Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
File:                     1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft (raw, json)
Hash identifier:          0n9gU347KLUV6ECMRPzphrSyFPlbkfZ8Bi+uImkbiXY=
Subject key identifier:   F6:57:C8:52:46:56:A3:56:3C:FD:41:0E:A2:06:07:B4:C5:D2:B7:35
Authority key identifier: F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63
Certificate issuer:       /CN=f96a6a2032f96d7023722239c9fa5edd5596f863
Certificate serial:       019D37F757685EB21D989B5737E6CF7810C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
Manifest number:          1863
Signing time:             Sun 29 Mar 2026 05:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:49 +0000
Files and hashes:         1: 1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl (hash: Q7HXt5iX9aI2unEXqtxIE0HspvYs6bmZrqpWN4IKr6E=)
                          2: tXmcrXd1NSzKbyThyNVtW7ErlI4.roa (hash: Nfqw9jIsfvO/CcG3bEmL8y0/YqElSRYvepE+1sSTOrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:57:68:5e:b2:1d:98:9b:57:37:e6:cf:78:10:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f96a6a2032f96d7023722239c9fa5edd5596f863
        Validity
            Not Before: Mar 29 05:00:49 2026 GMT
            Not After : Mar 30 05:00:49 2026 GMT
        Subject: CN=f657c8524656a3563cfd410ea20607b4c5d2b735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c7:53:3d:19:aa:d4:c7:3a:a4:17:09:ef:7a:
                    a0:f6:71:45:27:5a:71:73:6f:b4:38:d8:7d:38:37:
                    1a:4c:d8:bc:0d:f3:bf:b5:71:28:62:8a:1e:4d:dc:
                    0c:ce:bd:54:e9:f3:ef:fc:94:85:06:cc:9d:ac:3c:
                    56:10:27:3e:34:a0:4a:9b:cf:e3:1d:b8:29:6a:7f:
                    a2:2a:1e:bd:24:e2:da:13:9d:b1:41:35:c2:88:b2:
                    c8:f4:ed:75:90:20:bc:aa:be:40:f2:d6:de:5e:0c:
                    e4:2d:eb:93:7b:3f:cb:b0:90:14:4e:05:6a:fa:25:
                    bc:2f:c8:b5:51:5b:eb:e4:70:fb:81:a2:f5:08:06:
                    ac:6d:d2:46:62:83:f5:88:81:16:5a:d4:3f:fb:e7:
                    0c:3e:65:0e:cb:91:09:3e:2f:bf:4f:35:0d:85:19:
                    23:f5:95:85:7e:60:f6:e0:be:24:69:a7:90:2d:84:
                    9d:b8:b7:d7:73:b0:22:87:93:43:99:0d:d5:b5:7a:
                    47:05:0a:bf:e9:fc:58:f5:98:c3:4c:97:1b:fe:2f:
                    9f:c3:2d:d2:84:47:88:9d:c2:db:4c:1f:98:97:d8:
                    a6:d2:6c:50:5c:2b:07:31:b1:1a:17:21:41:a6:72:
                    82:8e:ac:fd:f2:0a:f6:9b:1b:06:d4:18:6d:86:32:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:57:C8:52:46:56:A3:56:3C:FD:41:0E:A2:06:07:B4:C5:D2:B7:35
            X509v3 Authority Key Identifier:
