Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
File:                     wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft (raw, json)
Hash identifier:          DN0BzsSkFybzKFLy3WI8xf1cXI4IHFM8A+LVrmujZRo=
Subject key identifier:   DD:38:7B:52:8D:00:4A:66:87:EF:F2:17:AD:DC:AB:25:E3:FD:62:8D
Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74
Certificate issuer:       /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
Certificate serial:       019CAA58F8E872636681DDFC7E04AF42E236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
Manifest number:          1855
Signing time:             Sun 01 Mar 2026 17:01:23 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:23 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:23 +0000
Files and hashes:         1: B1MCwpAzGhJiIkjH6euu2pNBHy0.roa (hash: SPB9kc0iu/ioqmBFQC6jIyqBWl0rVdS79NKQR/y/v7k=)
                          2: wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl (hash: W46Yok+ogKofBqacuVR1fDDhcdX8cxV8pSaH4SYUXm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:f8:e8:72:63:66:81:dd:fc:7e:04:af:42:e2:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474
        Validity
            Not Before: Mar  1 17:01:23 2026 GMT
            Not After : Mar  2 17:01:23 2026 GMT
        Subject: CN=dd387b528d004a6687eff217addcab25e3fd628d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:77:b3:74:68:e8:11:94:27:a8:10:58:8b:
                    21:3f:26:d3:fc:e4:d3:4f:e9:f8:f3:73:a4:03:86:
                    12:30:29:66:5e:be:e7:59:3a:c7:65:c0:92:69:b8:
                    a0:2d:7e:86:dc:f8:3b:14:bc:10:5b:a9:d6:16:73:
                    08:84:76:57:81:8e:25:bc:4d:8a:67:7d:6e:8b:ce:
                    36:e6:98:3b:e6:7d:de:b7:75:11:5e:ac:29:85:a0:
                    dc:7e:34:3a:21:b6:6d:91:54:e3:92:8a:dc:ca:94:
                    38:a1:69:07:3a:c9:aa:14:77:55:ea:f9:19:3f:4e:
                    da:cb:f8:cb:eb:b3:f7:ef:f1:60:9d:4b:d4:e6:cf:
                    bc:57:f2:f7:dd:cd:e1:8d:54:e8:ea:5a:70:c5:54:
                    c4:92:79:37:4d:76:ca:51:1e:07:ef:b7:1d:ff:22:
                    05:5b:59:ee:c9:c3:7c:76:47:99:ae:a8:81:cd:b8:
                    75:14:5e:7e:b5:fd:0e:87:96:29:fa:a4:ed:c9:cc:
                    fa:b8:58:bb:20:c8:ef:7a:e7:0f:19:38:37:ce:04:
                    d6:c8:99:5c:04:bd:c2:f3:18:50:f1:e6:fb:36:56:
                    3c:d9:bd:68:e4:8f:95:c3:e3:b8:ad:12:4e:cd:c0:
                    f6:9d:6e:3c:e5:73:40:56:85:67:c3:cf:d2:2d:5d:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:38:7B:52:8D:00:4A:66:87:EF:F2:17:AD:DC:AB:25:E3:FD:62:8D
            X509v3 Authority Key Identifier:
                keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c6:a8:ca:b1:5c:06:dc:b3:bb:02:0a:25:25:8e:45:69:ba:
         5d:69:ca:97:5a:ad:d3:3d:02:d0:60:6c:81:b9:31:63:3b:97:
         da:6e:fa:cf:12:7d:63:3f:e3:a6:7f:78:0f:a1:c1:d8:f5:5a:
         1d:c6:c4:b5:50:8b:43:1d:07:08:7e:e4:68:88:85:29:7a:2e:
         11:0e:8d:02:f4:fd:08:a4:ee:35:14:14:fd:0c:3f:53:58:d5:
         8d:ab:c9:4d:a3:77:e7:96:36:7e:05:8f:1a:4a:9e:20:a3:34:
         4e:26:bb:68:e3:ff:bf:00:a2:7e:b1:5a:a7:b5:eb:16:ec:29:
         2d:76:e0:e9:39:a3:a6:d9:df:3c:c8:0d:bc:1f:0a:1b:9c:84:
         5e:46:59:e3:28:83:6a:5d:a1:c9:d4:2b:d6:e0:ac:0a:a8:8e:
         2b:7e:30:da:f4:9a:7d:cb:07:28:fc:09:d4:28:a5:2f:ef:cf:
         27:24:b8:f1:93:da:f4:5d:85:c0:81:36:56:77:e5:46:24:f3:
         f2:ae:18:20:cb:9b:db:0f:40:6d:d7:60:f4:5e:b3:c5:65:dd:
         22:37:03:5f:0a:12:c9:34:43:73:1a:d8:54:73:bb:ff:5f:20:
         7c:4f:e3:ee:23:ef:0e:80:07:f0:b8:59:85:6a:6f:5b:24:6b:
         9d:02:c8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:46 2026 by rpki-client