Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
File:                     wpN7lGGj0mbpNYNOUEehgiODYsg.mft (raw, json)
Hash identifier:          wwxf7pXwCpoDyOX5/7sWF91AJsOgo/0E9Nf3htnnePA=
Subject key identifier:   7C:B4:29:21:86:A7:EE:69:8C:71:03:FB:F0:7F:3C:AB:2D:4E:F4:12
Authority key identifier: C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8
Certificate issuer:       /CN=c2937b9461a3d266e935834e5047a182238362c8
Certificate serial:       019CAAFD8755ECD1755BA95453F0C4290EA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
Manifest number:          1848
Signing time:             Sun 01 Mar 2026 20:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:07 +0000
Files and hashes:         1: 0GT7y41M2U2Z4n9p1prIFuSSpCU.roa (hash: 5PN+tyrRAZ9I2OtQw0DrVEloHpHu5PekIGAzz+vR1XM=)
                          2: wpN7lGGj0mbpNYNOUEehgiODYsg.crl (hash: oyaHZQy7sKl2RGz8bbFCaDNBCXw+nTYxKbWLEpU3imY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:87:55:ec:d1:75:5b:a9:54:53:f0:c4:29:0e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2937b9461a3d266e935834e5047a182238362c8
        Validity
            Not Before: Mar  1 20:01:07 2026 GMT
            Not After : Mar  2 20:01:07 2026 GMT
        Subject: CN=7cb4292186a7ee698c7103fbf07f3cab2d4ef412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:27:19:6c:8e:3d:80:48:86:20:39:32:aa:
                    79:09:0c:ac:62:c0:5c:a6:80:d8:76:25:18:c6:95:
                    78:d8:86:9b:2d:7b:50:3e:d5:b0:12:57:a4:a8:0d:
                    b9:10:13:63:ac:cd:e6:c3:56:f7:d4:21:18:c6:10:
                    59:84:1c:9e:8f:dc:28:9d:1a:aa:83:87:0d:6b:6d:
                    d7:79:f8:a2:46:bb:42:5a:d3:13:d2:fd:b6:28:3a:
                    46:07:aa:4a:12:43:22:41:26:09:46:57:05:bb:6f:
                    8d:34:80:b3:dc:40:39:47:17:e5:ba:81:19:1b:56:
                    74:cc:63:9e:2e:8b:80:8f:21:f9:2a:96:2f:63:61:
                    8b:12:f9:54:5a:1c:d3:f5:18:1c:28:76:bc:92:2d:
                    7e:7b:30:2e:12:10:23:3c:36:ac:2f:89:b6:7b:12:
                    69:9f:56:85:f6:5b:55:7d:66:78:c7:96:b6:4b:a0:
                    40:a5:fe:1e:4b:03:86:2f:7a:f2:cb:77:4e:85:74:
                    45:66:68:4d:98:d7:53:9f:07:86:2a:b4:25:2c:0c:
                    80:a0:a3:24:8f:42:ca:c8:3b:f6:d7:4d:e2:e0:73:
                    8b:84:90:65:17:7a:d8:81:19:5a:a5:ca:79:b0:26:
                    bc:d1:de:27:58:31:49:cf:49:7f:10:9b:a3:c3:90:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B4:29:21:86:A7:EE:69:8C:71:03:FB:F0:7F:3C:AB:2D:4E:F4:12
            X509v3 Authority Key Identifier:
                keyid:C2:93:7B:94:61:A3:D2:66:E9:35:83:4E:50:47:A1:82:23:83:62:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpN7lGGj0mbpNYNOUEehgiODYsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9ded2e-3973-4bcf-9562-3774881e7e1e/1/wpN7lGGj0mbpNYNOUEehgiODYsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:0f:0d:50:6a:c1:50:4e:bb:f4:b4:9e:3f:01:77:ff:ea:
         3c:de:d2:08:3d:56:f7:45:55:75:ff:83:a7:81:d4:f9:57:aa:
         cb:6d:d4:c9:cf:6f:de:8e:cb:8e:4b:a0:d8:3c:64:cd:06:54:
         9e:0e:6b:15:e3:79:c7:73:7b:2e:6c:28:b4:f2:86:16:80:d1:
         79:c0:93:07:c7:bf:3b:22:8e:a9:ed:ae:4f:3b:08:2b:28:17:
         2c:ca:5d:30:7c:40:a4:bf:1a:6a:36:79:43:ab:50:0f:87:33:
         c7:be:a4:7b:d6:55:a0:77:43:10:a7:f6:24:09:92:67:98:7a:
         e0:74:c5:d9:60:8b:eb:25:af:1e:49:e0:ec:9d:11:9e:8b:0f:
         d0:bc:ef:aa:fe:65:71:13:c9:39:e6:60:d4:69:87:25:b1:71:
         4e:23:d2:ee:94:30:c6:f1:c7:97:1f:d8:28:c6:9e:c1:ff:23:
         60:9c:25:60:b6:d2:08:92:93:c8:5b:15:c5:cf:cf:01:f9:5c:
         38:30:09:66:22:d0:8c:60:3e:77:42:3a:11:82:e8:3d:2e:1b:
         12:58:36:36:d7:7e:8f:b1:c9:18:cb:63:2e:75:dc:12:71:da:
         52:57:a5:44:aa:95:8a:f2:5b:5b:f7:43:8d:cc:3b:35:96:ad:
         c1:3a:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:58 2026 by rpki-client