Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File:                     WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier:          aNYVJ2OT7WfZSs0IUVbdDBc0JOX38vI4j2QersvSpI4=
Subject key identifier:   D7:DC:90:ED:E6:E8:33:64:3F:63:D3:D6:AC:04:A9:C4:52:88:8C:96
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer:       /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial:       019CAA58A36D327A899EA6608A899FB2BA77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number:          16E4
Signing time:             Sun 01 Mar 2026 17:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:01 +0000
Files and hashes:         1: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: X0h7IU0IbYBE7CtSl0C2ZPaXziUupSBvZShSeEhSulM=)
                          2: rLs-_Q80LvN6tE7PzSkUA2oiIh8.roa (hash: GMqoDXQ3wU8Deq0i39xZJUggMEqmsY8s+770f8FFSeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:a3:6d:32:7a:89:9e:a6:60:8a:89:9f:b2:ba:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
        Validity
            Not Before: Mar  1 17:01:01 2026 GMT
            Not After : Mar  2 17:01:01 2026 GMT
        Subject: CN=d7dc90ede6e833643f63d3d6ac04a9c452888c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2d:9f:15:43:0d:3b:c2:0a:0e:f6:b9:c1:5f:
                    d9:12:63:54:28:04:c1:63:67:31:99:8d:02:93:8d:
                    75:a7:d0:f2:a1:43:c4:47:44:35:2f:fb:f2:8d:9d:
                    35:b2:ae:1a:0b:4f:5b:62:9e:7b:23:8f:cc:80:44:
                    b3:27:6f:22:d8:ca:05:d4:82:5d:b7:94:a5:c2:21:
                    72:18:88:53:c3:3a:63:4c:19:f2:69:29:34:35:53:
                    5f:4c:f4:f4:96:c3:0b:51:a2:fc:1b:23:6b:72:f8:
                    12:8d:83:19:40:a9:4c:48:47:a1:5f:1d:9b:4f:cf:
                    39:0a:60:bc:97:e6:76:d2:7b:58:d5:7a:77:85:0b:
                    c6:fc:1c:24:09:ac:46:4a:77:3a:57:c4:d3:d5:ef:
                    99:1c:0c:64:ec:d2:ec:82:e4:c7:22:8e:cb:2c:9a:
                    40:7f:1b:8b:c5:98:66:92:15:68:4f:1c:ee:b2:a5:
                    eb:c6:ad:7f:a0:56:4e:47:c9:0b:2b:bf:db:b2:37:
                    a0:f0:61:26:05:fa:f1:70:2c:bd:36:63:63:b2:83:
                    d4:7d:d3:0c:0c:00:bb:93:b5:d6:f3:c9:f5:83:f4:
                    2a:10:11:f2:84:b9:7b:5e:4e:81:4d:71:f9:e9:9a:
                    44:a9:bb:2b:08:50:71:ac:97:70:dd:11:66:b7:0f:
                    38:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DC:90:ED:E6:E8:33:64:3F:63:D3:D6:AC:04:A9:C4:52:88:8C:96
            X509v3 Authority Key Identifier:
                keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:48:bc:87:93:56:2c:38:a2:5e:60:5b:54:70:26:79:dd:14:
         2c:8c:e1:56:7e:5e:80:13:fc:33:eb:bc:c5:8c:95:6f:99:cf:
         f9:13:da:6a:7c:b5:00:4f:26:56:c2:28:a2:4d:a3:76:bd:55:
         c5:29:62:d8:b0:58:dc:ff:a1:7a:a5:de:cf:ad:fb:ee:6d:99:
         ed:a7:21:03:ea:45:0c:5e:a5:6a:0c:af:73:99:b0:74:69:04:
         72:d4:a9:56:58:82:e0:7b:35:f3:7c:a8:85:46:4b:63:a7:0a:
         d7:e3:59:31:db:d3:22:7b:7e:5d:c6:e5:89:07:20:a4:16:01:
         cf:c1:50:64:1c:08:e6:0c:ec:eb:d8:71:75:0a:ac:f7:49:b6:
         ef:b7:d7:87:e3:41:04:ea:a4:53:8d:02:d4:20:30:0c:69:de:
         85:8e:66:22:7f:d7:18:5a:44:49:e1:83:58:f1:ff:c6:ae:08:
         c7:79:8a:5a:47:46:27:01:0b:ff:43:f0:3c:dd:19:22:96:dc:
         19:6d:05:58:8b:69:81:bb:b6:94:30:34:6a:2c:f6:8c:e9:a9:
         20:65:b9:c8:f8:3b:6b:ed:da:81:3b:94:98:d9:a4:bd:8b:f7:
         22:55:59:9b:70:42:d1:8e:d1:56:7c:af:64:8b:91:f6:a5:fb:
         cb:aa:36:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWKNtMnqJnqZgiomfsrp3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl
MGUzZTQwHhcNMjYwMzAxMTcwMTAxWhcNMjYwMzAyMTcwMTAxWjAzMTEwLwYDVQQD
EyhkN2RjOTBlZGU2ZTgzMzY0M2Y2M2QzZDZhYzA0YTljNDUyODg4Yzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2C2fFUMNO8IKDva5wV/ZEmNUKATB
Y2cxmY0Ck411p9DyoUPER0Q1L/vyjZ01sq4aC09bYp57I4/MgESzJ28i2MoF1IJd
t5SlwiFyGIhTwzpjTBnyaSk0NVNfTPT0lsMLUaL8GyNrcvgSjYMZQKlMSEehXx2b
T885CmC8l+Z20ntY1Xp3hQvG/BwkCaxGSnc6V8TT1e+ZHAxk7NLsguTHIo7LLJpA
fxuLxZhmkhVoTxzusqXrxq1/oFZOR8kLK7/bsjeg8GEmBfrxcCy9NmNjsoPUfdMM
DAC7k7XW88n1g/QqEBHyhLl7Xk6BTXH56ZpEqbsrCFBxrJdw3RFmtw84RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfckO3m6DNkP2PT1qwEqcRSiIyWMB8GA1UdIwQY
MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt
OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2
LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUi8h5NW
LDiiXmBbVHAmed0ULIzhVn5egBP8M+u8xYyVb5nP+RPaany1AE8mVsIook2jdr1V
xSli2LBY3P+heqXez6377m2Z7achA+pFDF6lagyvc5mwdGkEctSpVliC4Hs183yo
hUZLY6cK1+NZMdvTInt+XcbliQcgpBYBz8FQZBwI5gzs69hxdQqs90m277fXh+NB
BOqkU40C1CAwDGnehY5mIn/XGFpESeGDWPH/xq4Ix3mKWkdGJwEL/0PwPN0ZIpbc
GW0FWItpgbu2lDA0aiz2jOmpIGW5yPg7a+3agTuUmNmkvYv3IlVZm3BC0Y7RVnyv
ZIuR9qX7y6o29A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:18 2026 by rpki-client