Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          okbUz7Zta7Ep+S+xyy3asH0wkkSyfqWQ/mGUPtOqNrU=
Subject key identifier:   AA:27:91:AF:B9:5B:77:53:15:6E:79:C9:9C:26:DD:00:95:CA:D5:C2
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019CAC4765E85CFE5E408B57F0749756FF27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          064E
Signing time:             Mon 02 Mar 2026 02:01:26 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:26 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:26 +0000
Files and hashes:         1: 3-vvvwv4tUZPRVYLco5dYLcKOig.roa (hash: qd0VBxrvHFGJvFVcu73W5K8cFS+yhuHypJI01YtY3b8=)
                          2: LqGZ4Y_LYp2MZXMblkA5ejVTJjY.roa (hash: /YWWe7ikBu5jzDasGD2GRk3QY4m/auaJQyMur2UjVL0=)
                          3: _qfnh0B1Q9kr326hHKH4PHRx7H0.roa (hash: TtfUGrmkL3QzIvzYnYw9WDKqe/CRP54QUVhnblV7rQ0=)
                          4: lTt4b6nTbzdPA2Rhv79B9SEQkGI.roa (hash: E9clsIqRXGih95uwME+vzroz4tzKBqvwnu5vYnurBGk=)
                          5: llZMGo59gLGSTAZNJr7ReO3JJ2c.roa (hash: ywtgbyBDbj/JHfzn1E6Yc8D1DIqjzUbm4fWSIBPm7rU=)
                          6: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: okewDhiO+8Ka3OGPQctQ6tULIEKnJnB8hP8Fghq+j/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:65:e8:5c:fe:5e:40:8b:57:f0:74:97:56:ff:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Mar  2 02:01:26 2026 GMT
            Not After : Mar  3 02:01:26 2026 GMT
        Subject: CN=aa2791afb95b7753156e79c99c26dd0095cad5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:5a:6c:b0:b8:21:86:1c:66:7c:50:d1:92:
                    4a:ed:c5:40:6c:56:e1:6b:2a:a5:50:02:14:ef:ac:
                    92:44:8d:fe:9b:68:80:f3:97:33:61:95:58:1f:fc:
                    65:9e:8c:f6:47:51:55:70:a2:e1:ae:ef:bf:60:a6:
                    ba:a4:0b:db:b0:76:79:83:44:de:fa:fd:7e:85:8e:
                    fb:3a:cd:6c:16:24:a1:0e:bf:f5:9f:c3:af:c2:fe:
                    a5:ae:7e:ad:73:3a:94:b9:8c:21:b5:1c:e7:10:33:
                    ff:5b:b2:88:68:a5:a8:cf:5a:99:2b:30:37:2e:c6:
                    fd:e9:be:26:aa:ba:aa:47:26:34:76:75:31:a5:d1:
                    36:fb:3b:47:86:c2:cb:18:f1:41:03:04:e0:f0:f0:
                    50:3d:da:58:cf:05:8e:37:a7:96:6e:1e:33:9e:db:
                    66:42:3a:58:54:df:30:ff:7a:24:de:ad:98:9b:21:
                    31:c4:72:5a:b0:87:7b:35:4f:58:ce:0f:c3:25:18:
                    71:1f:06:ea:15:75:4e:ef:16:98:e6:24:e8:41:89:
                    30:31:37:e1:dc:b7:a9:24:7b:a4:17:f6:75:c9:8b:
                    b7:20:97:ac:be:5f:95:46:bb:59:0d:69:3a:a8:05:
                    64:9e:1c:99:a4:1f:7e:18:0e:03:a9:34:a5:07:c7:
                    fe:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:27:91:AF:B9:5B:77:53:15:6E:79:C9:9C:26:DD:00:95:CA:D5:C2
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:54:13:eb:55:78:7b:4f:4d:9c:f0:53:0d:46:00:09:6a:
         d4:47:0f:19:e1:d1:c4:4c:e2:52:c0:69:0e:45:5f:1e:ab:eb:
         89:a9:b1:69:14:ef:ae:ac:0b:cd:a5:a1:d1:c7:c9:d8:89:bc:
         7a:98:20:da:d6:6e:da:1e:c4:dd:e1:6f:8f:8e:60:be:22:ac:
         6f:66:ff:1f:ca:5c:dc:b2:40:c9:54:15:4d:e6:76:72:51:9c:
         55:7c:38:82:e3:b5:af:08:cf:b3:13:9c:50:ab:a6:a2:6b:78:
         d3:fb:f2:88:02:2d:3e:eb:60:7c:e5:50:bb:00:29:34:29:11:
         10:09:8d:56:16:da:96:19:02:2d:1d:9d:44:a6:1e:be:2f:61:
         ab:27:f7:db:05:59:1a:22:b0:65:78:12:73:e3:9c:0d:cf:0c:
         41:f7:60:02:e8:85:99:97:21:82:81:5a:18:46:94:82:a1:48:
         41:b1:fc:5c:d4:8a:7d:a8:39:6e:cd:b6:6b:a3:fd:a3:a7:3d:
         bf:ed:b1:72:fa:88:b5:28:f5:0a:6d:82:a9:08:00:d9:e6:c6:
         3b:c3:b5:13:4d:ed:16:63:d0:5a:fa:4f:ef:a0:54:53:28:70:
         c3:8e:66:34:42:aa:58:97:c5:05:3f:2e:f0:4d:e0:7c:1a:84:
         23:50:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:59 2026 by rpki-client