Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
File:                     hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json)
Hash identifier:          /E9Ap7ZXf2sQmfIBHvu9w5y5lk4TB1V+fMvOrpKteos=
Subject key identifier:   56:C5:28:9C:80:EC:E1:95:12:A5:DC:6D:3F:EB:B2:51:51:62:A3:2B
Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71
Certificate issuer:       /CN=8569f2100c2fc454ad07adec796b9e6f6366f071
Certificate serial:       019CE711F6189AA062FA8F58BCED3535245B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
Manifest number:          1815
Signing time:             Fri 13 Mar 2026 12:00:39 +0000
Manifest this update:     Fri 13 Mar 2026 12:00:39 +0000
Manifest next update:     Sat 14 Mar 2026 12:00:39 +0000
Files and hashes:         1: 3hA9A0OwD3CaqCpbzA6joMDJbk8.roa (hash: bIa7UOe3oXCNGZy8NZrtlM3c7FMziyPPpnMJuORCWbM=)
                          2: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: /2WfoigmPYJ/9owRF4KyMvQfjtXOJQelpvDEscRxZAY=)
                          3: ztuH1Ib6x5wzUeQhgYqrotMVPQw.roa (hash: utfkpD2m+HS/flfgYbwUeyyWH7NvVuqHqyG3A5crwN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:11:f6:18:9a:a0:62:fa:8f:58:bc:ed:35:35:24:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071
        Validity
            Not Before: Mar 13 12:00:39 2026 GMT
            Not After : Mar 14 12:00:39 2026 GMT
        Subject: CN=56c5289c80ece19512a5dc6d3febb2515162a32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:d1:00:c2:4b:41:41:ef:e5:b5:23:96:dd:
                    8e:fc:a7:a7:2c:d6:9e:96:55:90:00:31:19:d5:a6:
                    61:0e:90:59:15:7a:94:3b:a4:8e:26:f1:aa:f1:82:
                    72:3d:9d:77:55:a0:7b:93:6c:aa:8a:fa:e7:9a:7e:
                    c5:b0:6d:c2:4c:6d:9f:e2:fd:49:69:9d:6a:4e:69:
                    3c:1c:d8:a2:c1:a9:2f:01:a8:9b:75:bd:1a:78:66:
                    db:ad:e3:85:e3:55:80:36:3f:77:88:70:68:c8:9e:
                    b2:85:d0:68:e0:0e:4e:7c:68:69:9f:87:1d:c8:12:
                    cb:5f:4e:c7:ad:3b:b9:37:9f:47:04:d3:94:f4:3f:
                    1f:f8:e7:af:2e:32:16:df:c0:ab:99:34:a3:da:b8:
                    aa:96:3a:75:6a:d3:d3:4d:6b:3b:1f:5c:55:e5:1d:
                    20:3d:e5:29:05:78:21:e3:d9:45:f6:8e:ff:48:49:
                    66:6e:d6:5e:30:41:c4:e4:98:3d:d1:02:ab:92:88:
                    f2:8c:b0:69:30:e3:cd:01:a5:35:cc:3e:70:80:79:
                    49:13:ca:14:d2:0a:55:9b:d7:77:eb:eb:4c:ef:16:
                    b1:49:2d:6b:db:11:d4:80:38:91:59:62:ba:30:30:
                    a3:16:e6:ba:6a:59:98:f1:a8:06:6f:98:9f:88:b1:
                    bf:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:28:9C:80:EC:E1:95:12:A5:DC:6D:3F:EB:B2:51:51:62:A3:2B
            X509v3 Authority Key Identifier:
                keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b7:27:69:5f:eb:1e:38:c3:25:5d:cb:ec:71:c6:00:4a:71:
         e6:84:f4:74:f0:75:2f:c6:01:93:82:e1:09:c4:d0:0d:82:d0:
         27:ce:21:e1:b2:43:c6:11:57:53:96:42:30:05:df:df:6d:9c:
         c3:80:31:c9:ac:fb:b2:3b:d4:52:6e:61:68:03:bb:01:0e:81:
         d7:5b:9a:f2:4e:af:59:78:39:d9:32:b1:d9:44:f5:85:a4:fb:
         33:7f:a1:ea:13:dc:55:af:8a:7c:c9:fb:59:6b:a3:27:20:5d:
         36:e1:8a:7b:2a:16:98:85:ca:b3:de:c9:7f:16:a1:23:bc:39:
         79:38:05:96:f7:73:6b:b1:ec:08:46:77:97:b1:d0:ea:8e:cb:
         5a:87:2d:64:11:cc:19:ae:38:1b:a4:01:25:fd:3e:05:cb:89:
         37:44:d1:56:98:2b:b4:c2:8d:0a:75:0f:fb:9a:5f:60:1e:05:
         d2:e6:f7:92:10:22:22:51:ea:39:ed:e4:36:ea:d4:7b:af:f0:
         58:4a:dc:a5:d7:27:3c:11:d0:48:b8:cc:cf:67:b2:74:6f:aa:
         7b:72:36:ff:7e:73:12:90:7f:f0:17:f6:50:90:09:84:a5:c2:
         e8:5c:a1:bc:95:38:f3:7e:83:0b:eb:48:4d:cd:d4:9a:6f:d0:
         e2:33:9c:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznEfYYmqBi+o9YvO01NSRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2
NmYwNzEwHhcNMjYwMzEzMTIwMDM5WhcNMjYwMzE0MTIwMDM5WjAzMTEwLwYDVQQD
Eyg1NmM1Mjg5YzgwZWNlMTk1MTJhNWRjNmQzZmViYjI1MTUxNjJhMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLrRAMJLQUHv5bUjlt2O/KenLNae
llWQADEZ1aZhDpBZFXqUO6SOJvGq8YJyPZ13VaB7k2yqivrnmn7FsG3CTG2f4v1J
aZ1qTmk8HNiiwakvAaibdb0aeGbbreOF41WANj93iHBoyJ6yhdBo4A5OfGhpn4cd
yBLLX07HrTu5N59HBNOU9D8f+OevLjIW38CrmTSj2riqljp1atPTTWs7H1xV5R0g
PeUpBXgh49lF9o7/SElmbtZeMEHE5Jg90QKrkojyjLBpMOPNAaU1zD5wgHlJE8oU
0gpVm9d36+tM7xaxSS1r2xHUgDiRWWK6MDCjFua6almY8agGb5ifiLG/AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbFKJyA7OGVEqXcbT/rslFRYqMrMB8GA1UdIwQY
MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt
MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm
LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAercnaV/r
HjjDJV3L7HHGAEpx5oT0dPB1L8YBk4LhCcTQDYLQJ84h4bJDxhFXU5ZCMAXf322c
w4Axyaz7sjvUUm5haAO7AQ6B11ua8k6vWXg52TKx2UT1haT7M3+h6hPcVa+KfMn7
WWujJyBdNuGKeyoWmIXKs97JfxahI7w5eTgFlvdza7HsCEZ3l7HQ6o7LWoctZBHM
Ga44G6QBJf0+BcuJN0TRVpgrtMKNCnUP+5pfYB4F0ub3khAiIlHqOe3kNurUe6/w
WErcpdcnPBHQSLjMz2eydG+qe3I2/35zEpB/8Bf2UJAJhKXC6FyhvJU4836DC+tI
Tc3Umm/Q4jOcKg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:49:59 2026 by rpki-client