Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
File:                     wJLY1VEbGezkVpYPI7-ohu4dVws.mft (raw, json)
Hash identifier:          nq/c6uk0FOvnP1MUYzDoM9Nucl4eM8rs+KrWTVRkvMY=
Subject key identifier:   BB:72:1B:89:8F:48:FD:B6:EA:22:DB:37:55:60:C1:61:46:F8:9A:CE
Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B
Certificate issuer:       /CN=c092d8d5511b19ece456960f23bfa886ee1d570b
Certificate serial:       019CEB94594FA46409A1537D8CD85314ED33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
Manifest number:          1876
Signing time:             Sat 14 Mar 2026 09:01:33 +0000
Manifest this update:     Sat 14 Mar 2026 09:01:33 +0000
Manifest next update:     Sun 15 Mar 2026 09:01:33 +0000
Files and hashes:         1: IHwozVBM-INdwAb4BanODhPGLiI.roa (hash: 1/oeq5jje77YZDjelRYgYRU0FA3dhh29FV04+WbtmT0=)
                          2: RTU2OyQ9pB3VVw78xcWFm4w-wS0.roa (hash: oZzyvKvR9r/Ihr+p+Nj3IAiIjLpAhI404TTQt+EMmaU=)
                          3: XPyrFETzbIf4UTMJJTPgIXwXkgo.roa (hash: rpIh/S9npo0EEK8J2sqDjrTLl9P72OOEfi3A9r/XVnw=)
                          4: wJLY1VEbGezkVpYPI7-ohu4dVws.crl (hash: FGJTps3Da0s8/e3/zZgam8IgmWBbJx0ERcoPIGFmseA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 09:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:eb:94:59:4f:a4:64:09:a1:53:7d:8c:d8:53:14:ed:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b
        Validity
            Not Before: Mar 14 09:01:33 2026 GMT
            Not After : Mar 15 09:01:33 2026 GMT
        Subject: CN=bb721b898f48fdb6ea22db375560c16146f89ace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:82:5a:e7:1f:1d:ab:44:17:bf:d9:70:2d:
                    cd:07:11:08:aa:24:70:3d:dd:45:d4:c3:3d:08:66:
                    b3:11:01:0b:d5:c7:5f:be:75:3e:14:a8:02:9b:56:
                    8a:a9:ad:97:8e:f7:14:12:8c:20:64:62:81:7a:5d:
                    2f:cd:32:08:eb:e0:30:c4:fb:11:2d:be:a1:33:62:
                    44:92:db:84:fc:78:c1:42:e1:10:90:1b:4b:bf:1b:
                    22:52:84:0b:6e:5d:c5:c8:ab:d5:58:9e:d8:3f:90:
                    8c:99:f5:ce:61:c0:87:ff:fc:3d:c2:dd:70:30:69:
                    b0:e3:5b:32:a7:95:7f:6a:41:d9:a6:5f:94:1d:a7:
                    88:bf:bf:bd:7b:19:05:2a:02:4c:9a:a3:37:7e:48:
                    6c:18:dc:ff:78:c8:c3:99:f7:a3:00:d8:7a:14:10:
                    d7:6d:1a:3d:0b:b6:77:f5:4b:82:3d:e0:ae:77:23:
                    99:ba:af:8d:da:91:bf:fb:70:9b:02:7f:ff:17:d7:
                    79:67:a1:ec:0c:5b:30:6b:49:ee:51:ee:59:db:5b:
                    27:ab:7d:ed:c7:5b:e7:34:01:43:e8:73:74:ed:8c:
                    fe:e8:e5:8a:5d:4b:89:50:ae:20:22:f1:f1:6a:a3:
                    66:a5:be:c6:d4:aa:b0:62:12:13:90:d9:43:cb:06:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:72:1B:89:8F:48:FD:B6:EA:22:DB:37:55:60:C1:61:46:F8:9A:CE
            X509v3 Authority Key Identifier:
                keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:16:26:1e:0e:bc:90:fe:16:2f:2f:e9:02:00:e2:63:8f:7f:
         0c:90:16:e4:52:77:d1:c0:2c:3c:26:87:b8:2f:15:cd:11:12:
         27:02:4f:dd:18:c8:06:96:55:e0:dd:c2:d6:6d:ae:77:a7:8d:
         b7:44:0f:55:1e:18:8b:90:41:af:f5:95:47:b2:de:89:51:f5:
         d4:35:5f:20:2f:b0:ff:e1:78:a6:a2:3a:40:63:ab:11:34:f7:
         2d:36:17:a1:58:0d:b8:b6:62:bd:21:dc:af:cb:2d:96:7d:d0:
         0a:08:9a:3c:ba:67:07:b2:7f:20:6e:97:9d:a8:70:1e:dc:c2:
         76:56:f7:0e:cd:10:06:93:71:3c:81:bb:72:e9:a7:07:44:ec:
         89:a8:92:ff:6c:90:75:83:59:38:57:0a:e2:3c:68:81:40:5b:
         96:c9:3c:a7:b4:d8:a6:d3:80:2a:23:79:37:75:87:38:0c:4f:
         7c:85:3d:ee:e1:b1:78:ab:46:32:1d:e2:e5:dd:c5:03:85:01:
         71:e9:74:81:e2:21:de:6c:c2:ea:8e:19:32:52:94:55:f9:a4:
         95:c5:a2:6c:e4:c2:20:71:7b:86:0b:09:e8:fe:2c:1f:12:0d:
         14:95:05:f2:b8:1a:c7:53:2e:ad:41:7f:47:17:86:0f:b8:8a:
         7e:56:b9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:18:25 2026 by rpki-client