Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
File:                     wPvVh2YT7cVuD13kaMzl6yiF_yk.mft (raw, json)
Hash identifier:          JK6ykKsdLtbqTvppbHDH1r3FuEOyH4lbNqToQ+v2r0E=
Subject key identifier:   5B:AE:DD:52:34:C6:BC:89:32:07:A9:0B:CB:C1:EB:5E:F5:DA:A3:03
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       019CAA58BC87F4C5E097453E3CC465207829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
Manifest number:          1850
Signing time:             Sun 01 Mar 2026 17:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:08 +0000
Files and hashes:         1: Bv5Sg8vgi9S842H6dRuR7sJxzko.roa (hash: hT9sbrvQRiXid7sYPnl4Iixs+zdMa4hm1hg6rDtrIYs=)
                          2: K6nvFDqRGh8xVM7IrF0Rd6Raqmo.roa (hash: EVwo0E7SIOBx5iGAFKfj/k4qRw0//D9TaPWIiThqtao=)
                          3: axRaMfkBmO7VzbCGyjkhx1P2A-8.roa (hash: sc0Yj3PBpLZ4CbPFA/VIugOR8JNz2sSyXRFn+nL0m+g=)
                          4: c8rdVYuNpflJD29KauvVYvS5wQA.roa (hash: bC9GRMHN9BrtnveTDOEwyMbzEqZzFN4CkCTMBFjErAc=)
                          5: wPvVh2YT7cVuD13kaMzl6yiF_yk.crl (hash: IR+xmwmPiHVfUbmmoY2lHYc7oBXEWrIKEkPf9EAYPGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:bc:87:f4:c5:e0:97:45:3e:3c:c4:65:20:78:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: Mar  1 17:01:08 2026 GMT
            Not After : Mar  2 17:01:08 2026 GMT
        Subject: CN=5baedd5234c6bc893207a90bcbc1eb5ef5daa303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:10:f7:d1:44:1d:a0:b6:39:24:c2:f7:a4:d6:
                    60:d6:63:7e:0e:c2:01:5f:43:ef:de:48:d9:95:30:
                    21:7a:1b:ae:84:b1:b9:87:65:d8:ce:b8:1d:fa:15:
                    f2:46:60:54:b6:ca:16:22:b3:7b:19:da:29:ed:45:
                    6d:16:a3:8e:60:fc:2b:2b:2c:9b:8d:74:fe:1f:5a:
                    59:29:4e:e7:3c:e5:82:86:68:f7:ce:2a:22:49:59:
                    5b:f0:91:e6:e7:45:35:1e:39:44:78:86:7a:04:a6:
                    97:5b:d7:f4:33:de:89:ef:a2:98:94:6f:9a:a0:28:
                    9a:e1:16:d7:25:91:a1:65:b0:86:eb:cf:e5:d6:28:
                    fe:0f:38:45:d4:58:0c:f4:11:b8:4e:d5:49:5c:0f:
                    11:4d:65:88:0c:29:82:a9:0e:39:76:f5:a6:3a:cb:
                    74:6d:4e:15:dd:5f:3e:18:b7:e7:99:4b:29:48:d5:
                    b7:ab:69:bc:59:44:81:c0:25:2a:75:f5:6c:70:8c:
                    94:3c:58:f6:a1:47:e2:56:fd:1d:62:4c:d2:cd:d1:
                    55:cf:7b:b6:e6:1b:b9:3f:fe:f1:23:1b:78:1e:24:
                    14:f6:a1:ec:29:a6:0b:35:3b:f5:31:c9:be:c3:10:
                    eb:47:e2:cb:bd:a2:86:07:99:76:9d:93:0d:fb:f0:
                    ef:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AE:DD:52:34:C6:BC:89:32:07:A9:0B:CB:C1:EB:5E:F5:DA:A3:03
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ea:e9:f0:b6:1a:cb:f3:83:83:5f:01:61:67:c9:2c:82:6b:
         43:9d:1a:82:73:72:33:5f:30:44:cb:2e:aa:37:7f:72:0f:4d:
         31:43:23:8a:ca:c8:ff:52:c6:0d:91:25:b2:6b:c6:e4:ce:2b:
         da:4e:47:07:52:73:cd:da:06:33:98:d2:82:f1:9a:c1:61:57:
         76:6f:d8:b6:32:cc:f9:70:a9:5e:e5:80:00:76:64:d2:3d:b2:
         bb:fe:f6:19:24:79:af:2f:bf:ab:9c:2c:c5:4b:94:6d:ac:b3:
         ed:5e:c6:03:4d:cb:f2:3e:9b:99:27:5b:2d:0d:36:86:d2:9b:
         4c:7c:94:5e:88:4d:fc:23:6a:b3:61:e6:a9:c0:73:16:7b:82:
         e8:38:b0:fd:8b:01:4f:f1:d2:e1:74:54:ed:b2:75:52:fb:8e:
         75:2b:87:31:2d:73:0a:4a:f2:ce:e9:f0:2a:12:f8:6c:cc:6e:
         10:2a:f2:0f:01:1b:17:3a:14:e9:59:63:45:30:a2:86:41:b4:
         47:85:9d:04:d9:e6:8b:c8:fc:92:8c:51:8c:2a:44:a6:4f:b8:
         70:e7:6e:6a:42:6b:92:ba:a0:5a:95:1f:28:57:09:91:e7:e9:
         cc:2a:aa:8f:e6:82:8d:72:aa:b8:a5:0d:5b:f1:93:19:4e:14:
         01:04:f9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:01 2026 by rpki-client