Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          FFEYkswmBj3xzLrYSEAdQ2TujiBquuwlrRzcOarOkmE=
Subject key identifier:   8D:94:C0:94:F0:95:92:65:80:21:B5:D7:0A:1F:30:3B:B3:7C:C3:F0
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       019CE2595B59E6F3744B528AB7E65FD43592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          1869
Signing time:             Thu 12 Mar 2026 14:00:32 +0000
Manifest this update:     Thu 12 Mar 2026 14:00:32 +0000
Manifest next update:     Fri 13 Mar 2026 14:00:32 +0000
Files and hashes:         1: CFsvP2hD3gmFjv__2Tyhe-RY0Wc.roa (hash: 62NrbZ3F0XaxVmb0wIiq4eSU0cht7XOifDXoDw7smqk=)
                          2: Kpzhj_95i4E4aJjNSYc2BTV8EAk.roa (hash: idu2KS48f2h5e79Q1R66rhjvET6BFhf6C4kPWcByyac=)
                          3: NyFZ2eW1WSoY97If0z5zbstqwOc.roa (hash: tzK5PMS/xleldxj4Om3hBpSiQl1y+6+WsVVnD8xC2Jk=)
                          4: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: xDGrhHJIDm2yZ8ZNotSz1xeTMFf0e4Ahl47C9rG7AtI=)
                          5: ebzad07NZYcwcy_R1eapuxHVLc8.roa (hash: npZjo0OeCdQvVEsvxdLKnv7xOn/66fNjn6RzPB16PNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:59:5b:59:e6:f3:74:4b:52:8a:b7:e6:5f:d4:35:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Mar 12 14:00:32 2026 GMT
            Not After : Mar 13 14:00:32 2026 GMT
        Subject: CN=8d94c094f09592658021b5d70a1f303bb37cc3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:2e:e7:12:0c:26:f2:d3:a0:81:65:6b:03:
                    ca:cd:a9:5e:94:bf:97:bc:56:77:fb:e3:fe:4c:cb:
                    7f:d1:bd:b8:fb:ce:3b:8f:23:43:4a:ad:95:c7:4e:
                    e7:20:84:c2:48:23:f6:84:13:d0:8d:3f:a9:14:2e:
                    79:60:9e:2c:22:8d:1c:d8:ae:8e:c7:35:fe:54:f0:
                    71:85:ef:93:ff:76:0f:04:aa:5f:9a:c9:bb:66:a7:
                    3d:a6:4f:6a:c0:40:6e:0b:65:65:49:ed:30:5f:fa:
                    59:28:57:b3:4f:d7:83:49:d2:5f:22:d5:5f:48:15:
                    81:1d:a1:9f:97:eb:3e:45:61:2c:2c:a1:01:a4:bf:
                    d1:1b:62:90:43:2f:a2:e0:58:b7:b5:24:46:29:6b:
                    48:ab:f3:ee:72:c5:8f:38:43:ff:26:9a:ba:39:7c:
                    61:31:4b:4f:37:e0:8b:0b:79:a1:0d:89:f1:02:9a:
                    8c:96:20:2b:28:7f:22:3d:32:c3:c7:e2:3b:2e:52:
                    72:b8:18:40:f0:44:3f:27:51:3f:02:4b:f3:33:49:
                    d1:0c:ba:a5:d7:33:6a:97:b4:6c:e0:3a:96:9d:f5:
                    53:29:3e:3a:8f:55:2b:8a:6d:c2:fd:bc:5d:61:66:
                    9d:4d:88:77:bc:12:b4:a2:b0:3e:71:12:be:3d:0b:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:94:C0:94:F0:95:92:65:80:21:B5:D7:0A:1F:30:3B:B3:7C:C3:F0
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c0:b2:15:a6:44:d8:c1:9a:75:47:ce:d4:7b:67:9b:b9:92:
         84:40:d6:2a:81:6f:d7:9c:dd:19:89:ee:ae:07:d5:3e:af:02:
         64:ce:d2:01:ae:1d:62:2b:10:4b:75:40:61:a5:15:a5:2f:73:
         41:3b:68:fb:7c:dc:f9:7f:ae:43:19:07:33:83:c3:37:e1:50:
         89:20:32:c5:9b:e0:b5:c6:1e:bf:66:fb:8c:a6:7a:67:b1:64:
         51:d7:9f:44:d7:ba:6f:aa:d8:7c:27:dd:10:7b:0c:5a:ff:2b:
         06:5c:f5:96:1b:fd:3f:ab:4e:09:26:04:dc:f7:4c:d2:18:e5:
         21:95:c7:87:c9:0b:5d:74:2a:5c:d1:16:f3:43:9d:82:6e:53:
         15:43:87:f2:dd:cc:5f:f4:5c:54:15:32:c5:11:21:3c:7b:0b:
         1f:a9:2a:1f:16:52:63:6d:4e:35:37:2f:9b:69:07:2a:a1:f2:
         7c:f5:81:34:aa:62:d9:e0:8f:ea:5c:5f:96:2c:f1:c9:a7:41:
         30:4f:9c:49:dd:25:6c:0b:dd:84:da:0b:6a:2d:fd:de:9a:b1:
         7f:5e:6e:44:0a:7f:67:bc:64:51:87:07:ba:62:06:33:ef:13:
         8d:49:d8:fa:7b:3a:f4:d6:07:ad:cd:b5:27:0b:83:4a:08:2b:
         93:72:78:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:33 2026 by rpki-client