Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
File:                     Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft (raw, json)
Hash identifier:          +aef0+z/9D1tJ78DXlh6J0Hy2atya4wq3ysu/G3mn3c=
Subject key identifier:   72:30:33:CB:C3:83:80:19:E0:81:FB:25:AD:B3:FB:CF:49:F9:82:C0
Authority key identifier: 5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74
Certificate issuer:       /CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
Certificate serial:       019CAEDA003F00E59F31A3CD3D46242B88AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
Manifest number:          1846
Signing time:             Mon 02 Mar 2026 14:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 14:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 14:00:48 +0000
Files and hashes:         1: Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl (hash: LpjKrh+MVVwEw27rmUEKYflfu1yt+8f7b0xmvC1xOIA=)
                          2: t9yzXj9IkLEOWLc9xcwlhBFkG8g.roa (hash: +W8dztnmYQdC4cm96ghABWrij2U/BNP7WSR+9tFEBZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 14:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:da:00:3f:00:e5:9f:31:a3:cd:3d:46:24:2b:88:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8f81366ffc43c71f5bb521f81501760ebeb074
        Validity
            Not Before: Mar  2 14:00:48 2026 GMT
            Not After : Mar  3 14:00:48 2026 GMT
        Subject: CN=723033cbc3838019e081fb25adb3fbcf49f982c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8e:dc:f8:fb:87:48:5e:ac:7d:2c:17:0d:7d:
                    7e:6f:66:f3:a7:f2:48:f7:18:22:e3:62:fe:5e:2d:
                    b6:72:b0:57:45:96:5c:db:e7:29:89:e0:57:69:3f:
                    10:29:b1:58:85:6f:94:c2:e5:05:83:3c:4c:b8:af:
                    c5:a8:25:75:5c:58:f2:6a:f5:ac:1f:2a:cb:0f:6e:
                    e6:a9:bb:9e:d4:e8:eb:87:aa:58:e2:19:2f:42:2f:
                    7e:7d:7c:df:8e:a0:99:8d:ea:39:42:99:64:9e:97:
                    6c:60:8d:26:5a:a3:20:b6:61:2b:50:3d:f6:da:70:
                    20:8f:40:ef:51:2b:1d:b2:69:1c:02:28:50:c0:78:
                    37:3b:2f:de:24:59:02:da:e8:44:d8:e4:fb:f3:36:
                    56:a2:e8:68:1b:df:6e:e3:41:e5:bc:7b:6a:9a:17:
                    71:64:cb:90:d7:2f:1c:64:a4:53:99:04:cf:16:77:
                    f4:c2:60:b8:fc:6d:dc:02:46:68:f0:a7:d2:3e:6d:
                    ad:ad:41:25:fa:d5:93:43:c2:f6:30:30:64:e2:25:
                    db:1e:98:be:7d:35:14:5e:0f:2c:35:27:e0:b3:04:
                    f8:cb:55:cd:6c:b5:83:cd:24:dc:2b:ba:2c:43:80:
                    d9:25:2c:62:53:16:2a:7a:73:96:08:ee:82:c8:46:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:30:33:CB:C3:83:80:19:E0:81:FB:25:AD:B3:FB:CF:49:F9:82:C0
