Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
File:                     WnVplLspLknsxjN7f5XWnuKvYeE.mft (raw, json)
Hash identifier:          gA0n3YAXFwA/N2ifW5sgQUqeQzr+E0snj8IDdp6PzIo=
Subject key identifier:   A2:16:E2:C6:8F:14:9D:53:C7:C8:87:7B:D0:34:F4:05:31:C2:27:BE
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Certificate issuer:       /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial:       019D3977BA1FCCCEA983D068C83381ADAB2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
Manifest number:          1898
Signing time:             Sun 29 Mar 2026 12:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 12:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 12:00:40 +0000
Files and hashes:         1: J1dgP4nrlYCPtH0XgkVv9K-jQoM.roa (hash: L3+rfnx98zeA39TwzP/btlWmN7YanCJfBv7Q/RTAlB8=)
                          2: WnVplLspLknsxjN7f5XWnuKvYeE.crl (hash: 1fOY+8EOcGhzo9P1ofeyLbcNzbtaqUW453Q8HV4ooSg=)
                          3: rPBNoiA3LAaZSrs5VWA0yP3yN1k.roa (hash: z7hppX01cLUTFRyiAAh/aHIOnNRzj8Vo6jXh0hDhpac=)
                          4: ya5aPAqe4Hx1IhhFtjdZDoOseBY.roa (hash: tpR2+mpp5l1TAReoEhj+zsYR4YGVmOGfhRS14jaZ8fI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:77:ba:1f:cc:ce:a9:83:d0:68:c8:33:81:ad:ab:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
        Validity
            Not Before: Mar 29 12:00:40 2026 GMT
            Not After : Mar 30 12:00:40 2026 GMT
        Subject: CN=a216e2c68f149d53c7c8877bd034f40531c227be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:10:7e:c7:43:c4:9b:1e:46:f4:4b:8c:e7:
                    ee:9f:ee:cb:57:7d:b8:41:5a:8f:c4:c3:25:85:26:
                    76:29:90:21:0a:56:9f:fe:67:a9:a5:56:5a:71:db:
                    99:77:f5:d9:2c:32:e1:5d:87:76:1b:fe:48:5a:a8:
                    e1:0d:8a:62:5c:b6:a8:a9:05:71:c5:02:57:e0:bb:
                    ce:1d:02:62:e5:d6:eb:ad:6e:b1:3a:d6:aa:25:1d:
                    7b:19:9b:60:4e:97:92:cb:d3:fb:0b:db:c4:3f:52:
                    c1:69:b2:28:e9:ff:c2:4c:3a:8c:df:9b:f2:04:da:
                    24:a6:9d:ea:11:6c:bc:45:4e:55:2b:c4:c1:3a:1c:
                    20:35:8a:f5:5d:3f:93:68:d6:80:08:49:37:f6:b7:
                    bc:67:61:f4:bf:ce:c3:70:89:5e:b5:92:e8:58:fe:
                    e6:ce:74:3b:ee:06:9f:c7:bc:dd:5c:73:84:d9:40:
                    6e:84:e6:5b:e5:84:be:ba:1b:14:9b:25:71:ad:de:
                    32:e0:64:67:fc:b2:80:1f:6c:6d:00:35:39:bd:c0:
                    10:5a:ff:8b:94:d2:a2:eb:77:a7:3c:6a:ec:94:c7:
                    72:cb:0d:9c:eb:71:17:cf:b7:13:54:67:75:f6:fe:
                    c4:c8:21:00:f9:7d:16:e6:e8:f4:46:8a:2f:1d:69:
