Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
File:                     wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json)
Hash identifier:          crWFp1aS1nxpySkFdZCN721lUhosqvgZMavphx7qUYg=
Subject key identifier:   D0:DE:B6:2E:E1:91:28:CB:CD:D3:80:07:EB:F3:7E:C8:29:EA:15:E3
Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76
Certificate issuer:       /CN=c1eb2c601fa6d07507973081faa1325fe190b276
Certificate serial:       019CAC46B5A6744EE938132784297D3DDA5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
Manifest number:          06C4
Signing time:             Mon 02 Mar 2026 02:00:40 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:40 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:40 +0000
Files and hashes:         1: V7dSFe54YguWMOBd5igSa3CG0jM.roa (hash: rMSDIp9OV5dVl6Akl8E0YEDyEMw4raUR7F/H+734+DI=)
                          2: pxCe37jhuXSIyNu7bYqJ3DZ_fw4.roa (hash: sH0uhgJw4LrCTAOetXBWIMlVqm3VIDbyxnZ0hMsIubE=)
                          3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: qob9vFBLr4vZCrJBJRbKn4uS9ufS49foIzkJYuwlQmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:b5:a6:74:4e:e9:38:13:27:84:29:7d:3d:da:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276
        Validity
            Not Before: Mar  2 02:00:40 2026 GMT
            Not After : Mar  3 02:00:40 2026 GMT
        Subject: CN=d0deb62ee19128cbcdd38007ebf37ec829ea15e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:47:83:03:fd:bb:d1:b6:b2:b4:a5:cc:df:2f:
                    02:68:73:9b:56:fb:03:a3:18:bf:c6:6f:36:c2:e0:
                    f7:e0:6a:0f:99:ac:a4:21:26:df:61:4d:90:2e:1d:
                    79:57:b9:0e:f5:f8:31:59:23:7d:98:57:c1:29:60:
                    8c:1d:1e:bc:3c:07:a5:f8:ac:50:5c:3e:f0:46:85:
                    8d:aa:0c:9c:38:82:6b:ff:60:c0:57:cf:31:2e:2b:
                    03:af:e9:c0:89:9f:07:16:59:1f:ec:18:22:91:9b:
                    5b:a5:c0:f5:05:a8:82:92:72:f3:d2:af:7b:9f:d5:
                    04:25:bb:3f:de:90:65:20:e2:40:d5:c0:1c:fd:17:
                    a1:18:b5:7c:2d:98:6b:96:0c:f7:9d:bc:32:67:85:
                    86:b0:63:bc:96:64:a1:f9:51:e4:19:65:83:28:9f:
                    56:fe:78:7d:8b:0a:7a:7d:70:65:23:5b:f9:5e:ef:
                    ce:7a:d6:ff:c6:11:f1:77:5b:fc:48:4a:7f:4e:1f:
                    76:c4:d0:e5:8e:9b:66:5e:71:01:c5:cd:31:32:82:
                    4d:24:59:d5:de:57:65:1b:45:f0:9a:fb:6f:47:c7:
                    43:c8:f6:cb:27:96:64:cf:cf:b7:13:81:04:f9:d8:
                    4c:16:d0:24:2c:ed:1e:2a:76:b6:a2:83:81:d5:38:
                    8c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DE:B6:2E:E1:91:28:CB:CD:D3:80:07:EB:F3:7E:C8:29:EA:15:E3
            X509v3 Authority Key Identifier:
                keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:73:cd:87:7a:ad:23:ed:d3:3a:5e:40:92:79:97:22:b3:ff:
         ab:89:68:8f:2a:9b:3f:b9:4d:d0:91:44:8a:07:e9:14:ce:a0:
         76:6e:e6:44:bf:0f:60:c0:54:f1:c6:db:93:b8:b2:59:44:02:
         1f:8c:ce:b3:2e:20:45:d4:b5:82:88:1d:41:75:81:4c:e4:ab:
         8d:6f:5f:27:ec:11:f5:ae:bf:bb:4e:1f:ec:80:52:00:91:09:
         a9:4c:eb:7e:ab:04:07:59:38:1b:e0:dc:7b:8f:a7:20:83:38:
         0b:a0:f3:36:71:1b:5d:23:bb:f3:9b:e1:76:c0:84:60:08:45:
         ab:ab:8c:c9:68:83:6d:a0:37:31:69:2e:88:5f:de:ef:94:5f:
         16:25:47:dd:79:1b:7e:a6:24:40:4e:2b:97:69:b8:db:06:2e:
         1e:85:fd:49:5f:f3:83:91:25:de:2d:31:d6:0f:1f:c4:74:b4:
         aa:1e:b2:1b:86:03:d1:dc:a3:94:29:67:54:fb:2a:dd:3c:64:
         2e:cf:f2:55:94:a6:eb:66:44:3d:e8:6b:5e:6d:15:df:24:1f:
         fb:d2:16:a1:cb:c9:a2:e9:59:4d:c8:22:8c:9e:c9:ea:3a:1d:
         48:31:30:04:a6:d4:87:60:f8:5a:b5:eb:3b:aa:5f:13:53:0f:
         ca:c1:19:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:06 2026 by rpki-client