Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
File:                     w0CQmuwyCowu4cq84TAsu31OBIY.mft (raw, json)
Hash identifier:          GtKHIStwdRbr0Ozf4VkT86xOhQ8agP+H0356fb9VCLQ=
Subject key identifier:   06:A1:25:79:C1:74:26:61:9F:C5:5F:DB:30:DA:B9:B6:04:F9:64:E9
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Certificate issuer:       /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial:       019CC863AB94014FE9C23A8BA5D4BAD2962F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
Manifest number:          14E8
Signing time:             Sat 07 Mar 2026 13:01:41 +0000
Manifest this update:     Sat 07 Mar 2026 13:01:41 +0000
Manifest next update:     Sun 08 Mar 2026 13:01:41 +0000
Files and hashes:         1: aNkPm_ezm0ctJK7MUUoxpovWRR4.roa (hash: 0s/77SfpzH3RIt4lNEcqz/Xnu6SS7M01lJXkiMcJwCI=)
                          2: adEMxHyupcifqh018PDSo4aZYRU.roa (hash: 2ejGSNPMnDgazqPRclsg72M/nQyRhAE01Ub1Oiox0Y0=)
                          3: w0CQmuwyCowu4cq84TAsu31OBIY.crl (hash: M/hQMlpwEONpuq3Nn5A9sksC4rzuTXhe2qkcFqVGFgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:63:ab:94:01:4f:e9:c2:3a:8b:a5:d4:ba:d2:96:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
        Validity
            Not Before: Mar  7 13:01:41 2026 GMT
            Not After : Mar  8 13:01:41 2026 GMT
        Subject: CN=06a12579c17426619fc55fdb30dab9b604f964e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:a7:1b:4c:f4:d8:03:e8:50:99:80:a0:cc:
                    3f:09:c9:10:a1:b2:5e:5d:b4:ba:c2:38:58:b7:1c:
                    80:42:e4:c5:1b:4b:25:6c:cc:75:ad:53:40:3c:9b:
                    67:8b:78:6b:72:06:bd:12:12:7e:82:76:04:55:59:
                    f6:2f:cb:90:ca:11:7f:73:0c:f5:8b:c2:85:b1:a2:
                    50:e7:02:d2:c3:3e:c0:92:3e:5a:d9:29:af:5f:fe:
                    ef:5f:c4:3f:53:55:48:9b:ea:d5:e4:ac:9c:87:7d:
                    60:d5:34:59:43:48:05:92:18:13:ef:7f:f1:ee:cb:
                    54:ea:8a:e3:bc:1c:3f:ff:1c:fb:0e:2f:1d:c6:46:
                    25:fc:4f:c7:f3:24:9e:9b:80:84:b4:fa:cc:05:71:
                    9d:7d:f1:55:48:ab:97:8e:ff:f0:d3:6c:29:f1:78:
                    26:c3:91:9a:0a:f8:75:5a:c7:d2:71:96:30:9b:d9:
                    48:e6:c4:6c:87:1a:68:0e:27:d7:17:e6:d4:9c:5d:
                    4f:e7:7f:22:c6:04:57:df:ce:6f:e2:62:a2:04:30:
                    97:d5:9a:20:4f:90:6d:d3:e1:27:1d:45:d1:ab:40:
                    b2:5a:d2:1a:d3:a1:76:2d:b0:ee:30:99:fe:ff:57:
                    c5:d0:34:bd:24:c6:90:d2:03:5e:06:8a:6f:1c:12:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:25:79:C1:74:26:61:9F:C5:5F:DB:30:DA:B9:B6:04:F9:64:E9
