Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File:                     ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier:          nR7I0pBnhD5Yb+jGSTphRC4vMYYgcFM/YGl5PZMdMgA=
Subject key identifier:   07:3E:B4:37:DA:56:85:F5:12:09:EC:16:53:4F:C6:A8:1E:70:C9:39
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       019CAC471B08D07EC93B69CE8B1033201FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number:          0CC7
Signing time:             Mon 02 Mar 2026 02:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:06 +0000
Files and hashes:         1: GLvPs0b1150wgYEEGQh-rwy7VDM.roa (hash: yvNeNIbqO4LTnxIc0b0IA4sXErDdh1eRPLh4/uTPm/4=)
                          2: bM8ylzi-juLOcTs8he0_ihn2-Lg.roa (hash: WIBob7fZMLUTFgps19iz8qcrHP4DZX+mfV40VJTLBzA=)
                          3: deFJyq-loxsXWYEGsfUyIqVEnaI.roa (hash: pe36ZWMKjKJ3AsbDsw9+j06cZoB7uypgPTBqwG74rnE=)
                          4: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: GY65cemvumtZywZ8k0cPPaRS21SnPSGhf2dkOSELcKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:1b:08:d0:7e:c9:3b:69:ce:8b:10:33:20:1f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Mar  2 02:01:06 2026 GMT
            Not After : Mar  3 02:01:06 2026 GMT
        Subject: CN=073eb437da5685f51209ec16534fc6a81e70c939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:20:12:a8:7e:03:db:a4:82:9a:72:72:bd:42:
                    27:c4:e9:05:3e:a0:b7:f1:98:53:1f:d0:4f:54:b7:
                    b5:7b:31:09:89:e2:f7:21:94:09:06:cb:0a:0d:15:
                    60:b6:1d:9a:f2:48:e8:df:e1:26:cc:c9:52:3d:d2:
                    6a:35:e0:ee:38:c6:2e:05:d7:f9:95:44:7c:0e:ac:
                    53:c3:6f:ee:db:78:38:52:84:b8:01:99:a0:14:14:
                    76:da:b4:74:34:42:aa:28:7e:c7:26:39:b4:44:7c:
                    cb:06:99:98:b9:4f:05:30:ce:50:07:c1:80:63:b0:
                    69:b2:f1:82:fe:bc:92:c9:1f:6e:b0:7e:15:b8:eb:
                    cb:bc:61:7b:1d:95:97:10:8d:c6:8a:09:ac:81:6e:
                    0f:d8:bf:8a:d6:b2:33:2f:36:fd:dc:87:9d:7f:00:
                    db:11:3a:01:86:23:77:74:26:74:bd:45:f9:10:88:
                    f7:f0:d5:64:54:79:82:04:8a:ba:27:30:69:d9:77:
                    2a:25:89:58:13:d6:54:ee:dc:21:54:29:2a:59:c5:
                    b7:f2:8d:cc:4a:0f:bd:ce:03:2f:cc:62:79:7c:ec:
                    d1:46:a8:30:9a:f9:1f:e2:f0:a7:b7:7e:0c:e8:77:
                    a4:4b:23:d5:f9:b8:1c:63:4e:e1:a5:5e:a8:cd:22:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:3E:B4:37:DA:56:85:F5:12:09:EC:16:53:4F:C6:A8:1E:70:C9:39
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:73:09:22:f2:ec:a5:5e:d6:59:52:c9:1f:be:c0:bc:16:bb:
         89:b5:40:91:b8:00:fd:f0:3b:11:85:56:f5:ad:73:f3:5f:13:
         ff:1e:80:18:29:3c:f7:9b:36:c6:bd:c8:30:26:9f:96:fc:d7:
         71:f3:df:29:58:39:47:70:e1:bf:59:26:b5:71:a1:15:44:31:
         02:12:8c:43:0c:18:a7:3e:d1:7e:3c:f0:f4:da:64:6a:28:da:
         d6:80:7e:02:e1:7a:be:7d:ec:1a:60:58:0d:1d:aa:e2:24:c5:
         96:99:ed:dc:4b:40:10:f7:b0:cd:3e:7e:34:b4:8d:a3:38:4d:
         dd:b6:a4:6a:81:48:d5:fb:ae:f0:72:ab:89:38:75:84:ce:72:
         01:33:6f:78:b0:5e:cd:a6:e9:10:0d:fd:8d:3a:e3:6d:af:46:
         08:ae:c2:99:c0:7c:00:9f:e0:6f:e1:82:68:52:c9:60:f0:e3:
         a7:4f:c4:63:e0:0c:cc:7f:bd:d6:19:f6:77:f3:18:85:8e:04:
         99:fd:52:53:4f:ed:43:eb:9e:a3:e3:e3:08:3c:94:d2:34:1d:
         0b:48:88:e0:04:f0:71:4e:24:09:ec:10:cf:23:cc:cf:d8:21:
         02:37:e8:cb:fe:24:d6:9f:cd:3d:2a:72:13:bc:d0:47:d9:3e:
         c2:3e:01:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRxsI0H7JO2nOixAzIB/YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyY2UwODE0MTY3ZWFhODE4OWZkODRkMzkwMjcwZWFkZjI5
NDgyY2IwHhcNMjYwMzAyMDIwMTA2WhcNMjYwMzAzMDIwMTA2WjAzMTEwLwYDVQQD
EygwNzNlYjQzN2RhNTY4NWY1MTIwOWVjMTY1MzRmYzZhODFlNzBjOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriASqH4D26SCmnJyvUInxOkFPqC3
8ZhTH9BPVLe1ezEJieL3IZQJBssKDRVgth2a8kjo3+EmzMlSPdJqNeDuOMYuBdf5
lUR8DqxTw2/u23g4UoS4AZmgFBR22rR0NEKqKH7HJjm0RHzLBpmYuU8FMM5QB8GA
Y7BpsvGC/rySyR9usH4VuOvLvGF7HZWXEI3GigmsgW4P2L+K1rIzLzb93IedfwDb
EToBhiN3dCZ0vUX5EIj38NVkVHmCBIq6JzBp2XcqJYlYE9ZU7twhVCkqWcW38o3M
Sg+9zgMvzGJ5fOzRRqgwmvkf4vCnt34M6HekSyPV+bgcY07hpV6ozSKt+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAc+tDfaVoX1EgnsFlNPxqgecMk5MB8GA1UdIwQY
MBaAFMLOCBQWfqqBif2E05AnDq3ylILLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEt
ZTc3MTdiMjg3MDY2LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lOTVlNzktMjcwMi00MGUwLTliOGEtZTc3MTdiMjg3MDY2
LzEvd3M0SUZCWi1xb0dKX1lUVGtDY09yZktVZ3NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnMJIvLs
pV7WWVLJH77AvBa7ibVAkbgA/fA7EYVW9a1z818T/x6AGCk895s2xr3IMCaflvzX
cfPfKVg5R3Dhv1kmtXGhFUQxAhKMQwwYpz7Rfjzw9Npkaija1oB+AuF6vn3sGmBY
DR2q4iTFlpnt3EtAEPewzT5+NLSNozhN3bakaoFI1fuu8HKriTh1hM5yATNveLBe
zabpEA39jTrjba9GCK7CmcB8AJ/gb+GCaFLJYPDjp0/EY+AMzH+91hn2d/MYhY4E
mf1SU0/tQ+ueo+PjCDyU0jQdC0iI4ATwcU4kCewQzyPMz9ghAjfoy/4k1p/NPSpy
E7zQR9k+wj4BjA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:45 2026 by rpki-client