Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
File:                     WCroA98isFXHTl_o8R2UQIlWDtI.mft (raw, json)
Hash identifier:          T4H82XyTR+FbHLiWNeUTIhOG8qy40NCgy22p/eg/u+M=
Subject key identifier:   F8:80:4B:6D:EF:7A:F6:2A:0E:82:55:46:E4:2B:61:BD:D4:34:A3:5F
Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2
Certificate issuer:       /CN=582ae803df22b055c74e5fe8f11d944089560ed2
Certificate serial:       019C9B537DDEDF305EE632920C3F6A31824A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
Manifest number:          02CD
Signing time:             Thu 26 Feb 2026 19:01:05 +0000
Manifest this update:     Thu 26 Feb 2026 19:01:05 +0000
Manifest next update:     Fri 27 Feb 2026 19:01:05 +0000
Files and hashes:         1: WCroA98isFXHTl_o8R2UQIlWDtI.crl (hash: lnlA3RzMOh+7INicFKu0qmJPz+uaUXudYukTfpNJ8J0=)
                          2: e1NZm3XKE7xcFABvZP0BCejzf1s.roa (hash: j0g+97meVg3ce9VbKXkz531r7nEoX07hUsET3+Mmkt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 15:05:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:9b:53:7d:de:df:30:5e:e6:32:92:0c:3f:6a:31:82:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2
        Validity
            Not Before: Feb 26 19:01:05 2026 GMT
            Not After : Feb 27 19:01:05 2026 GMT
        Subject: CN=f8804b6def7af62a0e825546e42b61bdd434a35f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0d:b7:a6:d4:98:b6:53:55:74:70:55:61:13:
                    25:d2:b6:64:28:3d:fd:20:77:3a:62:64:15:09:47:
                    7c:70:89:43:48:7a:d0:a2:60:02:22:26:2a:3c:f2:
                    0c:06:4c:cd:7e:67:a1:c1:31:1b:f2:94:5a:01:32:
                    2c:2f:36:4d:07:4b:96:35:3f:27:b0:18:7c:c1:be:
                    76:6d:67:c6:14:b7:40:cf:8e:1d:b5:3c:b0:48:85:
                    c2:98:5f:a6:73:f3:d0:ff:00:84:74:7c:0d:4d:2a:
                    47:53:01:41:13:f1:a3:c4:05:a3:b8:fe:04:64:4c:
                    e4:73:53:31:b6:c7:a8:0b:90:71:ac:88:10:c7:33:
                    5e:96:b4:3b:d1:48:ae:1c:1d:71:d2:02:31:0a:52:
                    fd:21:ac:e4:54:89:55:cd:c1:79:1e:65:6f:6b:69:
                    af:b9:57:90:12:78:b1:33:68:76:49:e1:f3:f2:46:
                    4f:4d:2d:a5:ca:0f:eb:32:9a:bd:8e:d4:84:fc:ca:
                    09:8d:b2:a0:0a:0d:70:2e:57:8e:1c:ea:68:43:6c:
                    64:e0:e6:02:8e:9c:e6:dc:66:8a:84:54:c2:72:8f:
                    9c:a5:af:10:72:1e:a3:2d:59:46:b5:34:c1:f6:8b:
                    94:83:08:0e:08:78:75:0e:6b:c6:5e:55:83:d4:52:
                    e6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:80:4B:6D:EF:7A:F6:2A:0E:82:55:46:E4:2B:61:BD:D4:34:A3:5F
            X509v3 Authority Key Identifier:
                keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:60:d7:d9:6b:ee:1f:4a:85:53:b8:03:cb:4d:b1:41:c0:0d:
         55:bb:cf:92:59:5c:29:f7:70:80:27:42:a0:32:90:1d:d4:6d:
         89:cc:a4:6c:2c:a9:57:c8:35:eb:e7:57:a6:d8:3d:b1:65:4c:
         42:01:f5:5b:67:3b:3f:0d:6b:75:04:40:8f:3f:25:97:7e:00:
         f7:7c:bd:4e:9d:37:73:8e:e0:ac:61:5c:ed:d8:9f:66:11:38:
         79:64:89:66:e9:ad:04:95:45:ba:49:6c:03:23:f0:89:bc:d1:
         e4:01:be:69:22:9b:49:ea:a0:61:31:3a:f0:5c:ae:30:86:b6:
         7d:eb:66:ef:b0:f5:4a:7f:b1:89:39:e2:95:4f:98:64:0f:19:
         66:9b:87:fa:54:97:f4:dd:df:ea:f9:b5:11:17:2a:31:dd:45:
         8d:db:b7:2c:67:e0:d7:aa:32:7a:d9:8a:01:74:b2:a7:19:be:
         32:20:e6:d5:e3:fc:3a:5c:41:1f:b9:6e:95:34:df:55:0b:b3:
         fc:c8:8c:2d:82:7e:ef:eb:fc:f2:51:c3:65:ff:aa:bc:65:d4:
         5e:84:b7:db:a1:24:44:37:0a:06:f5:e2:6d:3a:d1:63:a5:68:
         69:31:5c:88:fb:62:ea:af:0d:a2:17:6a:0f:ca:73:21:3b:17:
         fb:ba:93:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 21:24:46 2026 by rpki-client