Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
File:                     WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json)
Hash identifier:          8Yo9RMkpgLt+njPt+GzWSQ8Ds+sCy6lh947ViXEw2Wk=
Subject key identifier:   81:24:8C:A9:BA:D6:F7:23:00:27:47:EF:02:63:19:F4:23:D9:96:00
Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3
Certificate issuer:       /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
Certificate serial:       019CABD8E08AB9E7C5A8B115E8B86F5B6E13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
Manifest number:          07CA
Signing time:             Mon 02 Mar 2026 00:00:42 +0000
Manifest this update:     Mon 02 Mar 2026 00:00:42 +0000
Manifest next update:     Tue 03 Mar 2026 00:00:42 +0000
Files and hashes:         1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: UgTH+jcnKd8Q+xWV3rRRDU33/SJXFqWeYMHpHB+iZtk=)
                          2: nf9-qOnJPmcJsEa5xnCv4Qy4LIw.roa (hash: ybsBDRN+Wgxdd71NM5Q38e+H0vIZjbotj33kAgs43CA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d8:e0:8a:b9:e7:c5:a8:b1:15:e8:b8:6f:5b:6e:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3
        Validity
            Not Before: Mar  2 00:00:42 2026 GMT
            Not After : Mar  3 00:00:42 2026 GMT
        Subject: CN=81248ca9bad6f723002747ef026319f423d99600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:8c:19:59:f9:d1:bd:c9:5f:b3:e6:ff:72:
                    6d:f7:79:a5:88:54:9a:bf:34:d1:35:db:29:54:b8:
                    e2:44:b6:35:e1:40:b3:b1:0a:ac:31:f2:82:ba:56:
                    3b:1c:4e:c8:49:be:9b:88:7b:0d:a5:4e:80:a8:fc:
                    f5:28:5d:44:ff:8a:4d:51:28:9e:31:18:d8:99:1a:
                    27:d7:21:88:97:a3:be:ab:dd:28:8d:da:79:b0:8e:
                    a1:80:c3:25:41:45:9b:0d:9c:13:94:36:34:28:b9:
                    38:e1:1c:f0:1a:5c:c9:0d:b3:01:3b:1e:02:ac:58:
                    60:fe:c9:18:9f:03:fd:5f:81:1e:af:93:e3:e1:92:
                    60:e1:59:3d:78:44:38:10:a6:c5:c0:a9:5c:05:16:
                    bc:1c:a1:af:ad:1d:9e:09:2f:23:ab:34:55:0c:fa:
                    71:e6:f1:45:7f:a5:06:94:b6:fc:84:dd:e5:94:a8:
                    99:f5:d3:33:a0:a2:3f:21:75:fc:bf:0a:34:7f:98:
                    0c:7d:75:17:6e:35:0f:71:8d:b2:79:0f:9b:43:53:
                    0c:32:90:cd:3b:b2:99:37:df:d2:cd:b2:00:39:8c:
                    9e:40:82:81:5a:9f:4d:9f:86:7f:1c:3b:93:c7:5d:
                    03:43:5c:9a:20:b8:62:60:39:0c:22:ba:7d:03:e5:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:24:8C:A9:BA:D6:F7:23:00:27:47:EF:02:63:19:F4:23:D9:96:00
            X509v3 Authority Key Identifier:
                keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bb:b5:92:a6:be:30:86:c5:f8:44:26:4a:f1:1f:4e:ad:09:
         d5:0d:99:0f:ad:d5:41:ec:25:bb:43:8c:c9:29:ec:af:84:90:
         3f:c9:2f:75:1e:ac:ea:5a:6c:06:14:2b:9c:c8:74:ca:70:23:
         40:5a:fa:7d:ec:3e:f7:94:e9:77:5e:72:87:50:2f:5d:ef:db:
         43:ae:2a:80:2e:30:0f:99:2a:b3:8b:5a:6b:85:3a:13:7a:22:
         d7:01:09:9d:c8:57:f1:e0:42:fd:5c:3a:27:1e:93:0a:9f:23:
         5a:65:fd:05:14:55:e8:82:ce:4d:c6:39:c7:c4:37:34:bb:17:
         70:ea:9e:b8:e2:af:8a:e5:b3:50:06:58:6c:65:67:82:6c:f4:
         d2:79:ea:4c:2f:95:1f:c2:63:28:70:21:52:21:b2:ba:70:47:
         83:cc:53:50:a4:3e:e9:75:5b:a3:1b:54:3f:51:61:45:7e:34:
         77:5c:3a:e3:b3:72:9a:1e:2f:84:c7:83:2d:73:34:a4:33:7b:
         33:8a:c4:85:a3:c6:40:43:4b:84:a2:9f:55:3f:5c:87:3d:5b:
         c2:69:a0:23:d2:a8:b1:20:e1:84:63:a0:f2:53:75:41:32:c2:
         83:78:06:a5:bc:b0:9e:f6:92:29:57:79:88:2e:40:56:c8:96:
         fb:1b:30:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:42 2026 by rpki-client