                keyid:F9:6A:6A:20:32:F9:6D:70:23:72:22:39:C9:FA:5E:DD:55:96:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WpqIDL5bXAjciI5yfpe3VWW-GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/376e1f-96b1-4fe1-8b7a-13ff6a0ad441/1/1-WpqIDL5bXAjciI5yfpe3VWW-GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e3:3a:3c:83:d3:70:cb:12:22:90:d3:b6:ac:7c:fe:77:be:
         fa:94:8e:fc:45:42:1c:66:51:7c:0b:29:e2:2a:98:6c:10:d3:
         cc:aa:af:8e:ba:d9:e2:af:91:19:41:b4:0a:34:66:27:30:ca:
         30:a8:e2:12:1b:a8:c2:43:1d:7b:3c:f9:ff:24:0e:1e:a8:c8:
         1d:9a:72:9e:48:c4:9e:b6:40:fe:c1:8c:20:b9:b7:3f:64:52:
         86:63:e7:67:d2:8b:4f:18:f4:d2:3f:40:75:a9:54:de:f3:2f:
         27:9b:13:e1:e7:bc:7a:10:c3:4e:8f:b8:b9:23:52:ce:34:b6:
         3c:cb:7d:b0:d2:0d:24:44:e2:ab:82:73:04:8b:40:af:0a:b8:
         61:f2:c8:2e:c6:fb:6f:d1:f9:5b:d4:6c:2e:04:2e:3e:1c:09:
         f6:a7:a7:cd:5a:67:d8:df:57:2f:17:96:2d:ce:29:85:e6:8d:
         e7:25:ec:27:38:d1:c2:fb:a4:c6:f5:44:7d:ae:37:aa:48:f4:
         eb:9d:f3:a7:64:8b:8b:87:79:c5:16:12:88:16:ed:a0:42:96:
         15:9a:e5:86:b2:81:ad:7b:75:8b:ab:c5:95:18:10:b2:88:1e:
         da:e2:88:af:64:a6:f1:f0:eb:18:58:16:0a:db:09:2a:4f:a2:
         7c:9f:91:1b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0391doXrIdmJtXN+bPeBDGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NmE2YTIwMzJmOTZkNzAyMzcyMjIzOWM5ZmE1ZWRkNTU5
NmY4NjMwHhcNMjYwMzI5MDUwMDQ5WhcNMjYwMzMwMDUwMDQ5WjAzMTEwLwYDVQQD
EyhmNjU3Yzg1MjQ2NTZhMzU2M2NmZDQxMGVhMjA2MDdiNGM1ZDJiNzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMdTPRmq1Mc6pBcJ73qg9nFFJ1px
c2+0ONh9ODcaTNi8DfO/tXEoYooeTdwMzr1U6fPv/JSFBsydrDxWECc+NKBKm8/j
Hbgpan+iKh69JOLaE52xQTXCiLLI9O11kCC8qr5A8tbeXgzkLeuTez/LsJAUTgVq
+iW8L8i1UVvr5HD7gaL1CAasbdJGYoP1iIEWWtQ/++cMPmUOy5EJPi+/TzUNhRkj
9ZWFfmD24L4kaaeQLYSduLfXc7Aih5NDmQ3VtXpHBQq/6fxY9ZjDTJcb/i+fwy3S
hEeIncLbTB+Yl9im0mxQXCsHMbEaFyFBpnKCjqz98gr2mxsG1BhthjJ11wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPZXyFJGVqNWPP1BDqIGB7TF0rc1MB8GA1UdIwQY
MBaAFPlqaiAy+W1wI3IiOcn6Xt1VlvhjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XcHFJREw1YlhBamNpSTV5ZnBlM1ZXVy1HTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvMzc2ZTFmLTk2YjEtNGZlMS04Yjdh
LTEzZmY2YTBhZDQ0MS8xLzEtV3BxSURMNWJYQWpjaUk1eWZwZTNWV1ctR00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzE2LzM3NmUxZi05NmIxLTRmZTEtOGI3YS0xM2ZmNmEwYWQ0
NDEvMS8xLVdwcUlETDViWEFqY2lJNXlmcGUzVldXLUdNLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOM6
PIPTcMsSIpDTtqx8/ne++pSO/EVCHGZRfAsp4iqYbBDTzKqvjrrZ4q+RGUG0CjRm
JzDKMKjiEhuowkMdezz5/yQOHqjIHZpynkjEnrZA/sGMILm3P2RShmPnZ9KLTxj0
0j9AdalU3vMvJ5sT4ee8ehDDTo+4uSNSzjS2PMt9sNINJETiq4JzBItArwq4YfLI
Lsb7b9H5W9RsLgQuPhwJ9qenzVpn2N9XLxeWLc4pheaN5yXsJzjRwvukxvVEfa43
qkj0653zp2SLi4d5xRYSiBbtoEKWFZrlhrKBrXt1i6vFlRgQsoge2uKIr2Sm8fDr
GFgWCtsJKk+ifJ+RGw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:02:29 2026 by rpki-client