                    c3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:16:E2:C6:8F:14:9D:53:C7:C8:87:7B:D0:34:F4:05:31:C2:27:BE
            X509v3 Authority Key Identifier:
                keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:4c:af:e7:28:99:f7:cd:28:e4:cf:1d:81:c1:75:de:98:3d:
         55:42:6f:f6:ff:53:db:d2:40:f0:f2:5e:12:4a:3a:9d:a2:5b:
         f9:50:16:d4:4e:96:23:a5:71:d3:c9:c1:fc:58:13:d5:5c:db:
         b9:92:94:c4:b9:9d:27:c4:d5:2d:6f:4f:8e:74:20:cd:e9:39:
         c0:7c:21:a7:d6:2f:de:23:6b:48:3c:53:c7:25:2a:cc:82:8f:
         5b:40:85:48:b3:67:d9:cc:a6:87:50:cb:7c:85:72:5d:e2:c9:
         6b:f7:19:79:0d:29:15:33:c2:57:a9:6e:91:1c:78:cc:33:a8:
         23:0c:ea:48:74:14:75:5e:fc:94:06:99:a0:52:34:57:6a:97:
         0a:e3:5d:29:31:fd:cc:66:dd:8a:2b:69:d1:65:c5:2e:1b:66:
         6f:0d:58:2e:e2:29:32:b8:ca:65:9c:88:dd:20:e2:e6:d6:24:
         de:4b:7e:81:96:63:4f:c2:ee:27:5f:77:5f:b2:05:1e:3e:42:
         33:58:5d:c7:46:aa:be:5d:a1:a0:eb:bf:b7:fa:49:dc:65:7b:
         53:2e:0e:2c:58:20:53:58:2d:a1:d1:4a:74:6e:ef:69:59:2e:
         c8:11:68:d6:8c:cf:84:72:03:8b:f7:7b:90:b3:bf:8d:96:b4:
         01:b7:27:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d7ofzM6pg9BoyDOBrasqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNzU2OTk0YmIyOTJlNDllY2M2MzM3YjdmOTVkNjllZTJh
ZjYxZTEwHhcNMjYwMzI5MTIwMDQwWhcNMjYwMzMwMTIwMDQwWjAzMTEwLwYDVQQD
EyhhMjE2ZTJjNjhmMTQ5ZDUzYzdjODg3N2JkMDM0ZjQwNTMxYzIyN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/EQfsdDxJseRvRLjOfun+7LV324
QVqPxMMlhSZ2KZAhClaf/meppVZacduZd/XZLDLhXYd2G/5IWqjhDYpiXLaoqQVx
xQJX4LvOHQJi5dbrrW6xOtaqJR17GZtgTpeSy9P7C9vEP1LBabIo6f/CTDqM35vy
BNokpp3qEWy8RU5VK8TBOhwgNYr1XT+TaNaACEk39re8Z2H0v87DcIletZLoWP7m
znQ77gafx7zdXHOE2UBuhOZb5YS+uhsUmyVxrd4y4GRn/LKAH2xtADU5vcAQWv+L
lNKi63enPGrslMdyyw2c63EXz7cTVGd19v7EyCEA+X0W5uj0RoovHWnDXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIW4saPFJ1Tx8iHe9A09AUxwie+MB8GA1UdIwQY
MBaAFFp1aZS7KS5J7MYze3+V1p7ir2HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84M2IwN2YtMWQyMi00YWUwLWEyZGUt
NGUwYWE0MmExNWE4LzEvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi84M2IwN2YtMWQyMi00YWUwLWEyZGUtNGUwYWE0MmExNWE4
LzEvV25WcGxMc3BMa25zeGpON2Y1WFdudUt2WWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0yv5yiZ
980o5M8dgcF13pg9VUJv9v9T29JA8PJeEko6naJb+VAW1E6WI6Vx08nB/FgT1Vzb
uZKUxLmdJ8TVLW9PjnQgzek5wHwhp9Yv3iNrSDxTxyUqzIKPW0CFSLNn2cymh1DL
fIVyXeLJa/cZeQ0pFTPCV6lukRx4zDOoIwzqSHQUdV78lAaZoFI0V2qXCuNdKTH9
zGbdiitp0WXFLhtmbw1YLuIpMrjKZZyI3SDi5tYk3kt+gZZjT8LuJ193X7IFHj5C
M1hdx0aqvl2hoOu/t/pJ3GV7Uy4OLFggU1gtodFKdG7vaVkuyBFo1ozPhHIDi/d7
kLO/jZa0Abcnag==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:28 2026 by rpki-client