            X509v3 Authority Key Identifier:
                keyid:5A:8F:81:36:6F:FC:43:C7:1F:5B:B5:21:F8:15:01:76:0E:BE:B0:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b83ab5-cdb2-4174-8093-802d09cfc835/1/Wo-BNm_8Q8cfW7Uh-BUBdg6-sHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:1e:5d:66:3a:bc:53:b7:78:5f:e8:db:34:54:92:63:5b:ab:
         06:ec:77:b8:41:6e:e9:2b:74:75:cc:34:7b:cc:c4:ea:b5:e5:
         9c:ad:e9:4f:13:4d:94:be:41:8d:fc:4c:04:3a:f7:16:d2:bf:
         b4:fe:3b:7e:f1:44:0f:b1:aa:43:33:16:25:a0:c6:4c:40:f2:
         cb:29:c6:13:4a:47:6f:d7:51:74:50:19:2c:64:06:b6:c6:94:
         7d:61:bd:56:2b:cf:14:3d:40:9d:e3:5b:da:79:c4:3c:b6:cf:
         fe:d7:3b:6b:58:31:e2:fe:83:ad:ca:79:0b:93:46:f9:50:67:
         ef:4f:da:57:98:62:aa:93:c0:2a:e6:6a:1d:44:c0:e3:ee:20:
         86:21:23:bb:55:a6:e1:04:63:1c:30:9c:09:4b:3e:e8:22:79:
         70:01:20:e1:31:dd:4b:3e:71:9c:b2:e3:ce:8e:41:91:bf:a2:
         d6:01:51:05:f6:96:4c:b7:8b:4e:e1:e5:ec:f8:3c:ae:e3:e5:
         4b:82:81:f0:44:8a:45:8d:c4:52:f9:a5:c0:6e:e5:5a:7d:bb:
         20:65:d3:c0:5d:b7:ca:4e:d0:a8:56:f0:79:49:34:a0:ac:bc:
         82:f9:2c:37:cb:8c:01:65:e8:2f:88:56:dd:21:20:50:9a:46:
         12:11:78:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyu2gA/AOWfMaPNPUYkK4itMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOGY4MTM2NmZmYzQzYzcxZjViYjUyMWY4MTUwMTc2MGVi
ZWIwNzQwHhcNMjYwMzAyMTQwMDQ4WhcNMjYwMzAzMTQwMDQ4WjAzMTEwLwYDVQQD
Eyg3MjMwMzNjYmMzODM4MDE5ZTA4MWZiMjVhZGIzZmJjZjQ5Zjk4MmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI7c+PuHSF6sfSwXDX1+b2bzp/JI
9xgi42L+Xi22crBXRZZc2+cpieBXaT8QKbFYhW+UwuUFgzxMuK/FqCV1XFjyavWs
HyrLD27mqbue1Ojrh6pY4hkvQi9+fXzfjqCZjeo5QplknpdsYI0mWqMgtmErUD32
2nAgj0DvUSsdsmkcAihQwHg3Oy/eJFkC2uhE2OT78zZWouhoG99u40HlvHtqmhdx
ZMuQ1y8cZKRTmQTPFnf0wmC4/G3cAkZo8KfSPm2trUEl+tWTQ8L2MDBk4iXbHpi+
fTUUXg8sNSfgswT4y1XNbLWDzSTcK7osQ4DZJSxiUxYqenOWCO6CyEbi6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIwM8vDg4AZ4IH7Ja2z+89J+YLAMB8GA1UdIwQY
MBaAFFqPgTZv/EPHH1u1IfgVAXYOvrB0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMt
ODAyZDA5Y2ZjODM1LzEvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iODNhYjUtY2RiMi00MTc0LTgwOTMtODAyZDA5Y2ZjODM1
LzEvV28tQk5tXzhROGNmVzdVaC1CVUJkZzYtc0hRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfh5dZjq8
U7d4X+jbNFSSY1urBux3uEFu6St0dcw0e8zE6rXlnK3pTxNNlL5BjfxMBDr3FtK/
tP47fvFED7GqQzMWJaDGTEDyyynGE0pHb9dRdFAZLGQGtsaUfWG9VivPFD1AneNb
2nnEPLbP/tc7a1gx4v6Drcp5C5NG+VBn70/aV5hiqpPAKuZqHUTA4+4ghiEju1Wm
4QRjHDCcCUs+6CJ5cAEg4THdSz5xnLLjzo5Bkb+i1gFRBfaWTLeLTuHl7Pg8ruPl
S4KB8ESKRY3EUvmlwG7lWn27IGXTwF23yk7QqFbweUk0oKy8gvksN8uMAWXoL4hW
3SEgUJpGEhF4cA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:13 2026 by rpki-client