Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
File:                     wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json)
Hash identifier:          I32RRks1xoFJjZxdtV7lrtcdZ1kPNxal9Kqq3JfCp38=
Subject key identifier:   C6:68:E8:97:6C:24:1B:01:EB:9D:17:D7:29:D4:99:4B:F0:F1:75:DB
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Certificate issuer:       /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial:       019D382DCA19D4BCCBEE62431CE3661E5EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
Manifest number:          0C7B
Signing time:             Sun 29 Mar 2026 06:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:18 +0000
Files and hashes:         1: 7r4lRPQc-QTSmeOcUsrSRcjkV4c.roa (hash: OocvrP+x2oNsYStihaud30OWGNdq9vGwzjAJqLEWJFg=)
                          2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: anEH43ax0sGccqVl+IkffRAz3vOix9fJL5yAccTnPuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:ca:19:d4:bc:cb:ee:62:43:1c:e3:66:1e:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
        Validity
            Not Before: Mar 29 06:00:18 2026 GMT
            Not After : Mar 30 06:00:18 2026 GMT
        Subject: CN=c668e8976c241b01eb9d17d729d4994bf0f175db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:23:e3:75:ee:93:30:67:69:a4:72:74:98:
                    49:bc:82:c6:39:3d:7d:63:45:df:14:df:e9:02:3c:
                    7f:b8:12:d6:5f:95:dd:64:97:a5:6c:0c:2d:f7:16:
                    b8:ce:27:66:3a:65:a7:c0:71:04:62:c8:7a:b1:87:
                    22:0f:26:ad:a9:fe:64:40:d6:e4:8b:8c:c4:4e:86:
                    e9:16:e3:49:f8:1a:a5:4d:e1:40:aa:76:a7:68:dd:
                    51:f2:c8:99:ae:7a:7e:fc:da:4b:5a:80:32:48:0e:
                    65:cc:d7:b6:9f:30:34:93:68:2c:ee:65:52:e8:09:
                    dc:1e:8c:d2:b7:b1:71:f2:cd:71:4e:68:63:62:e5:
                    6b:e5:3a:1a:38:53:db:2d:0a:59:68:89:1e:3d:4b:
                    2f:60:91:ca:f3:b0:4f:1e:c4:4b:4f:e4:26:e5:cf:
                    be:75:85:ab:ee:69:e0:0a:1d:4b:56:29:0f:1c:ec:
                    89:20:16:ee:d2:f4:5a:ab:da:14:3b:6c:27:85:ed:
                    4d:0e:16:28:ad:d4:72:b3:da:07:c0:e5:36:1e:b0:
                    f6:ca:ca:43:34:8f:7a:7c:2f:b6:92:0f:83:1e:b9:
                    e9:c4:cd:a0:30:15:94:dc:a9:0f:dc:15:39:d3:a0:
                    a8:b6:26:1c:29:de:20:8d:24:5c:d3:ec:0c:ed:a4:
                    43:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:68:E8:97:6C:24:1B:01:EB:9D:17:D7:29:D4:99:4B:F0:F1:75:DB
            X509v3 Authority Key Identifier:
                keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:ae:e4:70:35:7d:fb:e7:36:7e:02:ed:e6:49:52:81:84:
         fe:3b:9c:96:de:4a:15:a2:ce:71:32:38:ff:7e:c7:65:2d:8b:
         ac:5a:58:2b:e8:fc:c6:dc:53:86:c7:92:0c:f4:cc:83:08:d0:
         c1:2a:06:60:80:7f:f2:d8:98:20:64:64:72:ad:f6:f0:48:be:
         e5:dc:c6:1f:c7:b7:47:5e:dc:fe:2c:94:5c:0f:11:13:c2:95:
         9f:d4:66:5a:90:c4:53:5b:ae:2f:53:a2:dd:1b:f6:04:68:ef:
         50:36:f0:45:4f:b1:c5:5e:e4:7b:34:62:4b:b4:92:52:4b:15:
         2e:a2:e1:69:c4:30:a1:64:eb:60:17:01:90:39:53:7f:45:da:
         02:aa:80:7b:d2:a3:d5:02:44:90:5e:70:a6:a7:85:c2:68:4c:
         c0:8d:1c:26:c7:fa:2c:05:ea:d7:63:ca:ac:20:d5:3c:24:38:
         52:0f:a1:28:e0:a6:42:cc:69:4b:22:f6:b6:ec:11:95:07:60:
         e2:ed:16:ce:a9:f2:ce:d4:5e:08:4f:ac:53:1a:b1:f3:8e:e4:
         51:56:c5:c7:6e:c3:12:1a:0d:db:fc:e0:e5:ab:33:12:21:3f:
         43:a7:79:6e:88:b7:ae:bd:af:90:35:39:b6:1a:af:d0:4e:b0:
         93:62:9e:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LcoZ1LzL7mJDHONmHl7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZGMxYTI3MmJhYWU3ZDA3NzM0ZjZhZDQ2MzdhZmEyZDJk
MWIzMTIwHhcNMjYwMzI5MDYwMDE4WhcNMjYwMzMwMDYwMDE4WjAzMTEwLwYDVQQD
EyhjNjY4ZTg5NzZjMjQxYjAxZWI5ZDE3ZDcyOWQ0OTk0YmYwZjE3NWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO8j43XukzBnaaRydJhJvILGOT19
Y0XfFN/pAjx/uBLWX5XdZJelbAwt9xa4zidmOmWnwHEEYsh6sYciDyatqf5kQNbk
i4zETobpFuNJ+BqlTeFAqnanaN1R8siZrnp+/NpLWoAySA5lzNe2nzA0k2gs7mVS
6AncHozSt7Fx8s1xTmhjYuVr5ToaOFPbLQpZaIkePUsvYJHK87BPHsRLT+Qm5c++
dYWr7mngCh1LVikPHOyJIBbu0vRaq9oUO2wnhe1NDhYordRys9oHwOU2HrD2yspD
NI96fC+2kg+DHrnpxM2gMBWU3KkP3BU506CotiYcKd4gjSRc0+wM7aRDIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZo6JdsJBsB650X1ynUmUvw8XXbMB8GA1UdIwQY
MBaAFMLcGicrqufQdzT2rUY3r6LS0bMSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3R3YUp5dXE1OUIzTlBhdFJqZXZvdExSc3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wZTkzZDMtZTcyZC00NWY5LThlZjUt
OTRiZThkMzNiOWQzLzEvd3R3YUp5dXE1OUIzTlBhdFJqZXZvdExSc3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8wZTkzZDMtZTcyZC00NWY5LThlZjUtOTRiZThkMzNiOWQz
LzEvd3R3YUp5dXE1OUIzTlBhdFJqZXZvdExSc3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzWu5HA1
ffvnNn4C7eZJUoGE/juclt5KFaLOcTI4/37HZS2LrFpYK+j8xtxThseSDPTMgwjQ
wSoGYIB/8tiYIGRkcq328Ei+5dzGH8e3R17c/iyUXA8RE8KVn9RmWpDEU1uuL1Oi
3Rv2BGjvUDbwRU+xxV7kezRiS7SSUksVLqLhacQwoWTrYBcBkDlTf0XaAqqAe9Kj
1QJEkF5wpqeFwmhMwI0cJsf6LAXq12PKrCDVPCQ4Ug+hKOCmQsxpSyL2tuwRlQdg
4u0WzqnyztReCE+sUxqx847kUVbFx27DEhoN2/zg5aszEiE/Q6d5boi3rr2vkDU5
thqv0E6wk2KeWA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:24 2026 by rpki-client