Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
File:                     wPvVh2YT7cVuD13kaMzl6yiF_yk.mft (raw, json)
Hash identifier:          H4iESFyhLJ2HAdMyk903Cc/MPaCP8oOL1j0iAPzEV/Q=
Subject key identifier:   23:C6:27:D6:41:64:34:A2:11:BD:C1:4F:4F:1A:1B:0E:58:B9:40:E5
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       019C98F6B569EF06E29D59E629160EDF306B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
Manifest number:          1847
Signing time:             Thu 26 Feb 2026 08:00:30 +0000
Manifest this update:     Thu 26 Feb 2026 08:00:30 +0000
Manifest next update:     Fri 27 Feb 2026 08:00:30 +0000
Files and hashes:         1: Bv5Sg8vgi9S842H6dRuR7sJxzko.roa (hash: hT9sbrvQRiXid7sYPnl4Iixs+zdMa4hm1hg6rDtrIYs=)
                          2: K6nvFDqRGh8xVM7IrF0Rd6Raqmo.roa (hash: EVwo0E7SIOBx5iGAFKfj/k4qRw0//D9TaPWIiThqtao=)
                          3: axRaMfkBmO7VzbCGyjkhx1P2A-8.roa (hash: sc0Yj3PBpLZ4CbPFA/VIugOR8JNz2sSyXRFn+nL0m+g=)
                          4: c8rdVYuNpflJD29KauvVYvS5wQA.roa (hash: bC9GRMHN9BrtnveTDOEwyMbzEqZzFN4CkCTMBFjErAc=)
                          5: wPvVh2YT7cVuD13kaMzl6yiF_yk.crl (hash: 5tp0VrlSOlplw+ctAgDhAuHhsAkA1q/vOU8Tr6xMnpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Feb 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:98:f6:b5:69:ef:06:e2:9d:59:e6:29:16:0e:df:30:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: Feb 26 08:00:30 2026 GMT
            Not After : Feb 27 08:00:30 2026 GMT
        Subject: CN=23c627d6416434a211bdc14f4f1a1b0e58b940e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:40:95:b4:33:c0:96:e7:a6:56:54:09:ac:87:
                    be:5f:e6:90:b9:db:d1:e0:42:e1:e0:45:d4:b9:83:
                    f8:ea:64:3c:2b:c9:8d:27:89:4c:41:fb:2e:86:32:
                    26:34:94:ae:a9:1c:a8:c9:d9:60:50:39:47:8b:fc:
                    ac:3b:8e:2a:5a:d9:f4:72:97:91:84:5e:50:67:12:
                    14:e7:b9:17:ef:63:af:b0:40:d3:49:ea:a0:57:19:
                    74:15:92:6d:7d:53:43:df:3c:36:9c:af:25:35:27:
                    24:8d:41:cc:d5:b1:80:30:23:91:18:bc:d9:2f:f4:
                    5f:38:9f:3e:e7:29:73:d3:d0:19:bc:b8:5c:b5:18:
                    d7:05:76:c8:ed:a7:72:2e:2f:b1:c6:87:40:b7:86:
                    bb:e4:7d:b7:51:50:8d:12:ec:d4:9b:50:f1:cd:b9:
                    f7:cc:4a:e1:e8:88:fa:fd:78:31:50:70:9a:e2:61:
                    79:32:6a:f5:de:cf:8d:27:88:1f:79:c7:60:2f:c1:
                    ee:2c:99:d2:c0:73:2b:46:e9:d1:cd:c0:72:ba:87:
                    54:49:7f:60:cd:ed:36:00:3d:b7:f1:43:7e:ba:79:
                    90:28:65:b7:41:5d:47:5a:41:c8:65:aa:75:a2:09:
                    f1:2b:cc:11:97:bc:fe:b7:f9:bb:8d:e6:ff:e2:d4:
                    ac:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C6:27:D6:41:64:34:A2:11:BD:C1:4F:4F:1A:1B:0E:58:B9:40:E5
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:73:5e:60:64:75:fa:c2:9c:92:a4:c0:94:e8:ee:49:ae:c1:
         9f:a5:06:45:4b:40:34:58:94:c1:cc:63:8f:86:24:bd:b6:07:
         76:4f:6b:f7:aa:9d:52:18:ba:ee:79:82:32:27:9e:70:7c:ff:
         89:8f:b4:78:41:42:44:6a:3f:8f:9b:c4:38:9e:31:ea:1b:ee:
         ec:d5:59:04:00:3f:a6:1e:fc:4c:01:a8:95:97:ce:0b:d0:81:
         be:af:7b:ea:56:37:ad:d7:6a:ed:02:79:3f:74:c6:50:c6:31:
         73:fb:87:f6:08:99:89:3a:a7:5f:dd:bd:f0:fc:33:89:94:34:
         60:eb:7e:7f:c4:c1:ac:b3:38:1e:2f:cf:13:ae:52:de:92:b1:
         80:43:87:a0:d1:e8:ec:36:89:ee:d4:b5:78:77:c9:49:ae:40:
         2a:97:74:30:b5:09:61:3a:c1:f4:20:df:2a:f1:b3:cc:39:e2:
         80:29:b8:ca:66:e1:24:68:21:37:8b:72:21:36:c9:54:a1:14:
         c9:b0:25:67:8b:14:93:2b:9f:a1:b8:e9:c1:b6:d6:d0:f2:fd:
         6f:66:3a:d4:77:46:97:4a:23:11:dd:04:22:26:35:fd:31:08:
         fc:ac:52:21:14:ee:db:08:f8:6e:18:65:4b:4d:8a:b3:fa:41:
         a0:a3:36:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 10:20:43 2026 by rpki-client