Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File:                     wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier:          NByjU4zgY3DHDa2ThUHwVwGnrrNR7suGYvekBnAjAa8=
Subject key identifier:   EC:A6:D5:1F:D9:DB:CC:69:BD:88:AD:F5:68:8E:77:8E:A3:C3:C0:49
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       019CAB3413A86D78CD1981BC3ED20D14FCB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 21:00:42 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:42 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:42 +0000
Files and hashes:         1: E6j5x-9cUF2jZ4o83WvGg6QS0fk.roa (hash: y8rSEBRdZoC/DsraWGFCwBOgPT4J+IhEzX382mx+Nv0=)
                          2: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: 0YkahZ/fsxge4WizKxsvfKF0VyGF+d2oPMUWFrpH6PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:13:a8:6d:78:cd:19:81:bc:3e:d2:0d:14:fc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: Mar  1 21:00:42 2026 GMT
            Not After : Mar  2 21:00:42 2026 GMT
        Subject: CN=eca6d51fd9dbcc69bd88adf5688e778ea3c3c049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:eb:d6:cb:ed:2d:d8:e9:b1:18:d1:59:7f:
                    89:e8:68:d0:1b:6c:60:87:f0:7d:87:5a:7e:2c:a9:
                    28:4d:c4:51:b7:11:63:cb:68:c0:64:8a:25:e8:37:
                    db:5a:78:42:b3:aa:07:51:e8:1a:84:55:58:0f:4c:
                    ac:54:dc:dc:2b:71:a0:57:00:eb:f5:95:fe:61:42:
                    a4:9c:7e:35:b8:1b:9d:aa:b8:c3:99:95:6d:49:c4:
                    33:ee:8e:e1:dd:07:18:61:6d:1f:e3:ec:b3:47:10:
                    d8:af:a7:43:50:93:d3:88:31:33:e1:5c:8a:58:2f:
                    ff:d7:22:84:58:ac:c3:8d:c6:ad:01:e9:8c:f5:68:
                    21:0d:ce:77:e7:d2:15:d8:2e:eb:43:5f:0f:03:6a:
                    3e:6a:c2:83:af:d4:a4:e4:76:64:c3:a0:48:dd:c2:
                    4c:eb:40:8c:d2:0e:ec:4e:3f:e9:f2:b6:c1:79:ec:
                    65:93:1c:8c:1b:06:5e:c3:b4:51:1c:5b:85:de:e8:
                    94:10:8d:83:5d:95:97:bb:8f:8f:21:68:95:ab:15:
                    48:bc:40:86:a0:08:9f:1d:95:a1:ff:31:9d:04:32:
                    e5:9a:48:80:1a:4d:81:db:05:dd:87:30:4f:9f:99:
                    82:fc:49:b5:e1:90:ec:ce:c4:b1:00:aa:ce:e1:43:
                    e8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A6:D5:1F:D9:DB:CC:69:BD:88:AD:F5:68:8E:77:8E:A3:C3:C0:49
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:96:6a:5b:37:d1:cb:cb:ef:ca:2d:5c:00:43:ab:3e:7b:26:
         92:b3:c1:44:46:c4:da:c6:f4:13:fe:31:57:1c:68:8d:b2:05:
         69:d2:62:6b:9f:9c:53:dc:02:92:4d:c2:df:26:01:87:33:d7:
         5d:89:46:bd:d4:a0:dd:fb:bc:5a:c4:dd:0f:77:38:b6:b1:5c:
         b6:5c:98:4f:7e:b1:50:df:b8:9e:5d:da:18:47:d0:a9:34:4f:
         30:07:40:20:e9:77:6c:07:dd:4d:98:3b:38:d9:f3:a7:6b:60:
         21:61:4c:d6:8a:a2:19:7f:8a:dc:d3:46:b8:9a:9e:c7:46:d2:
         0d:bf:88:ca:0d:2d:ce:f1:f1:09:96:e0:1f:76:4e:90:0b:dd:
         5f:07:51:f2:05:6a:f0:f2:6a:80:45:fe:e7:3b:71:e0:6b:64:
         6f:32:52:95:79:a5:94:2f:b8:a3:ca:91:46:59:84:16:62:62:
         0b:3f:56:11:ba:ca:98:46:1a:d3:55:3f:57:13:be:9e:96:ff:
         d3:03:d9:9e:d2:a2:92:9e:85:5b:aa:41:75:b0:d0:ff:2f:dd:
         94:0a:ce:cf:3d:40:af:b0:4f:e4:60:68:3f:99:9c:0f:97:c7:
         a1:7f:b1:f8:7c:65:a8:1c:34:56:c4:f3:68:c4:28:64:92:7d:
         0f:69:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:56 2026 by rpki-client