Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          8Mq/afy5PmXD5JcZiTT+ePyzMT+j/pRyj/Nv0iFbkyA=
Subject key identifier:   E3:C7:96:4D:40:6C:92:E8:34:00:06:42:03:1E:78:50:7F:88:A4:88
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       019CAA8F5617FB83E7D5ECC1C9F72BABA678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          1882
Signing time:             Sun 01 Mar 2026 18:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 18:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 18:00:46 +0000
Files and hashes:         1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=)
                          2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=)
                          3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=)
                          4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=)
                          5: J7rQibY3a8-MeIzjHxJ_un-Q56k.roa (hash: KfYp7j0f60mC69NVOXIfMLH4hMu/T36lhK6azRv6oDs=)
                          6: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=)
                          7: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=)
                          8: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=)
                          9: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=)
                          10: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: cXkj9vMQYVwTduGVi4J9B65xysGuFRqak2cEnf765UA=)
                          11: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=)
                          12: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=)
                          13: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=)
                          14: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=)
                          15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=)
                          16: taO64xY4tC0rzgQTKi7mNXkODLo.roa (hash: QcXuD3pXS6J3VZtZ+rKhps2cHVZUWXecszaJ6HFj8OY=)
                          17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:56:17:fb:83:e7:d5:ec:c1:c9:f7:2b:ab:a6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Mar  1 18:00:46 2026 GMT
            Not After : Mar  2 18:00:46 2026 GMT
        Subject: CN=e3c7964d406c92e834000642031e78507f88a488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f6:25:f0:b4:54:ff:fd:7a:3f:c6:4d:9e:c2:
                    30:86:37:b6:06:d1:d1:a2:27:54:3e:d7:f1:63:b7:
                    02:98:75:c6:65:dc:c6:a5:c9:9b:37:1f:96:f9:18:
                    2d:6d:7f:16:90:2b:fb:3f:e3:f2:89:e7:e4:9e:3c:
                    35:24:75:28:29:b6:81:97:b6:ae:4f:25:2a:1b:51:
                    de:2e:d6:fd:0c:64:23:8a:79:5f:83:b0:d2:6e:8b:
                    9b:c8:05:95:b9:c3:d1:a5:03:e4:25:35:07:0e:5b:
                    af:6a:75:36:43:d4:cf:9e:8e:32:48:fd:47:3b:66:
                    07:41:0e:d3:56:51:8a:fb:3e:f3:84:33:f1:d1:32:
                    42:cd:f6:e1:bd:d0:61:81:b1:a1:e6:08:5f:96:e1:
                    cf:b2:b6:05:de:c4:59:b0:01:a6:8e:41:a9:c1:51:
                    12:2c:15:05:21:59:e7:de:d9:a2:ba:79:9c:02:e4:
                    18:1c:bf:e3:3a:82:75:08:ec:af:4d:4f:87:9b:ca:
                    6f:89:c3:8e:44:d2:d0:8f:28:4c:a6:4b:26:12:a6:
                    60:91:f9:42:86:6f:90:92:22:c4:56:ed:39:1f:05:
                    4d:f6:57:39:bc:e6:f8:be:39:68:f2:de:f5:f8:f0:
                    17:01:74:e5:25:d7:f6:bd:e8:1d:3a:b8:ed:d0:0d:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C7:96:4D:40:6C:92:E8:34:00:06:42:03:1E:78:50:7F:88:A4:88
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:52:ce:50:59:4d:fd:1d:41:80:ad:e5:00:7c:23:e6:f3:
         aa:a9:80:c1:25:7d:0b:da:c4:19:6a:75:32:40:f4:8e:e5:7d:
         6f:f3:3b:af:52:57:be:80:9a:da:74:e4:0d:0f:12:67:6d:e4:
         81:24:c0:86:17:c4:52:28:38:ac:ed:11:e2:eb:a0:01:23:73:
         88:88:13:4a:c4:00:11:bb:e6:1b:b4:51:ea:02:89:d8:70:6e:
         db:4e:11:2c:04:b8:92:5c:37:0c:f3:0d:ea:44:58:ad:8d:f2:
         9b:fb:80:4d:37:8c:73:6e:27:2d:d2:4c:88:b7:13:57:6c:cb:
         af:f7:1b:2e:ac:6e:35:18:ad:80:53:97:b9:52:57:68:45:19:
         a5:6c:7b:96:4d:67:a8:0f:f8:a3:6c:6d:26:0f:a1:e3:78:d8:
         e3:ba:ca:b5:af:f2:7f:11:a1:a4:a6:24:b2:23:e0:c8:11:74:
         90:81:17:ac:ce:4f:85:08:a2:9e:43:4f:e3:d6:35:64:d6:e3:
         20:ca:a4:7f:03:2b:42:4c:13:ad:a2:aa:e5:da:17:eb:db:37:
         25:fa:31:dd:4a:db:b7:8c:53:94:d1:f9:ef:90:5b:60:27:06:
         4f:dc:c2:9b:26:e7:7a:57:a1:ee:5d:48:94:c7:7c:fd:46:b0:
         f2:4c:6f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:09 2026 by rpki-client