Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
File:                     cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft (raw, json)
Hash identifier:          euF7vLzaEYgP02Vp6GJGtbXQmyDzIFk3sZ1jruKO2TM=
Subject key identifier:   FA:58:F7:F8:C9:3C:0B:F1:2E:C9:4D:2D:BA:80:31:AB:7E:F9:BC:AD
Authority key identifier: 73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2
Certificate issuer:       /CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
Certificate serial:       019CAA58D00CF96B20C11C5F561E285E663D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
Manifest number:          04E0
Signing time:             Sun 01 Mar 2026 17:01:12 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:12 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:12 +0000
Files and hashes:         1: cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl (hash: qL8S69O6bxrY2inH50ilHp/cqrO88y/1AgTKuQ1s8Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:d0:0c:f9:6b:20:c1:1c:5f:56:1e:28:5e:66:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730cbc47a6a30f23c5d84c180b14881d20ba0ac2
        Validity
            Not Before: Mar  1 17:01:12 2026 GMT
            Not After : Mar  2 17:01:12 2026 GMT
        Subject: CN=fa58f7f8c93c0bf12ec94d2dba8031ab7ef9bcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:12:e1:a5:5c:fe:c2:02:c5:d5:19:66:91:4a:
                    e8:f4:d2:bf:5b:b7:05:65:68:b2:cb:8f:72:fd:cf:
                    34:72:51:c0:f5:7f:49:26:2b:b3:17:68:7e:4b:7b:
                    92:7c:16:97:d7:bc:c8:d1:d5:dc:dd:aa:df:d1:7e:
                    f0:e3:f1:67:d1:e9:6e:3b:89:ab:98:cb:31:42:16:
                    28:79:b8:ab:5a:03:99:d7:df:ba:3b:c5:58:16:9a:
                    4c:b4:e6:78:10:ca:46:96:45:67:be:64:64:25:b5:
                    64:b4:bf:2e:6f:97:5c:12:37:be:f0:fb:95:8a:4b:
                    f1:fd:a3:56:48:7d:78:a0:74:f3:2d:7f:f9:f9:1e:
                    b1:46:9d:23:22:d8:13:c5:af:4c:94:97:10:dd:18:
                    6c:65:12:52:8e:ef:c2:63:2a:e2:1e:4a:5e:6e:f4:
                    da:46:4c:ed:24:fd:d5:5c:c2:aa:3d:83:5a:bf:40:
                    2d:f4:e4:72:d0:bb:d4:c1:8b:26:ac:45:81:46:bf:
                    be:5a:c8:9b:92:16:72:e1:15:9c:71:aa:78:46:e6:
                    49:ff:86:6e:a0:90:73:52:60:95:a7:df:68:b4:87:
                    c1:a9:c7:7f:ce:ff:4f:56:a0:d1:cf:ff:77:91:85:
                    1b:f5:ef:3a:15:1b:c9:2a:f8:85:78:01:93:f6:5e:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:58:F7:F8:C9:3C:0B:F1:2E:C9:4D:2D:BA:80:31:AB:7E:F9:BC:AD
            X509v3 Authority Key Identifier:
