Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File:                     wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier:          OAuNEiJWXJ9RScR+IgYQTr8vCDi8hOT2dpgthztKpes=
Subject key identifier:   47:D8:73:9D:C1:86:6C:C4:AC:5E:93:74:31:DA:40:E3:6D:4E:A1:D9
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer:       /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial:       019CABA1C5E7EB4CEA59AF90B272E0A5AFF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number:          06D7
Signing time:             Sun 01 Mar 2026 23:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:31 +0000
Files and hashes:         1: KGrdlGc_X6Hki0LeSOU3SUEjdJY.roa (hash: xgbr933ze/YCtvnJPl14XndSL5VHe/+W5p0SIc3yhsI=)
                          2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: dZXK/i7Rskk9T8sPV+lpY7qF++TywDF6URuyWBrchW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a1:c5:e7:eb:4c:ea:59:af:90:b2:72:e0:a5:af:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
        Validity
            Not Before: Mar  1 23:00:31 2026 GMT
            Not After : Mar  2 23:00:31 2026 GMT
        Subject: CN=47d8739dc1866cc4ac5e937431da40e36d4ea1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:78:a9:93:00:13:22:b1:ca:3e:55:0b:9b:
                    db:4c:a2:5f:99:a0:53:95:74:b9:79:46:da:30:64:
                    59:c5:5a:ce:03:dc:9b:67:b9:e7:7c:f0:81:90:36:
                    d8:62:82:d4:c3:49:64:92:03:06:9a:09:69:5c:7a:
                    3a:f5:5c:23:85:a7:e0:2e:39:40:2f:45:59:f8:a0:
                    a7:2f:cd:55:34:17:d1:5e:28:b2:c2:48:87:34:71:
                    eb:ab:ae:43:28:84:1e:c0:70:74:42:fd:8e:17:ea:
                    76:ce:74:37:24:ab:11:ea:aa:78:b9:74:20:94:60:
                    48:60:14:90:84:ea:88:66:9d:48:4b:b5:9a:87:f3:
                    7f:0b:95:d8:30:1e:2e:f6:97:77:02:d0:84:41:47:
                    e3:99:a0:36:b0:54:54:41:c2:01:14:8b:9e:eb:62:
                    c8:ca:3e:8e:3e:d9:88:dc:12:22:f8:d0:b5:b0:06:
                    1e:e1:45:07:39:81:10:35:43:ef:0e:b4:59:c3:7a:
                    e8:a5:96:9f:2f:c0:71:fa:10:17:3e:dc:b8:33:ec:
                    18:19:82:ff:84:cb:9f:7a:32:59:51:d0:58:cc:1b:
                    a0:46:60:8f:c2:20:df:00:2d:c4:1f:48:c7:6f:05:
                    c4:91:7b:e8:9a:4c:82:f0:24:83:c6:ed:8c:25:49:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D8:73:9D:C1:86:6C:C4:AC:5E:93:74:31:DA:40:E3:6D:4E:A1:D9
            X509v3 Authority Key Identifier:
                keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:46:0e:15:7b:74:f6:3e:6e:3f:52:68:3d:0e:e4:6a:41:5b:
         94:9e:27:f6:eb:c7:d0:76:91:90:78:1c:bb:0b:1f:38:86:b2:
         8f:5e:d3:a2:db:df:f8:f1:32:aa:1b:86:06:8b:5f:f1:34:2e:
         18:9f:84:39:f4:99:d0:a9:7d:57:d9:b4:bc:97:52:cc:cb:25:
         78:83:b3:ff:2e:6d:e8:94:14:8b:09:8b:b7:f4:12:ed:bf:91:
         a7:47:9b:62:b1:76:88:7e:4d:fe:88:91:dc:70:d3:a4:f7:f0:
         d7:99:6b:3f:88:fe:a5:87:4e:05:04:aa:d4:45:ce:4c:9a:aa:
         72:5a:79:cf:06:f5:c9:45:0d:ad:91:cf:49:b8:d6:85:c5:6f:
         d2:43:f9:09:64:c0:ec:69:a8:ec:86:ca:45:22:8a:1c:94:45:
         02:03:7f:be:1a:56:41:4c:4a:b2:01:2c:ad:dc:db:ad:34:8d:
         d0:31:a6:f3:4a:fc:9c:4d:73:08:72:56:c9:63:2f:a0:76:64:
         b8:1a:b9:60:1c:5f:65:23:d0:1c:35:d6:9a:45:87:70:51:5b:
         a2:19:e0:a8:cf:4c:a9:0f:31:e5:9d:35:9e:e5:d1:b8:41:3c:
         47:4e:46:3b:f7:02:71:6d:fa:1b:62:21:aa:5f:cb:75:f6:9d:
         ef:89:95:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrocXn60zqWa+QsnLgpa/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYjhlMjU3OTdhOWRjNDNjMmU0NjM5NGIwYzhiMWIxMDhh
YjQzYjkwHhcNMjYwMzAxMjMwMDMxWhcNMjYwMzAyMjMwMDMxWjAzMTEwLwYDVQQD
Eyg0N2Q4NzM5ZGMxODY2Y2M0YWM1ZTkzNzQzMWRhNDBlMzZkNGVhMWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk94qZMAEyKxyj5VC5vbTKJfmaBT
lXS5eUbaMGRZxVrOA9ybZ7nnfPCBkDbYYoLUw0lkkgMGmglpXHo69VwjhafgLjlA
L0VZ+KCnL81VNBfRXiiywkiHNHHrq65DKIQewHB0Qv2OF+p2znQ3JKsR6qp4uXQg
lGBIYBSQhOqIZp1IS7Wah/N/C5XYMB4u9pd3AtCEQUfjmaA2sFRUQcIBFIue62LI
yj6OPtmI3BIi+NC1sAYe4UUHOYEQNUPvDrRZw3ropZafL8Bx+hAXPty4M+wYGYL/
hMufejJZUdBYzBugRmCPwiDfAC3EH0jHbwXEkXvomkyC8CSDxu2MJUnzOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfYc53BhmzErF6TdDHaQONtTqHZMB8GA1UdIwQY
MBaAFMC44leXqdxDwuRjlLDIsbEIq0O5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGIt
NTNlYWNkODk2M2ExLzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZGUyMTMtZjM1Mi00M2E0LWI4OGItNTNlYWNkODk2M2Ex
LzEvd0xqaVY1ZXAzRVBDNUdPVXNNaXhzUWlyUTdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkYOFXt0
9j5uP1JoPQ7kakFblJ4n9uvH0HaRkHgcuwsfOIayj17Totvf+PEyqhuGBotf8TQu
GJ+EOfSZ0Kl9V9m0vJdSzMsleIOz/y5t6JQUiwmLt/QS7b+Rp0ebYrF2iH5N/oiR
3HDTpPfw15lrP4j+pYdOBQSq1EXOTJqqclp5zwb1yUUNrZHPSbjWhcVv0kP5CWTA
7Gmo7IbKRSKKHJRFAgN/vhpWQUxKsgEsrdzbrTSN0DGm80r8nE1zCHJWyWMvoHZk
uBq5YBxfZSPQHDXWmkWHcFFbohngqM9MqQ8x5Z01nuXRuEE8R05GO/cCcW36G2Ih
ql/Ldfad74mVLw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:59 2026 by rpki-client