Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
File:                     W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json)
Hash identifier:          HzL4Wb4JaytQV5RV0wwmMgxANa7WgnKnpmC1IsZ3asw=
Subject key identifier:   CB:80:AD:BF:3A:9D:F9:F7:DA:80:ED:57:60:AE:C9:2A:7A:90:B3:9C
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Certificate issuer:       /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial:       019CAAC6A0AF9A335080B38550D8FD049564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
Manifest number:          1845
Signing time:             Sun 01 Mar 2026 19:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:09 +0000
Files and hashes:         1: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: 8iaNFp7P0Ccn53n2f58sxDq7/ftCE3N5408undj42DU=)
                          2: xBMgUB3OiRn5NfPpJr2oznHaboc.roa (hash: Ge6/j/nZc+qoP4ABRM1EYKbSsOCo7dSlgAk6T5wqxkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 19:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:a0:af:9a:33:50:80:b3:85:50:d8:fd:04:95:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
        Validity
            Not Before: Mar  1 19:01:09 2026 GMT
            Not After : Mar  2 19:01:09 2026 GMT
        Subject: CN=cb80adbf3a9df9f7da80ed5760aec92a7a90b39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:73:c2:1a:fa:eb:a7:72:ea:9f:57:2a:59:a4:
                    2e:de:37:d9:8c:21:78:23:37:a9:64:1b:40:a3:ac:
                    2c:67:76:c1:0f:42:8e:94:c4:45:73:fd:bd:a7:93:
                    a6:30:c5:98:0d:b3:e2:83:55:7f:de:6c:91:7c:ac:
                    d9:31:86:cd:d4:70:b1:ad:3b:60:d9:1e:d0:0e:50:
                    68:d5:ff:7e:e8:15:e0:95:0b:c8:3b:d7:ed:fd:37:
                    bb:1a:fe:af:0d:aa:5b:45:b2:2c:ce:91:c0:d3:79:
                    af:11:11:bf:56:77:8a:c9:6a:df:f4:d8:86:75:d0:
                    e9:16:21:f8:aa:21:b6:4b:f9:9f:93:43:cb:af:52:
                    08:88:8a:01:50:d4:36:02:5e:58:3e:06:6e:b2:77:
                    34:cf:f4:83:35:5c:b5:d8:94:4b:19:0b:68:04:fb:
                    41:2f:ba:0c:48:cc:0f:f8:3f:23:18:99:84:23:05:
                    65:c0:40:a0:10:f5:6c:46:33:02:ea:ca:19:8d:fc:
                    53:16:c4:f5:39:19:9f:1d:16:b9:04:64:0e:cf:53:
                    fe:1a:45:72:8d:5b:a1:ad:28:bb:2b:45:8a:93:ea:
                    71:e9:63:ab:f4:27:f2:96:0d:30:f3:4b:91:b4:83:
                    ba:0c:84:5b:e3:46:cb:39:cf:f7:86:2d:09:ca:76:
                    37:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:80:AD:BF:3A:9D:F9:F7:DA:80:ED:57:60:AE:C9:2A:7A:90:B3:9C
            X509v3 Authority Key Identifier:
                keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e5:61:5e:58:91:92:cf:67:ec:44:ef:ff:eb:28:ef:ad:d6:
         8f:d2:8c:24:17:1e:3e:76:11:31:ce:22:6d:71:ea:db:9e:fb:
         0f:ed:07:f8:7f:33:f2:6b:a8:f1:cc:e0:b7:e2:23:a0:d5:0c:
         10:cf:0c:3c:05:e3:79:30:32:98:15:b0:2c:ff:6d:d1:b6:96:
         9c:40:b2:eb:98:fd:8d:a5:36:54:10:d4:fb:87:c4:bf:7c:3e:
         68:91:11:c2:5a:1b:98:d2:3e:70:ff:f6:c9:5b:02:39:3b:0d:
         08:fa:77:31:1d:42:69:3f:f8:b0:da:03:8b:53:17:a3:78:08:
         97:50:00:b4:f4:11:55:a1:b1:e6:cf:fa:37:ae:46:ea:87:02:
         3c:26:1c:70:96:42:ad:68:2e:73:a1:f5:ad:ed:a4:78:c2:ae:
         8c:66:d4:64:6a:46:15:22:cb:50:bd:50:37:b7:6f:c1:21:0b:
         1e:0d:6b:1b:32:1b:0a:f7:f3:56:90:6b:87:28:3c:55:bb:9d:
         a8:81:32:ac:bd:c7:54:cd:59:af:fe:4f:45:fa:21:10:df:0c:
         66:5a:e0:cf:da:cd:14:5c:fd:b8:75:a5:10:5b:be:57:f0:3a:
         41:f6:f0:99:b0:7d:84:37:c4:ba:d5:ad:c0:d5:00:1a:9a:0c:
         2b:dd:4f:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqCvmjNQgLOFUNj9BJVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTk4ZTE4NGQ0ZmM0YWZmYTIwNTA5MDk5ZDkxOWEzMWEw
Nzk0N2IwHhcNMjYwMzAxMTkwMTA5WhcNMjYwMzAyMTkwMTA5WjAzMTEwLwYDVQQD
EyhjYjgwYWRiZjNhOWRmOWY3ZGE4MGVkNTc2MGFlYzkyYTdhOTBiMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnPCGvrrp3Lqn1cqWaQu3jfZjCF4
IzepZBtAo6wsZ3bBD0KOlMRFc/29p5OmMMWYDbPig1V/3myRfKzZMYbN1HCxrTtg
2R7QDlBo1f9+6BXglQvIO9ft/Te7Gv6vDapbRbIszpHA03mvERG/VneKyWrf9NiG
ddDpFiH4qiG2S/mfk0PLr1IIiIoBUNQ2Al5YPgZusnc0z/SDNVy12JRLGQtoBPtB
L7oMSMwP+D8jGJmEIwVlwECgEPVsRjMC6soZjfxTFsT1ORmfHRa5BGQOz1P+GkVy
jVuhrSi7K0WKk+px6WOr9Cfylg0w80uRtIO6DIRb40bLOc/3hi0JynY3NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuArb86nfn32oDtV2CuySp6kLOcMB8GA1UdIwQY
MBaAFFuZjhhNT8Sv+iBQkJnZGaMaB5R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NTE1NTAtMmJiMi00OTM3LTlmNTIt
MmZmOGU5ZDIzZjk3LzEvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NTE1NTAtMmJiMi00OTM3LTlmNTItMmZmOGU5ZDIzZjk3
LzEvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuVhXliR
ks9n7ETv/+so763Wj9KMJBcePnYRMc4ibXHq2577D+0H+H8z8muo8czgt+IjoNUM
EM8MPAXjeTAymBWwLP9t0baWnECy65j9jaU2VBDU+4fEv3w+aJERwlobmNI+cP/2
yVsCOTsNCPp3MR1CaT/4sNoDi1MXo3gIl1AAtPQRVaGx5s/6N65G6ocCPCYccJZC
rWguc6H1re2keMKujGbUZGpGFSLLUL1QN7dvwSELHg1rGzIbCvfzVpBrhyg8Vbud
qIEyrL3HVM1Zr/5PRfohEN8MZlrgz9rNFFz9uHWlEFu+V/A6QfbwmbB9hDfEutWt
wNUAGpoMK91PXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:24 2026 by rpki-client