Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
File:                     wBWqbOyG3yEV4qEOkgnYqi35i78.mft (raw, json)
Hash identifier:          ActStnWTIA1sSvAqg5zKSVKWcxWqq0T5oicQgQlDQBY=
Subject key identifier:   22:DA:FB:86:57:A6:C0:35:79:D6:34:F3:E5:49:86:5B:6C:C1:3B:07
Authority key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
Certificate issuer:       /CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Certificate serial:       019CB0918B7DB00F0E762A99EADD518E4FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
Manifest number:          0309
Signing time:             Mon 02 Mar 2026 22:00:54 +0000
Manifest this update:     Mon 02 Mar 2026 22:00:54 +0000
Manifest next update:     Tue 03 Mar 2026 22:00:54 +0000
Files and hashes:         1: SOx3AgvmBANgGuRBvGIZv19ZcA0.roa (hash: 6aOAX3w5YQajoC0CEbqRBxH+zCfnhhkE4sDztjd3jWI=)
                          2: wBWqbOyG3yEV4qEOkgnYqi35i78.crl (hash: aHd/EJ1tG0PpsXiTEqGEWdmbDsIyKQPKVmJDDob8DKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 21:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:91:8b:7d:b0:0f:0e:76:2a:99:ea:dd:51:8e:4f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
        Validity
            Not Before: Mar  2 22:00:54 2026 GMT
            Not After : Mar  3 22:00:54 2026 GMT
        Subject: CN=22dafb8657a6c03579d634f3e549865b6cc13b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:2a:fd:d7:5b:84:7b:6a:23:a2:ca:50:a2:
                    c0:7c:8b:28:9f:57:4d:03:f9:93:50:f7:24:6c:dd:
                    44:f3:b1:f4:8f:08:09:11:2b:21:d9:80:6b:d2:d5:
                    7c:bf:76:03:30:a0:98:fb:5b:fb:c9:e5:e9:be:ad:
                    01:e2:cd:a1:0d:78:a3:b1:fd:71:2f:bb:c2:20:ad:
                    11:7c:95:1d:b9:36:c3:25:54:d4:60:aa:01:98:41:
                    6e:e8:80:35:6a:1e:c8:53:45:e8:12:eb:c6:70:9e:
                    1e:c1:10:2e:11:b2:64:bc:ce:d9:5a:07:af:f7:3f:
                    0e:3e:6f:3d:61:e9:2a:dc:2a:40:f9:9d:a6:15:69:
                    e1:55:18:ba:3d:27:ae:47:12:a4:84:c0:a1:8d:7a:
                    ca:13:79:05:d0:13:4b:eb:9e:83:d0:62:33:12:b9:
                    87:58:d0:11:65:29:29:7e:68:ad:4d:22:87:9f:a2:
                    c4:49:a4:b2:98:38:d3:6a:59:f8:c8:cf:74:25:43:
                    a1:d6:96:64:74:2e:e2:68:4a:27:93:94:12:79:a0:
                    3f:99:8e:b8:12:db:ab:71:43:9a:fe:e4:ec:c1:4f:
                    84:6e:21:e7:5d:96:a6:85:a8:1b:63:65:25:3b:88:
                    a4:de:c5:c8:56:d7:b5:c7:fc:7a:6d:75:08:8c:82:
                    52:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:FB:86:57:A6:C0:35:79:D6:34:F3:E5:49:86:5B:6C:C1:3B:07
            X509v3 Authority Key Identifier:
                keyid:C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:23:94:da:05:14:ca:65:b4:41:08:c6:b7:4b:36:68:ca:05:
         cb:35:3d:a6:9e:73:69:46:0f:80:e5:b5:a2:52:6d:8f:ae:00:
         43:57:a5:74:b6:10:eb:46:c5:de:2d:cd:32:38:e2:48:03:b6:
         72:65:b9:63:42:87:b4:bb:5f:8a:18:7f:f3:7e:e0:2f:c9:9f:
         d1:90:5c:35:64:bb:32:9b:68:0a:25:17:ea:fd:44:3e:f3:b5:
         20:2e:8e:03:65:85:3c:13:a1:51:de:91:76:21:06:5e:bb:88:
         9f:5d:d7:fd:c1:7c:6e:c8:e1:2b:67:a5:f8:54:7d:4a:3b:b7:
         2a:51:5d:cc:ce:10:79:5f:e7:f0:46:2c:98:06:27:93:1e:49:
         93:3b:5c:53:97:ea:41:2b:ff:da:0d:f0:bc:28:64:38:97:fb:
         cc:62:b0:46:1d:f7:4e:e1:5a:e9:9f:81:f4:69:54:0b:7b:d8:
         a4:2f:66:d6:28:67:50:3a:34:a1:98:b7:55:49:fb:b0:f7:c6:
         c5:45:d2:2c:da:4d:0f:c8:8d:60:62:6f:60:87:bc:7a:d0:81:
         24:56:2b:1b:0c:bc:68:ef:34:80:73:c9:c0:5c:de:73:01:fd:
         37:cf:ea:bf:11:67:f0:92:34:45:d1:a9:39:ff:8a:a2:d2:09:
         80:27:16:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 04:25:34 2026 by rpki-client