            X509v3 Authority Key Identifier:
                keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:92:35:85:79:2d:1f:af:76:b7:1e:e7:8c:4a:c7:12:e5:2d:
         2a:5f:8e:81:df:71:f8:46:69:ed:9d:99:10:e3:a8:a3:29:85:
         74:11:9e:77:4d:b6:07:37:7f:ac:c5:78:98:75:d6:52:33:da:
         2d:a8:c7:a9:bf:2d:bd:01:13:e5:ee:8b:c4:14:ef:0c:f4:5c:
         49:de:97:72:0b:66:64:ce:20:c4:4e:e3:02:23:b6:4b:de:5b:
         ab:36:b3:dc:6a:7e:3f:c5:01:2f:5e:b0:18:50:d4:23:07:a7:
         3d:90:7f:f3:a5:19:1e:d6:bf:9d:9a:9f:24:74:2f:8f:d1:8c:
         5b:2c:0a:c4:83:81:df:7c:33:98:91:a7:49:d9:c3:7f:a8:92:
         f8:35:31:19:71:b1:5f:56:95:45:cc:d8:65:cb:7e:ae:3b:3b:
         c6:31:7a:97:05:90:5b:6f:80:e1:01:53:4f:c4:1c:25:fc:cf:
         f6:8c:b8:d1:07:12:8d:e4:d0:81:5f:cc:42:c7:f0:2d:00:39:
         e5:cf:36:53:bc:42:11:50:9f:71:0d:bb:91:77:ec:cb:ef:41:
         1f:fe:da:4c:88:06:0b:e0:23:62:5a:da:79:7a:ad:ca:ea:98:
         14:e7:8b:0f:b7:c7:46:9c:80:40:1a:54:cc:06:60:e3:f7:ee:
         8c:de:25:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzIY6uUAU/pwjqLpdS60pYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNDA5MDlhZWMzMjBhOGMyZWUxY2FiY2UxMzAyY2JiN2Q0
ZTA0ODYwHhcNMjYwMzA3MTMwMTQxWhcNMjYwMzA4MTMwMTQxWjAzMTEwLwYDVQQD
EygwNmExMjU3OWMxNzQyNjYxOWZjNTVmZGIzMGRhYjliNjA0Zjk2NGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l6nG0z02APoUJmAoMw/CckQobJe
XbS6wjhYtxyAQuTFG0slbMx1rVNAPJtni3hrcga9EhJ+gnYEVVn2L8uQyhF/cwz1
i8KFsaJQ5wLSwz7Akj5a2SmvX/7vX8Q/U1VIm+rV5Kych31g1TRZQ0gFkhgT73/x
7stU6orjvBw//xz7Di8dxkYl/E/H8ySem4CEtPrMBXGdffFVSKuXjv/w02wp8Xgm
w5GaCvh1WsfScZYwm9lI5sRshxpoDifXF+bUnF1P538ixgRX385v4mKiBDCX1Zog
T5Bt0+EnHUXRq0CyWtIa06F2LbDuMJn+/1fF0DS9JMaQ0gNeBopvHBLPPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAahJXnBdCZhn8Vf2zDaubYE+WTpMB8GA1UdIwQY
MBaAFMNAkJrsMgqMLuHKvOEwLLt9TgSGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYt
YmNhMGE4ZjJmNzhjLzEvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MGIyMDUtOGYyMS00NmY1LWEzZjYtYmNhMGE4ZjJmNzhj
LzEvdzBDUW11d3lDb3d1NGNxODRUQXN1MzFPQklZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJI1hXkt
H692tx7njErHEuUtKl+Ogd9x+EZp7Z2ZEOOooymFdBGed022Bzd/rMV4mHXWUjPa
LajHqb8tvQET5e6LxBTvDPRcSd6XcgtmZM4gxE7jAiO2S95bqzaz3Gp+P8UBL16w
GFDUIwenPZB/86UZHta/nZqfJHQvj9GMWywKxIOB33wzmJGnSdnDf6iS+DUxGXGx
X1aVRczYZct+rjs7xjF6lwWQW2+A4QFTT8QcJfzP9oy40QcSjeTQgV/MQsfwLQA5
5c82U7xCEVCfcQ27kXfsy+9BH/7aTIgGC+AjYlraeXqtyuqYFOeLD7fHRpyAQBpU
zAZg4/fujN4lxg==
-----END CERTIFICATE-----
Generated at Sat Mar 7 21:04:59 2026 by rpki-client