Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
File:                     wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json)
Hash identifier:          97FF5cAx6iN0uCcKguC3g2UNg697Y5kDBrBBvUzI9qo=
Subject key identifier:   5D:3E:70:33:FC:65:03:3A:AA:F9:FA:A7:F8:58:D1:8F:0A:76:CE:FD
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       019CAD22887A3A9D7961759A3CF9EA9E7A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
Manifest number:          1850
Signing time:             Mon 02 Mar 2026 06:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:47 +0000
Files and hashes:         1: U4zW5QS2curvW1WWlXvfaZ-FFgE.roa (hash: urvPIf0emVxN+h0vEZuEnLmYIlJrl/akSOeGv1xVrhA=)
                          2: ctn8OcjHsscIiuWYKmIzKXk2VTM.roa (hash: MIK/LTNuaSONUvFAQ4mc503oI5bKuGPz3d2eDJ+oDhw=)
                          3: nqeAxh-Zvj9N-HZ0Z_oqfMzPECY.roa (hash: EA0w8mnUHsfVGiJBXY9XWwK4qgczfc6YuAq1VlWZzqM=)
                          4: vpaPc9gcyQc1zzzbJkF9n75zDFw.roa (hash: 8O4KfD0Ddn9u3Kh4fXZU6pj1hG4jVkxChi5IINDrduI=)
                          5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: tVgpy+TjS7idtAscVQ46/6JsB8LSKDGLlYCFP4UmVqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:88:7a:3a:9d:79:61:75:9a:3c:f9:ea:9e:7a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: Mar  2 06:00:47 2026 GMT
            Not After : Mar  3 06:00:47 2026 GMT
        Subject: CN=5d3e7033fc65033aaaf9faa7f858d18f0a76cefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:54:d5:e3:06:1b:b6:34:b2:dc:22:ec:56:
                    37:4c:72:aa:02:67:6b:74:3e:6b:0d:7e:06:6e:58:
                    93:ed:64:61:cb:d9:c9:1b:24:86:2b:e6:b4:6a:70:
                    0e:24:87:43:6b:2f:ce:fd:89:52:f7:6a:17:29:f8:
                    f4:1c:30:bb:9c:c7:55:a5:6f:d9:28:e1:3f:d9:42:
                    cb:0c:12:e3:0e:35:7a:21:14:65:96:1d:3f:df:13:
                    6d:43:b9:a5:aa:72:58:49:1a:f8:1e:0c:04:9b:e3:
                    e3:c9:c5:04:80:3d:6e:2d:e9:45:98:ec:62:09:aa:
                    c0:fa:5e:a9:a2:42:83:a1:04:78:e0:38:60:36:5e:
                    7a:9f:b8:3e:75:b7:f7:52:c9:b0:dd:74:e9:24:b4:
                    99:a4:a1:f6:f0:ca:96:57:c7:29:5f:ec:18:dc:0b:
                    22:4a:3d:35:c7:4f:38:09:da:d9:9c:f8:f4:95:2a:
                    1b:f5:ba:75:c4:f2:5f:e1:24:30:f8:02:a7:d4:2e:
                    bc:eb:99:ff:39:82:92:9b:94:d0:0c:6e:ed:22:ff:
                    95:f2:52:01:ee:a8:b5:f0:54:43:88:2f:5e:84:61:
                    7f:f7:0d:25:92:99:a1:09:b2:80:3c:eb:8b:f1:6d:
                    e2:99:26:ad:d1:ca:e8:55:b5:51:df:20:46:26:83:
                    0a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3E:70:33:FC:65:03:3A:AA:F9:FA:A7:F8:58:D1:8F:0A:76:CE:FD
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ac:a5:36:01:d9:e1:e9:43:77:6c:cc:ab:01:29:14:a6:53:
         91:36:34:67:10:2b:cd:eb:81:f2:b7:a8:d5:84:cc:72:a4:ce:
         2d:30:b3:b0:3b:49:74:63:08:ff:fe:40:60:be:95:ff:0d:20:
         d7:8f:a0:99:fa:0c:d6:b9:a9:31:eb:93:06:e4:f2:c1:3f:0b:
         62:7e:72:b8:79:91:32:dc:98:ec:1b:9c:c7:5b:d6:97:a4:98:
         b9:fb:87:7a:e2:f9:db:c2:00:01:fd:49:13:a0:f2:9a:15:81:
         29:5b:35:ff:17:f8:5c:fe:f9:72:53:e7:2e:f8:4e:9e:0a:67:
         43:e1:0d:12:e3:36:03:05:6b:7f:68:c4:ed:df:36:47:9b:62:
         33:aa:7c:ec:9f:f1:a3:86:3f:1d:26:ce:2e:7c:54:dc:59:6a:
         80:66:63:b2:0c:99:09:07:8d:cc:2b:d7:f4:6e:26:f2:29:16:
         e6:b5:3f:7c:68:76:d1:b4:ad:d6:7e:60:90:d4:c6:7e:74:ed:
         4f:c3:23:32:d9:8d:8d:59:cc:4e:2e:d7:80:75:5f:54:e4:e9:
         17:7e:b0:cc:7e:2b:10:69:38:4f:5e:55:a2:a7:66:14:c6:92:
         db:c8:44:47:bd:9f:69:9e:95:43:f6:1d:e6:08:2e:13:20:30:
         c6:5b:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:57:10 2026 by rpki-client