Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
File:                     wtJUnY0AZ6NyMjzHbY7gECt02DM.mft (raw, json)
Hash identifier:          lUxhz103A7cfvZp20RHkzj2LpKoAFxH3D6siFUFqbpk=
Subject key identifier:   F3:DB:5C:A5:F2:B7:4A:B2:0E:D4:E0:7F:CC:79:EE:73:FA:3D:49:6F
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Certificate issuer:       /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial:       019CABD9F564CA6864B0395C24A597605A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 00:01:53 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:53 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:53 +0000
Files and hashes:         1: MIazZm73J3YwzDUp7bbsr8kuYL8.roa (hash: 0MU6pwWH6FcxJwPXNIBjVTh4xH74vYZeOmkrcb5dOy4=)
                          2: wtJUnY0AZ6NyMjzHbY7gECt02DM.crl (hash: KkssxJKh3pNKI340chVcA0bC1bFFkoaqC1US5OOdx9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:f5:64:ca:68:64:b0:39:5c:24:a5:97:60:5a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
        Validity
            Not Before: Mar  2 00:01:53 2026 GMT
            Not After : Mar  3 00:01:53 2026 GMT
        Subject: CN=f3db5ca5f2b74ab20ed4e07fcc79ee73fa3d496f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:5e:4a:16:74:a7:33:54:0c:c3:a0:e1:6e:
                    61:75:24:eb:01:66:a5:7e:f1:cb:ba:ce:9e:b7:b7:
                    b6:cd:b2:41:98:9d:9c:b5:0d:a7:fb:8c:65:ba:3e:
                    10:b9:f4:ca:e4:32:d7:a9:83:16:4e:44:9e:cf:38:
                    1b:27:be:a3:90:74:a0:8e:88:7d:27:5d:c7:90:84:
                    f5:df:63:9e:ac:1d:9e:61:3e:f0:7d:b8:f8:fe:ad:
                    41:e3:a4:ad:40:7d:88:77:c5:72:e7:35:9d:15:c2:
                    be:b5:c1:d2:50:64:08:11:22:bb:93:55:c5:f5:80:
                    6f:0f:99:df:28:ac:3f:92:1d:2c:72:bc:f0:b4:9f:
                    a3:aa:f8:3e:89:94:9e:f3:be:12:7b:d4:a4:d8:6b:
                    d6:54:e2:04:0d:29:22:c0:70:52:42:64:f6:95:48:
                    b3:50:71:4f:aa:2b:98:20:74:98:fd:d6:c2:1e:f5:
                    3c:09:a8:d0:aa:c1:27:98:df:b5:0a:a5:3d:89:76:
                    f3:b1:ba:13:20:6e:88:88:87:41:cd:c7:be:75:47:
                    29:ae:71:17:60:51:e0:6f:8e:90:36:d6:6f:04:e7:
                    e1:23:e0:ac:c7:e8:8f:83:e6:fc:6a:67:08:4e:3f:
                    6e:82:7a:e4:c6:a2:28:77:87:67:a1:a4:13:1e:14:
                    cc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DB:5C:A5:F2:B7:4A:B2:0E:D4:E0:7F:CC:79:EE:73:FA:3D:49:6F
            X509v3 Authority Key Identifier:
                keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:1c:ec:87:18:38:12:b9:fb:43:ae:09:ef:3b:7c:e9:8a:
         17:36:ca:a0:dd:3d:47:1f:c7:b6:b3:a8:1f:22:17:e2:ca:dd:
         ce:0d:c3:ac:55:d0:7c:d4:80:f2:f6:59:f5:92:a3:6b:c5:d7:
         b5:14:04:5e:80:da:b8:4e:85:18:04:4a:69:21:c2:fa:1b:f5:
         d3:a4:7e:49:ec:a1:17:a5:ca:eb:e6:d2:a6:cd:12:d8:e0:5d:
         63:fc:42:9d:a2:a4:80:37:49:9a:07:7d:5a:3f:ac:d4:d9:64:
         25:f2:e1:90:bb:09:20:62:a6:fa:25:77:0c:a2:f6:9f:87:5f:
         ea:a0:b5:7b:d9:55:b3:ba:ae:3e:74:7d:0b:30:93:4e:a4:c6:
         55:13:65:81:0f:07:b2:f6:05:4e:50:e4:52:0c:29:7f:81:20:
         30:db:9d:92:44:ee:86:35:73:f0:40:c3:b8:b3:4d:e7:76:68:
         48:65:e9:f9:9e:e3:09:c4:f9:f4:0e:9c:50:56:50:ea:74:8e:
         91:86:67:ec:52:b9:41:49:9a:3b:c1:f0:8f:8c:40:95:24:31:
         53:70:7b:61:9e:5d:4a:e0:46:14:9c:cd:2d:08:7e:4d:1c:2f:
         2a:bc:7f:7f:a6:c1:07:f9:80:3c:a1:ac:30:7f:43:58:9a:8b:
         1a:71:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:32 2026 by rpki-client