Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File:                     wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier:          pdFyUY7O1PaSAmaQSIXdvjdz/y9b03wpbvgRdtnheug=
Subject key identifier:   95:DE:92:1F:32:30:E1:EB:08:9A:0F:05:AE:E9:A0:67:C9:20:09:99
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer:       /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial:       019CABA20D8C3681DB06DB171270CDA57433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 23:00:49 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:49 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:49 +0000
Files and hashes:         1: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: JE3ExC8SB2btB1smmogQwbt6h1g91rtffEdXsAb7kSM=)
                          2: yHQ1YLiN5hY_gbv8gILFuVBIS7Q.roa (hash: gmCFySCBwmCnbmTNmPpd7gcPgHDTKx/9z23Y4aCqihk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:0d:8c:36:81:db:06:db:17:12:70:cd:a5:74:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
        Validity
            Not Before: Mar  1 23:00:49 2026 GMT
            Not After : Mar  2 23:00:49 2026 GMT
        Subject: CN=95de921f3230e1eb089a0f05aee9a067c9200999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:12:31:b7:f4:43:25:04:46:9e:ee:cd:6e:36:
                    8d:4b:d7:c7:e8:f8:06:0e:65:ca:d4:12:bb:b1:17:
                    b2:26:48:6f:97:ed:3f:c7:ff:3a:87:54:d2:92:bf:
                    66:20:23:86:0b:ff:4e:2d:20:a6:3b:20:17:fb:48:
                    04:22:3d:e2:ee:62:45:c1:3e:e8:28:98:0c:a0:76:
                    5f:d9:24:85:35:1a:3f:d0:d3:80:a2:95:08:17:b9:
                    07:95:c8:66:39:76:f3:22:ca:a5:7f:cb:0e:cc:19:
                    17:b1:2d:d0:35:c5:d5:bb:cf:72:d7:b4:65:42:cf:
                    4a:38:52:2c:2b:96:31:c9:89:0a:be:30:6a:f8:26:
                    12:cc:d5:88:13:b2:74:b3:6e:0a:49:a8:c1:8b:12:
                    de:b3:e8:22:ce:5d:c2:27:5a:c9:4d:cc:73:90:85:
                    94:32:87:18:60:b8:c1:2f:b2:0e:f4:5e:25:ba:19:
                    55:0c:b3:89:83:72:93:fd:c5:9e:a6:cb:6d:81:9f:
                    2c:d5:cf:5a:f8:3d:2d:bf:1a:f6:f5:a4:b4:39:b6:
                    0e:be:fa:a7:27:3b:83:5b:db:01:cb:fe:54:12:36:
                    50:41:e0:f7:98:d1:15:1b:4e:f9:05:58:7d:ec:6d:
                    04:ab:db:8c:ae:23:05:c2:2f:68:d7:19:97:35:65:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DE:92:1F:32:30:E1:EB:08:9A:0F:05:AE:E9:A0:67:C9:20:09:99
            X509v3 Authority Key Identifier:
                keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ae:05:43:c1:46:fe:99:9c:13:1a:c3:b0:b7:d5:c6:01:38:
         fe:a5:12:0b:6c:5b:ab:e3:f3:70:bf:9c:2d:01:e0:cc:19:24:
         6a:89:ef:4e:6b:05:33:3e:da:69:43:2a:97:dd:8e:cb:28:e1:
         d0:36:64:57:a4:b8:d3:93:e9:a0:2d:23:ec:04:41:3d:b5:73:
         60:26:ce:d2:91:40:6b:68:25:f9:e4:9a:75:f6:81:23:32:e5:
         9a:d6:87:70:ea:75:79:33:aa:98:0c:ea:3b:64:80:d7:2d:8b:
         6e:5a:72:68:d6:85:ea:98:5f:08:4a:18:de:cf:a2:10:7d:23:
         cf:9c:2f:e2:4d:09:8e:b4:7f:99:29:62:7c:23:6c:d6:9a:9c:
         73:83:f2:15:d5:03:0f:f6:d6:89:5b:14:97:bf:21:9d:a6:1f:
         25:bd:fd:9d:8f:ed:b4:f9:de:ac:52:82:d0:91:cd:24:fb:61:
         38:b1:9d:ad:94:68:5a:df:82:d2:a7:06:af:37:80:1b:a2:2c:
         25:db:70:91:b1:af:27:45:8d:38:49:40:aa:ee:e7:93:eb:20:
         7f:f1:8f:f4:0a:13:6b:54:9d:1b:ff:76:ef:30:d0:88:39:30:
         ab:ba:08:bd:90:fa:7c:d9:13:14:c5:e7:be:cb:9b:87:1b:3c:
         06:19:fc:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrog2MNoHbBtsXEnDNpXQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMzI0OTViODlkY2U4MWIwYzdmODg2ZGRmYzM2MDRiZGUw
NmQ4YTYwHhcNMjYwMzAxMjMwMDQ5WhcNMjYwMzAyMjMwMDQ5WjAzMTEwLwYDVQQD
Eyg5NWRlOTIxZjMyMzBlMWViMDg5YTBmMDVhZWU5YTA2N2M5MjAwOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBIxt/RDJQRGnu7NbjaNS9fH6PgG
DmXK1BK7sReyJkhvl+0/x/86h1TSkr9mICOGC/9OLSCmOyAX+0gEIj3i7mJFwT7o
KJgMoHZf2SSFNRo/0NOAopUIF7kHlchmOXbzIsqlf8sOzBkXsS3QNcXVu89y17Rl
Qs9KOFIsK5YxyYkKvjBq+CYSzNWIE7J0s24KSajBixLes+gizl3CJ1rJTcxzkIWU
MocYYLjBL7IO9F4luhlVDLOJg3KT/cWepsttgZ8s1c9a+D0tvxr29aS0ObYOvvqn
JzuDW9sBy/5UEjZQQeD3mNEVG075BVh97G0Eq9uMriMFwi9o1xmXNWXyOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXekh8yMOHrCJoPBa7poGfJIAmZMB8GA1UdIwQY
MBaAFMAySVuJ3OgbDH+Ibd/DYEveBtimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUt
MDJlNjQyMmM0MTgxLzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUtMDJlNjQyMmM0MTgx
LzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHK4FQ8FG
/pmcExrDsLfVxgE4/qUSC2xbq+PzcL+cLQHgzBkkaonvTmsFMz7aaUMql92Oyyjh
0DZkV6S405PpoC0j7ARBPbVzYCbO0pFAa2gl+eSadfaBIzLlmtaHcOp1eTOqmAzq
O2SA1y2LblpyaNaF6phfCEoY3s+iEH0jz5wv4k0JjrR/mSlifCNs1pqcc4PyFdUD
D/bWiVsUl78hnaYfJb39nY/ttPnerFKC0JHNJPthOLGdrZRoWt+C0qcGrzeAG6Is
JdtwkbGvJ0WNOElAqu7nk+sgf/GP9AoTa1SdG/927zDQiDkwq7oIvZD6fNkTFMXn
vsubhxs8Bhn8ig==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:06:15 2026 by rpki-client