Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
File:                     wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft (raw, json)
Hash identifier:          KRg4s90/yqrdx3AI3gV5NWx4yVRv1m8JEVLtR9KN/Y0=
Subject key identifier:   E7:9A:1A:61:88:B4:16:F6:9C:76:58:45:52:22:43:9C:2D:C9:13:22
Authority key identifier: C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4
Certificate issuer:       /CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
Certificate serial:       019CAD2299E1DF248AB86654BBC5F7C0E62E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
Manifest number:          0568
Signing time:             Mon 02 Mar 2026 06:00:51 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:51 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:51 +0000
Files and hashes:         1: J2ac7yBZ1rddlP4OYM3qXYokeC4.roa (hash: 661rctvmo5buxvwD1rNnJJOMy13YlgHsaEVyiDN+3aA=)
                          2: wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl (hash: lK3Li6NfkBOQpyVqB7Uu9W6oOneA97IzinUHSf1J/rc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:99:e1:df:24:8a:b8:66:54:bb:c5:f7:c0:e6:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1173f47ec1d92e7886ea2907ff927ee17cbf2f4
        Validity
            Not Before: Mar  2 06:00:51 2026 GMT
            Not After : Mar  3 06:00:51 2026 GMT
        Subject: CN=e79a1a6188b416f69c7658455222439c2dc91322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:78:cc:b2:08:a1:27:db:d3:1a:b8:45:6c:
                    01:02:a1:8d:ca:13:bf:92:66:c9:82:37:2d:fb:39:
                    70:28:24:61:ca:c1:b8:94:e1:ea:15:6d:58:0b:5e:
                    60:b2:fc:1a:41:f9:52:f7:51:0e:9f:a1:7a:7a:5b:
                    73:b8:bb:42:e1:7b:71:db:8a:93:fe:26:1c:55:93:
                    dd:8f:b5:e8:e6:55:50:69:bf:21:21:99:c2:aa:36:
                    bf:f4:2a:a9:5d:6e:bd:c6:43:c3:f5:d8:18:32:21:
                    b5:06:75:b0:b2:31:79:76:67:7f:8a:0f:e0:da:9a:
                    26:b6:c0:47:cd:0d:ec:05:40:5e:a8:df:d0:80:a3:
                    51:11:7a:6e:dc:f5:8d:cb:0f:17:25:83:25:cc:99:
                    78:4f:e4:65:1d:a0:77:88:6d:59:b0:cd:a9:23:bd:
                    b7:84:fc:e5:32:b9:0c:16:0e:83:7f:b3:68:1c:6c:
                    b5:47:ef:7c:da:db:5e:b8:93:e6:17:2a:1e:2d:b6:
                    30:49:fb:73:1c:25:84:b0:aa:56:61:3a:b0:12:59:
                    6b:c0:20:bb:24:70:e8:5b:0a:c5:48:31:78:44:fd:
                    4b:f1:e5:5a:11:9d:30:0d:b8:b7:0c:16:3a:0f:49:
                    02:00:6b:6a:67:98:95:29:2d:5e:64:9a:a4:b6:70:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:1A:61:88:B4:16:F6:9C:76:58:45:52:22:43:9C:2D:C9:13:22
            X509v3 Authority Key Identifier:
                keyid:C1:17:3F:47:EC:1D:92:E7:88:6E:A2:90:7F:F9:27:EE:17:CB:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRc_R-wdkueIbqKQf_kn7hfL8vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ef188b-62e9-4fd6-97f0-bb39329f87f3/1/wRc_R-wdkueIbqKQf_kn7hfL8vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:62:93:43:38:41:b9:c7:7b:31:4d:6f:5a:0b:59:10:ea:9f:
         f1:57:ea:d0:6f:79:2b:f8:3a:8a:f4:a2:f2:6f:45:5a:68:74:
         55:af:c4:17:47:61:d1:6d:ba:04:05:7f:fe:13:63:0c:cd:66:
         87:2d:60:15:b5:14:f0:35:a2:79:ec:05:f6:a3:41:05:63:9a:
         6b:2a:42:b5:e5:ab:0f:8b:73:88:3c:bf:26:3e:6e:76:c2:90:
         11:2a:7e:4f:92:58:9b:4a:ae:2c:87:b2:de:31:68:cb:70:0c:
         d5:7d:d5:df:2f:c6:2b:74:8a:1a:fc:7b:18:ae:70:92:7e:00:
         4b:b8:6b:df:3b:eb:97:e4:c1:dd:d7:d1:c8:2b:9d:60:20:48:
         a1:98:74:4d:5f:67:ba:9a:98:d8:46:98:4c:13:44:18:47:2a:
         36:f0:9f:38:bd:7a:55:28:fd:aa:2e:c8:14:75:22:94:56:6e:
         d5:f3:d3:e8:da:53:f2:ce:95:be:5e:58:7b:4a:ab:63:5a:0b:
         0c:91:d3:21:0f:30:c5:57:46:2e:78:9c:e8:ba:34:35:01:7b:
         8f:42:59:05:ad:96:ff:67:aa:42:db:2c:f3:66:54:a7:a2:a8:
         7c:d2:a9:14:53:93:6b:64:de:3c:fa:95:59:77:e3:04:28:8b:
         3a:ff:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:48 2026 by rpki-client