Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
File:                     wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json)
Hash identifier:          Le/eTzrsxTyhhySJaNyKbq3vxPeRnCudaZccZ32be+0=
Subject key identifier:   66:01:38:25:DB:BF:DC:A4:49:14:E6:05:C6:CD:19:EF:10:A7:34:79
Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5
Certificate issuer:       /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
Certificate serial:       019CAC0FD6B928E8A2FDA3577DE2331B9F4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
Manifest number:          1843
Signing time:             Mon 02 Mar 2026 01:00:44 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:44 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:44 +0000
Files and hashes:         1: ONtLdxm2tPCgNG6apw05G9CfJl4.roa (hash: GtpvzkZjqYfxcugYhiiM43AgTEuXOvMKvTUhpVcadjY=)
                          2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: fVFzyu5pHSArG4/R7s9VLlijx4++1SqhEja47beOl7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:d6:b9:28:e8:a2:fd:a3:57:7d:e2:33:1b:9f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5
        Validity
            Not Before: Mar  2 01:00:44 2026 GMT
            Not After : Mar  3 01:00:44 2026 GMT
        Subject: CN=66013825dbbfdca44914e605c6cd19ef10a73479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:5d:92:8f:b6:08:ff:71:7e:a1:9a:b0:af:
                    b6:ec:ea:5f:8d:30:4a:01:97:45:8f:ac:bf:5a:dd:
                    4a:6a:17:62:b1:58:c1:19:20:f3:3c:f1:a1:19:21:
                    85:81:f5:4b:a8:96:39:b4:b7:d7:86:1e:45:67:60:
                    d1:e7:a6:4c:8c:19:be:29:ff:22:2a:f2:41:df:99:
                    6e:c9:7d:c8:49:d8:d7:37:e7:ec:8f:ba:57:32:b0:
                    01:1d:19:fa:ad:1a:5a:75:04:3b:7b:f7:5d:5a:e6:
                    06:48:23:e3:c5:89:63:0d:f7:73:b4:93:32:99:8f:
                    d2:ec:83:69:e4:45:ac:78:9e:60:f1:64:97:84:b4:
                    22:8a:f7:9e:9f:f8:ae:e9:c8:a4:67:74:1f:e8:b4:
                    cb:ee:0e:0d:2b:eb:60:09:d0:25:00:fd:f5:4c:a8:
                    8f:20:36:46:cd:6e:c2:c1:8f:09:a5:5e:98:31:ab:
                    65:ad:20:ce:79:44:f4:6e:28:a4:df:60:40:d2:e0:
                    cd:87:cf:48:5f:eb:cb:e8:d1:68:1f:7f:e7:70:bf:
                    1e:6f:4d:af:b6:78:0c:00:6c:05:52:3f:e4:97:1a:
                    a2:33:f2:27:5c:90:b0:41:49:b1:36:c9:2f:b0:9f:
                    2e:19:42:89:87:14:d5:12:ce:19:43:ff:0c:24:72:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:01:38:25:DB:BF:DC:A4:49:14:E6:05:C6:CD:19:EF:10:A7:34:79
            X509v3 Authority Key Identifier:
                keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:88:7f:e1:92:48:fb:27:51:ec:50:12:a6:6a:91:96:ab:20:
         bb:b6:ba:f2:90:31:6e:d5:36:8d:33:2c:bf:3e:a7:cc:95:0e:
         f0:59:14:1b:a8:19:1d:5d:14:e7:6b:3b:b2:af:a3:f8:26:b9:
         f5:89:ee:d5:d2:6f:64:2b:ef:a0:3d:4a:d0:05:48:1d:8b:07:
         cb:79:44:22:a4:33:d0:1a:28:90:e2:25:26:e7:32:6e:82:49:
         ee:d0:a6:8a:7a:be:ff:bd:e4:1c:52:30:c8:d9:1e:bc:c2:a7:
         f3:72:13:c4:16:ab:4b:78:1b:4a:8c:9a:d7:de:e3:28:72:16:
         9c:48:f0:80:ec:6c:59:e7:9c:70:74:db:d7:7a:05:f2:9a:56:
         3e:7a:be:19:f5:98:83:50:68:dc:dc:df:58:75:b6:40:d6:6e:
         fb:c0:42:ed:28:aa:da:c6:70:5e:58:50:83:54:c9:ed:e8:b9:
         0c:fd:6d:04:a1:2f:b3:b4:b3:5a:fd:40:84:a8:73:b4:15:47:
         66:15:19:53:04:9a:5f:50:fb:0e:06:c6:27:59:ea:fe:2b:df:
         71:85:51:cc:4b:f1:d0:1c:f6:dc:e6:29:a5:2b:ac:ce:3b:f8:
         d3:81:7e:cb:18:ce:51:2d:c9:98:63:87:15:82:df:f4:8c:a8:
         c0:89:a8:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysD9a5KOii/aNXfeIzG59PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZWExZGRiYTRjYmQzY2I1N2VjODYwZDg1ZmY0ZmY5MzAx
YWZjZTUwHhcNMjYwMzAyMDEwMDQ0WhcNMjYwMzAzMDEwMDQ0WjAzMTEwLwYDVQQD
Eyg2NjAxMzgyNWRiYmZkY2E0NDkxNGU2MDVjNmNkMTllZjEwYTczNDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmNdko+2CP9xfqGasK+27OpfjTBK
AZdFj6y/Wt1KahdisVjBGSDzPPGhGSGFgfVLqJY5tLfXhh5FZ2DR56ZMjBm+Kf8i
KvJB35luyX3ISdjXN+fsj7pXMrABHRn6rRpadQQ7e/ddWuYGSCPjxYljDfdztJMy
mY/S7INp5EWseJ5g8WSXhLQiiveen/iu6cikZ3Qf6LTL7g4NK+tgCdAlAP31TKiP
IDZGzW7CwY8JpV6YMatlrSDOeUT0biik32BA0uDNh89IX+vL6NFoH3/ncL8eb02v
tngMAGwFUj/klxqiM/InXJCwQUmxNskvsJ8uGUKJhxTVEs4ZQ/8MJHK03wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYBOCXbv9ykSRTmBcbNGe8QpzR5MB8GA1UdIwQY
MBaAFMDqHduky9PLV+yGDYX/T/kwGvzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEt
M2NmZDZjM2ZkY2E0LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEtM2NmZDZjM2ZkY2E0
LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4h/4ZJI
+ydR7FASpmqRlqsgu7a68pAxbtU2jTMsvz6nzJUO8FkUG6gZHV0U52s7sq+j+Ca5
9Ynu1dJvZCvvoD1K0AVIHYsHy3lEIqQz0BookOIlJucyboJJ7tCminq+/73kHFIw
yNkevMKn83ITxBarS3gbSoya197jKHIWnEjwgOxsWeeccHTb13oF8ppWPnq+GfWY
g1Bo3NzfWHW2QNZu+8BC7Siq2sZwXlhQg1TJ7ei5DP1tBKEvs7SzWv1AhKhztBVH
ZhUZUwSaX1D7DgbGJ1nq/ivfcYVRzEvx0Bz23OYppSuszjv404F+yxjOUS3JmGOH
FYLf9IyowImoCg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:48 2026 by rpki-client