Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
File:                     wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft (raw, json)
Hash identifier:          qlTU1R32kf6gjemHp41GRXkpLPPAqERMse/QenBnS9Q=
Subject key identifier:   08:44:5D:AF:5E:6E:8D:41:EC:2C:2E:0B:C1:56:E5:BF:83:D4:FF:7B
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Certificate issuer:       /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial:       019CAAFD76A012DA46DD20FC2620FA3EAF75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
Manifest number:          0203
Signing time:             Sun 01 Mar 2026 20:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:03 +0000
Files and hashes:         1: 3SgkFgo0LTk2swzrn5dq7YjNcJs.asa (hash: wflGAfTimYQQh20JKmlCe7N9/FvGlFFSJj9BuYPzogQ=)
                          2: Bhwxfe7-2H1mP_yNUtpEged1-GE.roa (hash: lwwOGYlsDe8otoVO3CpnxZxqzeNrxkyEQ5g4/KYMubI=)
                          3: cIXDfR-Jle5Jda3lToN6L1RqtVs.asa (hash: 0Czg9gaAGKAEq6Rfn/gJ1HPiXTpLu7e+YQAdkMW2/O4=)
                          4: kG29gU2oA8IxQBu2izkZt4FiHrw.roa (hash: Mbf2SHQO1ZPAunz6dIhpxmgcYgu15NI5RZRxV0O3xVE=)
                          5: wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl (hash: XAIWcBPWIJtbbQyyTsDo2s9Y0r89/EqQ7jGLtyRPbDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:76:a0:12:da:46:dd:20:fc:26:20:fa:3e:af:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
        Validity
            Not Before: Mar  1 20:01:03 2026 GMT
            Not After : Mar  2 20:01:03 2026 GMT
        Subject: CN=08445daf5e6e8d41ec2c2e0bc156e5bf83d4ff7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8e:f8:15:3d:82:b3:b1:14:d4:c8:bb:d0:f1:
                    1f:cd:3b:0a:19:2c:8e:f2:94:ad:39:d6:24:23:b9:
                    cd:54:7a:7b:58:59:72:fa:2d:08:9e:1a:c6:96:fe:
                    cd:20:9d:66:ac:1a:0d:2b:59:89:53:92:82:6d:bc:
                    97:19:13:f8:07:b8:e4:46:f7:8f:0a:3f:ca:fe:e9:
                    73:ad:3b:b8:99:8b:47:35:d8:22:b2:02:64:d9:5a:
                    91:c3:c2:27:c2:33:6d:4a:e3:0f:58:63:7a:f7:60:
                    eb:11:b0:60:e2:ba:aa:f0:a4:69:ee:f3:bc:43:1c:
                    7e:a5:af:4a:a2:62:84:42:6a:21:0d:24:d5:21:39:
                    94:32:46:a0:0b:20:f5:00:76:ca:fc:79:fd:5e:51:
                    a0:7f:a6:c1:cf:21:13:62:b0:30:53:fa:83:79:1d:
                    f4:a0:f3:0d:f7:d8:41:a6:6e:2a:eb:da:d4:66:48:
                    dd:61:60:b0:5b:65:b4:6d:7c:d5:60:e6:0d:5a:eb:
                    e9:86:ba:83:6a:ce:20:6e:22:1b:17:ba:f0:10:84:
                    1f:d0:d1:5e:c2:93:66:70:8f:13:b3:e8:ce:43:67:
                    71:1e:b0:fa:40:0b:a1:64:13:d0:e8:15:fc:58:7e:
                    7c:52:62:39:60:8f:f2:d6:de:c1:f5:b6:0a:b0:c5:
                    8c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:44:5D:AF:5E:6E:8D:41:EC:2C:2E:0B:C1:56:E5:BF:83:D4:FF:7B
            X509v3 Authority Key Identifier:
                keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c3:de:ad:b0:58:b9:74:c3:10:b5:d1:a0:16:b7:76:25:b5:
         74:1a:e5:c0:7c:f9:3c:49:45:d2:d9:cb:6e:cd:4f:88:4f:fa:
         dc:05:d5:60:95:5c:c8:d3:81:d1:8f:73:81:7b:14:45:e3:44:
         e2:0e:31:98:4e:72:91:5a:fd:bc:a6:0d:82:90:c9:43:33:31:
         3f:a8:d6:eb:c3:f9:61:cd:ac:03:8e:4e:39:3b:c0:21:89:d6:
         16:e8:dd:9e:1c:ed:8b:ff:5d:20:f7:1e:e1:21:e5:3e:b0:a3:
         4c:67:04:d8:30:67:a4:7c:b6:f6:16:92:c8:f5:e0:62:18:1a:
         cd:12:57:59:f4:2e:3a:12:43:77:be:05:28:ad:81:4f:7b:6a:
         d3:98:e5:5a:2e:5f:b1:3c:16:47:84:47:05:93:2b:f7:1a:9f:
         38:eb:5b:60:36:a9:95:c0:4a:a4:2b:77:9d:de:ea:69:de:c6:
         db:4c:1c:8f:33:55:ee:a0:97:a2:91:f2:2e:c3:b4:e2:e0:d4:
         ab:12:f6:51:48:f2:99:c5:a4:c4:4e:6c:ef:8b:0b:78:6c:b9:
         5f:5b:74:fc:ca:c6:75:99:4e:0a:78:ab:fb:44:ac:ec:a8:1e:
         43:43:60:a4:e0:fc:ef:82:c1:96:88:30:12:36:f7:2a:10:81:
         4a:da:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:30 2026 by rpki-client