                keyid:73:0C:BC:47:A6:A3:0F:23:C5:D8:4C:18:0B:14:88:1D:20:BA:0A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwy8R6ajDyPF2EwYCxSIHSC6CsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/84b074-9c8d-48f5-bade-cba49a446d22/1/cwy8R6ajDyPF2EwYCxSIHSC6CsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:a3:03:20:a9:e8:16:99:17:71:de:58:48:cc:2d:49:38:f2:
         8f:ff:d4:c3:47:7d:9b:7d:9f:00:a3:2b:6e:32:18:34:ae:0d:
         8b:d6:97:ff:44:5c:ac:63:3c:d1:de:df:07:a3:b1:8d:93:2d:
         ff:c1:cd:5a:36:05:ea:5f:4d:3a:30:69:25:06:10:6e:fe:32:
         11:2b:5e:29:fd:aa:b0:19:6d:3c:49:96:06:f5:24:fe:f9:75:
         33:50:e0:f7:24:32:5c:fa:27:09:2e:2e:5d:f6:2d:b8:71:e1:
         25:49:63:8c:9b:de:ef:a4:a2:aa:d9:2f:8e:63:38:08:e5:48:
         b8:a5:2e:53:8a:ba:b0:a8:dc:13:6a:64:53:7f:a5:02:07:e6:
         69:bd:68:46:1b:63:f2:9c:b2:58:da:10:5c:e6:d1:81:d9:a4:
         e2:03:f4:f9:d1:2d:9a:73:6e:c5:fa:36:7a:53:13:ed:9f:0d:
         08:ab:2c:84:24:51:9a:9d:ea:38:da:af:66:18:fb:21:83:25:
         c3:1f:de:e1:1e:be:99:26:ca:35:26:bf:bb:37:aa:e7:88:03:
         64:6b:94:1a:23:f9:b2:6d:0c:43:12:68:c3:f8:b8:19:71:48:
         76:bc:37:3d:b5:26:0c:47:db:45:14:1e:8e:7a:ef:74:62:b0:
         8d:a3:d3:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWNAM+WsgwRxfVh4oXmY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMGNiYzQ3YTZhMzBmMjNjNWQ4NGMxODBiMTQ4ODFkMjBi
YTBhYzIwHhcNMjYwMzAxMTcwMTEyWhcNMjYwMzAyMTcwMTEyWjAzMTEwLwYDVQQD
EyhmYTU4ZjdmOGM5M2MwYmYxMmVjOTRkMmRiYTgwMzFhYjdlZjliY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BLhpVz+wgLF1RlmkUro9NK/W7cF
ZWiyy49y/c80clHA9X9JJiuzF2h+S3uSfBaX17zI0dXc3arf0X7w4/Fn0eluO4mr
mMsxQhYoebirWgOZ19+6O8VYFppMtOZ4EMpGlkVnvmRkJbVktL8ub5dcEje+8PuV
ikvx/aNWSH14oHTzLX/5+R6xRp0jItgTxa9MlJcQ3RhsZRJSju/CYyriHkpebvTa
RkztJP3VXMKqPYNav0At9ORy0LvUwYsmrEWBRr++WsibkhZy4RWccap4RuZJ/4Zu
oJBzUmCVp99otIfBqcd/zv9PVqDRz/93kYUb9e86FRvJKviFeAGT9l6nMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpY9/jJPAvxLslNLbqAMat++bytMB8GA1UdIwQY
MBaAFHMMvEemow8jxdhMGAsUiB0gugrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84NGIwNzQtOWM4ZC00OGY1LWJhZGUt
Y2JhNDlhNDQ2ZDIyLzEvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84NGIwNzQtOWM4ZC00OGY1LWJhZGUtY2JhNDlhNDQ2ZDIy
LzEvY3d5OFI2YWpEeVBGMkV3WUN4U0lIU0M2Q3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6MDIKno
FpkXcd5YSMwtSTjyj//Uw0d9m32fAKMrbjIYNK4Ni9aX/0RcrGM80d7fB6OxjZMt
/8HNWjYF6l9NOjBpJQYQbv4yESteKf2qsBltPEmWBvUk/vl1M1Dg9yQyXPonCS4u
XfYtuHHhJUljjJve76SiqtkvjmM4COVIuKUuU4q6sKjcE2pkU3+lAgfmab1oRhtj
8pyyWNoQXObRgdmk4gP0+dEtmnNuxfo2elMT7Z8NCKsshCRRmp3qONqvZhj7IYMl
wx/e4R6+mSbKNSa/uzeq54gDZGuUGiP5sm0MQxJow/i4GXFIdrw3PbUmDEfbRRQe
jnrvdGKwjaPT1A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:52 2026 by rpki-client