Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File:                     wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier:          c4czk/wy6pXnWsntu0Pd8PmNCWWE/XfdD4FIjDY52to=
Subject key identifier:   9E:48:A3:78:52:0B:39:2E:2D:81:EA:8F:28:92:33:FC:E1:20:C1:C8
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer:       /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial:       019CAC7E01E2D8F84E071922F0B24521EE0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number:          063A
Signing time:             Mon 02 Mar 2026 03:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 03:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 03:01:04 +0000
Files and hashes:         1: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: kRYHk5B7quBD8me2pLY+VsqnSvVym9sIMC0NtaDfamg=)
                          2: yXtUNYm9UJDhZ6FworfWme9OQyo.roa (hash: rr8EZy6xf85lv5Hhtm/H3eXN/QDSdw1UbOFotOK3AWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7e:01:e2:d8:f8:4e:07:19:22:f0:b2:45:21:ee:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
        Validity
            Not Before: Mar  2 03:01:04 2026 GMT
            Not After : Mar  3 03:01:04 2026 GMT
        Subject: CN=9e48a378520b392e2d81ea8f289233fce120c1c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:02:d5:06:1d:4a:2a:53:3d:77:8f:dc:dd:
                    44:f7:a3:81:31:de:b0:52:64:13:a3:43:f1:37:f9:
                    a4:72:11:b4:2b:ee:4f:09:fd:e1:50:0c:dd:a6:a5:
                    e9:09:14:a5:f0:35:d2:f3:01:de:50:8d:5e:8b:8c:
                    16:f2:eb:05:6a:44:63:a4:84:59:ce:0a:6a:f3:b4:
                    ed:fb:ac:98:0a:2c:9b:08:d5:40:dc:35:6f:8f:82:
                    80:38:00:5e:60:7c:26:0d:83:3b:05:a0:4e:fa:9d:
                    c7:84:c3:84:02:c0:7b:2a:31:0a:a0:42:ff:08:38:
                    c0:4b:9c:cf:36:25:5b:9e:77:b4:0a:57:c8:3b:03:
                    22:9e:2a:3f:a3:f2:38:98:0e:29:46:d2:4b:4e:ab:
                    ee:d4:4d:9d:c0:7d:a8:45:30:a5:33:76:15:f4:c9:
                    a6:23:19:24:c4:e0:be:1d:c7:76:42:bd:a5:b0:69:
                    e3:f8:8a:41:3c:40:b3:77:ba:48:3c:b8:55:11:e5:
                    e3:30:4d:95:9d:52:c6:31:53:37:e5:a2:bb:52:1d:
                    ba:11:bb:e5:56:85:d1:35:b2:9e:cd:21:80:0e:ff:
                    6f:d5:12:2d:1d:05:25:b9:58:5a:40:59:a7:a6:bc:
                    b3:ba:90:eb:8f:76:92:76:60:e2:37:5a:8b:a8:ef:
                    4a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:48:A3:78:52:0B:39:2E:2D:81:EA:8F:28:92:33:FC:E1:20:C1:C8
            X509v3 Authority Key Identifier:
                keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:32:c1:7b:ca:81:c6:59:18:f6:a1:b7:f7:fa:c1:a1:74:
         d9:66:5a:88:49:47:6e:4f:ee:41:0e:09:8a:95:e1:36:b6:41:
         dc:7c:3c:29:5a:a9:fe:3c:53:4b:8e:3d:2c:9d:2d:25:51:64:
         9f:b1:6f:51:1b:a3:9c:5c:13:51:32:4c:29:bb:8e:e3:47:8b:
         91:23:f9:01:02:2a:99:04:3e:7a:ae:58:ce:6d:5f:8a:af:0a:
         37:37:83:9d:02:74:ee:9f:bd:42:f6:c9:4d:6b:e0:b9:1a:66:
         cd:36:a6:52:61:a2:ea:52:22:2c:21:e1:d8:55:ce:49:0c:d1:
         f2:7a:ec:6c:f4:7c:45:a4:e1:76:d2:9d:cb:28:41:f3:4e:a9:
         89:76:78:0d:71:33:06:b6:fb:14:6f:a5:33:58:8d:60:5a:bc:
         3f:2d:90:f0:45:ca:23:28:13:9f:72:56:c0:ec:54:d9:0f:6b:
         30:6a:a0:bd:20:1f:f1:ac:05:64:dd:67:6f:36:9c:43:19:42:
         ea:bd:b9:c4:a0:b5:ce:2b:54:98:66:ca:4d:58:21:52:6f:6a:
         af:a1:9a:0b:15:36:96:40:a6:b5:cf:38:86:f8:75:0b:88:7b:
         91:78:ea:85:94:53:b6:e4:78:8b:51:11:fb:4a:94:7c:be:4b:
         1b:9c:43:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfgHi2PhOBxki8LJFIe4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGYwMDhjMWNjY2E2MmU2ZmMzNTZkNjM0MjA1NWE2Mjdk
YzZjZjIwHhcNMjYwMzAyMDMwMTA0WhcNMjYwMzAzMDMwMTA0WjAzMTEwLwYDVQQD
Eyg5ZTQ4YTM3ODUyMGIzOTJlMmQ4MWVhOGYyODkyMzNmY2UxMjBjMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/4C1QYdSipTPXeP3N1E96OBMd6w
UmQTo0PxN/mkchG0K+5PCf3hUAzdpqXpCRSl8DXS8wHeUI1ei4wW8usFakRjpIRZ
zgpq87Tt+6yYCiybCNVA3DVvj4KAOABeYHwmDYM7BaBO+p3HhMOEAsB7KjEKoEL/
CDjAS5zPNiVbnne0ClfIOwMinio/o/I4mA4pRtJLTqvu1E2dwH2oRTClM3YV9Mmm
IxkkxOC+Hcd2Qr2lsGnj+IpBPECzd7pIPLhVEeXjME2VnVLGMVM35aK7Uh26Ebvl
VoXRNbKezSGADv9v1RItHQUluVhaQFmnpryzupDrj3aSdmDiN1qLqO9KJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5Io3hSCzkuLYHqjyiSM/zhIMHIMB8GA1UdIwQY
MBaAFMIPAIwczKYub8NW1jQgVaYn3GzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUt
N2Q3ZmNlNWRiMDVjLzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUtN2Q3ZmNlNWRiMDVj
LzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwsywXvK
gcZZGPaht/f6waF02WZaiElHbk/uQQ4JipXhNrZB3Hw8KVqp/jxTS449LJ0tJVFk
n7FvURujnFwTUTJMKbuO40eLkSP5AQIqmQQ+eq5Yzm1fiq8KNzeDnQJ07p+9QvbJ
TWvguRpmzTamUmGi6lIiLCHh2FXOSQzR8nrsbPR8RaThdtKdyyhB806piXZ4DXEz
Brb7FG+lM1iNYFq8Py2Q8EXKIygTn3JWwOxU2Q9rMGqgvSAf8awFZN1nbzacQxlC
6r25xKC1zitUmGbKTVghUm9qr6GaCxU2lkCmtc84hvh1C4h7kXjqhZRTtuR4i1ER
+0qUfL5LG5xDpQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:40:13 2026 by rpki-client