Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
File:                     wbYHxYUVNn03yfPmmUguV6M8c_U.mft (raw, json)
Hash identifier:          fL74upWrrmearD4XmUq7HjWXkLKPf5yQjKDFd/j5RFw=
Subject key identifier:   13:44:05:07:99:8D:20:44:11:04:EA:EE:D8:AC:A0:18:93:F2:B3:50
Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5
Certificate issuer:       /CN=c1b607c58515367d37c9f3e699482e57a33c73f5
Certificate serial:       019CAB6B17456ED74303A2F4927D4C0ADD18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
Manifest number:          1553
Signing time:             Sun 01 Mar 2026 22:00:47 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:47 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:47 +0000
Files and hashes:         1: luaG9iyuGP8nFZp85aiqtsp0z2c.roa (hash: 9QToNx/tKXCeA3T2RqIfOvqid+nCt4rK1QL6hXksot8=)
                          2: wbYHxYUVNn03yfPmmUguV6M8c_U.crl (hash: orZMG7m/h/io+zqXGO9fSgCwow8Br4W8r/R/SE39gl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:17:45:6e:d7:43:03:a2:f4:92:7d:4c:0a:dd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5
        Validity
            Not Before: Mar  1 22:00:47 2026 GMT
            Not After : Mar  2 22:00:47 2026 GMT
        Subject: CN=13440507998d20441104eaeed8aca01893f2b350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9f:08:7e:72:0d:a1:8c:5a:8a:48:e4:68:7f:
                    d0:2f:c1:97:67:41:db:00:86:da:64:d3:f4:93:5d:
                    42:49:da:90:c8:66:bf:13:a5:1b:05:80:a3:4c:cf:
                    d5:c1:50:de:ba:3f:16:65:02:b9:02:54:3e:c2:a4:
                    ce:32:8d:32:de:89:ea:55:6d:19:2e:f4:fc:4d:11:
                    f5:bf:9f:09:a1:89:50:27:c8:7b:8e:aa:c4:22:6a:
                    bf:cc:51:4c:cc:79:f8:46:d6:69:cf:ed:f7:2f:95:
                    de:84:b3:fd:b2:db:5b:d8:bd:c8:b0:2b:79:30:0b:
                    76:e4:2a:0a:cd:c4:89:c0:3c:17:fd:b5:a9:0b:f1:
                    3b:99:21:32:8b:8e:43:45:dc:81:35:62:65:29:ee:
                    af:a5:da:18:48:c1:1f:1d:be:b2:71:cf:fe:74:78:
                    34:b6:30:b4:8a:4e:1c:a7:0f:79:90:54:47:3a:d2:
                    f6:fa:6d:ef:65:56:85:c1:e7:b4:3c:3d:52:a9:0b:
                    ff:0e:f1:e8:ba:d0:8f:55:ce:fc:26:91:89:eb:21:
                    2a:a1:c7:5f:f5:ca:87:60:dd:73:e3:19:3b:b6:a0:
                    26:51:38:02:04:f9:13:2d:f1:46:5d:9d:e8:83:5d:
                    c1:0e:eb:60:27:ff:f6:c8:26:3d:f7:a8:b8:23:26:
                    cd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:44:05:07:99:8D:20:44:11:04:EA:EE:D8:AC:A0:18:93:F2:B3:50
            X509v3 Authority Key Identifier:
                keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:57:79:62:5b:0c:11:7c:2c:f2:5c:ef:fc:99:3b:f6:71:7d:
         69:ad:0e:ac:8c:e8:3e:02:6c:90:dc:36:35:93:75:49:fc:32:
         22:28:7d:59:b1:0b:c0:1f:51:89:97:b7:96:a3:82:53:7a:a2:
         5d:ba:98:51:85:44:db:41:b2:95:3b:38:7e:b1:76:e5:40:62:
         98:05:cb:2c:8e:9a:34:1a:f4:e2:bd:9e:9d:17:d1:5a:99:3a:
         38:39:55:7b:8a:4d:f4:e0:9c:01:87:4d:70:c8:68:d4:08:ad:
         a5:1e:6e:be:ae:58:4a:34:e1:62:66:76:c7:5c:a3:a5:f0:be:
         68:84:f4:91:fb:d1:43:6d:58:ee:66:a6:9b:89:1a:29:ef:f8:
         3b:12:2c:c0:dc:ff:bb:1a:17:76:c1:81:ad:05:bb:ce:7b:6c:
         fb:6e:00:50:02:e3:5d:aa:23:fb:ac:64:20:57:62:18:e4:2d:
         a5:c4:4a:cf:03:78:b8:47:36:4e:eb:fb:7d:4a:fd:f5:e8:cf:
         e0:61:7c:b8:b4:b3:9a:24:c0:4d:ba:50:58:09:92:80:f9:5f:
         6f:00:be:f9:d1:2f:03:0e:20:9a:dc:77:69:73:7c:50:d6:b6:
         2d:1b:87:bb:5b:dd:02:a8:36:bd:4c:21:0d:3b:d4:eb:37:c9:
         86:28:de:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:13 2026 by rpki-client