Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          qEoIfwyBrItoBJDeLgabBuiantEtjUeJJUc79PVyBEE=
Subject key identifier:   C5:9E:D1:B5:64:13:80:CC:9E:39:A5:85:E4:68:23:0F:79:C3:9D:1E
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019CAC4706327B0C11B57F97CE07017CE31F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          12C4
Signing time:             Mon 02 Mar 2026 02:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:01 +0000
Files and hashes:         1: 0Y8N1-0fJLBE_HY8U_P2_6WVc1w.roa (hash: +jTSNuKfxuCvHo1F5dM5RaYN/hFX2mIW99lx2JVtRD0=)
                          2: kV0lhF3sNCXctsdeBYv_Jwm1Yww.roa (hash: oKX1XUar7ntV2+pEAw7ilC7z6D/uvm342LvGsth66is=)
                          3: loJlqq3qXuCu-dkSIlY72SrCnbU.roa (hash: 5OLtUAD6inbOq/tzv2K1YJFeXJFtMDnKAXlws3rJ/lw=)
                          4: ryDpy6cdN2x4PxzZve738-RUKps.roa (hash: 7P6XIPn0h99li8ImXCuSS48Xd7ty7D1xcOSjTfq3Khg=)
                          5: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: NKKaXBJs+sUbKwnfuEY2Pi8/Z/CRzhHThlOrFlCc38o=)
                          6: xF6DSfpWjHY3DSnY4quSmS7ktcA.roa (hash: odbQ9fjuabZiW5G2VLqBK8Bk/nuyTPF9z/+wCBqDPfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:06:32:7b:0c:11:b5:7f:97:ce:07:01:7c:e3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Mar  2 02:01:01 2026 GMT
            Not After : Mar  3 02:01:01 2026 GMT
        Subject: CN=c59ed1b5641380cc9e39a585e468230f79c39d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f2:aa:ec:fd:c7:09:7f:81:3b:74:80:fd:e8:
                    89:5d:b3:52:13:75:a8:8d:f9:2b:0d:c3:9b:e1:4d:
                    b5:ec:b8:c7:ef:9d:c5:3e:8b:a9:a5:95:b7:d3:42:
                    b1:b0:89:5c:ab:ed:c5:22:cc:3a:a4:7d:10:8c:cf:
                    72:d5:8d:65:ea:7d:17:37:eb:2a:16:1d:bb:14:94:
                    d8:9e:63:bf:75:0a:ce:54:cd:07:88:c8:67:c4:24:
                    82:34:04:c4:06:74:e4:35:bc:aa:8b:c0:fc:16:51:
                    8d:2c:18:36:25:90:3a:cc:17:97:c1:45:cc:a1:e0:
                    27:56:94:7d:43:f6:17:32:4e:33:80:0f:40:9e:91:
                    54:83:5d:9a:c9:cb:8c:fa:77:6e:23:7d:4a:2a:37:
                    58:99:37:99:86:c1:b0:5a:9c:97:a7:8d:ef:19:a1:
                    94:3b:89:fe:3b:5c:41:68:d3:39:29:44:a8:86:f9:
                    06:50:8b:03:e4:2d:9f:85:ed:2b:8f:f8:cf:0b:4f:
                    82:bc:f8:46:31:01:bb:e3:10:ba:01:33:68:22:c4:
                    80:0f:52:f7:b6:7d:a8:94:d0:23:2b:0e:07:6b:02:
                    68:55:34:94:5d:e1:cf:14:c0:9b:dd:ab:8a:46:be:
                    d2:1c:7b:35:85:45:7f:8c:f2:78:ac:7b:ac:a8:bb:
                    f9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9E:D1:B5:64:13:80:CC:9E:39:A5:85:E4:68:23:0F:79:C3:9D:1E
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:be:6b:3e:1a:a0:0c:79:28:ce:8c:df:e7:12:95:e1:2c:
         b9:09:fa:44:03:e6:9b:52:6e:84:02:d4:0e:32:1f:63:b1:85:
         1e:eb:e0:eb:bc:b5:95:c4:68:e7:4a:bd:64:ca:22:2a:2a:dd:
         e5:b3:92:36:97:52:84:d5:0b:63:b1:0a:4a:da:77:1a:ba:12:
         cc:0b:99:d3:dc:39:df:73:82:62:44:5f:66:11:0d:61:16:27:
         c0:76:fa:2b:85:48:19:19:9f:0d:44:be:c4:06:ba:35:3a:a2:
         9d:ba:1f:b5:83:46:b1:83:53:39:53:b5:f1:06:1d:21:82:57:
         77:98:d1:f2:c6:16:52:e4:64:4d:73:67:d7:a8:a9:eb:64:8f:
         f0:9c:8c:74:8f:bf:38:7b:0a:56:35:4f:9e:02:f6:63:3f:49:
         d3:e2:e6:9f:a9:e1:d7:7c:57:e0:ec:b1:e9:75:84:1a:b6:8e:
         88:bd:a3:08:9a:bc:4b:55:90:52:03:2c:0a:11:8a:64:f5:4a:
         5d:b0:77:50:14:60:30:9b:40:5e:9c:11:81:1e:b3:6c:fa:de:
         a6:3d:c7:2e:3e:44:97:a2:2a:d1:26:3a:1d:a8:5a:c5:f2:78:
         ec:6e:b7:d8:b8:e4:5e:7b:a5:f7:e8:8e:5b:fb:b6:5c:fd:03:
         64:c6:4a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:10 2026 by rpki-client