:47:7a:60:09:31:b4:
                    00:d0:f0:6f:38:f7:d4:fe:77:c0:58:45:8e:d5:e9:
                    ce:3b:90:9d:05:a7:39:e9:47:89:bb:fe:f8:cc:05:
                    bb:50:b0:ba:b0:03:ca:e2:92:82:da:3f:1c:33:0f:
                    04:56:55:8c:0b:d8:70:c6:8f:16:b0:ed:8d:ae:f2:
                    2a:09:b6:ef:55:20:a2:77:37:c8:17:66:73:ce:e1:
                    24:28:d8:68:2e:d0:d7:22:a1:8d:34:42:3d:e5:df:
                    de:55:56:ed:48:20:a1:44:9b:92:f9:19:35:46:2f:
                    c7:42:d3:44:76:82:8e:91:c6:8f:d8:9c:02:f0:c4:
                    83:82:c2:f0:aa:7c:4c:52:f0:38:48:20:d1:92:76:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:40:6A:92:E1:B4:A4:B9:81:63:A4:00:03:21:73:8D:5F:75:7D:81
            X509v3 Authority Key Identifier:
                keyid:59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:21:d2:77:8b:2e:bd:ec:76:21:f9:9a:68:01:42:4e:e0:d0:
         3e:1d:bf:5b:ca:4c:17:4b:c2:b9:bf:8b:88:d0:84:83:74:de:
         0e:63:a4:dc:1f:30:29:87:fc:e8:7b:f0:66:2c:67:7e:4c:fb:
         93:ba:3b:10:7b:34:c7:c0:fd:12:c8:b6:d3:ad:d4:a0:2e:c3:
         1c:09:6b:dd:0c:14:b6:23:1c:f6:1d:33:f7:50:f4:7c:a9:96:
         c0:59:d8:45:db:55:91:b4:e1:6b:06:69:5e:dd:f9:42:f7:30:
         95:e7:14:f4:0b:e0:da:cf:0e:96:50:69:63:7c:1f:27:2e:58:
         60:78:48:df:de:bb:33:87:e7:24:0d:d8:04:7f:cb:b2:9e:99:
         73:7d:4a:7d:2f:d8:5d:b5:da:d1:62:0f:54:df:1f:d9:94:3a:
         84:c7:1b:01:f5:d7:1f:f2:94:2b:e4:d7:f9:a1:18:b1:52:1a:
         e4:a5:25:cb:94:50:0e:a2:5c:7b:8f:15:d4:66:ec:ee:f0:da:
         08:96:bd:b8:99:39:57:7f:e7:1f:41:7e:fb:0c:9c:9d:1e:ac:
         2d:1a:01:72:28:47:c2:cf:45:b4:47:6f:82:d7:3a:42:d2:39:
         8a:f9:9f:d1:13:5b:17:ce:29:17:3c:5b:b1:4e:1a:2f:c0:61:
         19:d8:18:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:01:57 2026 by rpki-client