Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File:                     WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier:          tfoNTq8UomBLO88unnfRCePcpmbA/tHOeYuyhM/UNZg=
Subject key identifier:   7A:25:03:FF:1F:5E:5B:6A:2C:2E:78:50:6B:B6:4E:FF:55:3C:46:95
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer:       /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial:       019CE4486534C2E83B3AAB9CFEECA5D79564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number:          0369
Signing time:             Thu 12 Mar 2026 23:01:15 +0000
Manifest this update:     Thu 12 Mar 2026 23:01:15 +0000
Manifest next update:     Fri 13 Mar 2026 23:01:15 +0000
Files and hashes:         1: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: D49OcoXZg/zIyrehb4gW8rcSLz2cEicFiUrVe+zWqmE=)
                          2: ziF5LUxXxsiZsU2Zn5F9Vs8QBIU.roa (hash: JWHNPV4Q0ijWQ7FA9BlDGI8xfPLJfKs3pJXg1QGEDkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 23:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:48:65:34:c2:e8:3b:3a:ab:9c:fe:ec:a5:d7:95:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
        Validity
            Not Before: Mar 12 23:01:15 2026 GMT
            Not After : Mar 13 23:01:15 2026 GMT
        Subject: CN=7a2503ff1f5e5b6a2c2e78506bb64eff553c4695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:72:2f:93:32:1b:7b:b3:73:4e:49:0d:93:
                    82:e7:67:76:20:c9:83:76:6d:06:21:56:0e:9a:d7:
                    03:cc:59:b8:78:78:eb:19:b9:af:c0:91:e2:70:43:
                    c0:9f:c3:d5:76:2e:8e:55:5c:c2:b0:1d:ba:06:25:
                    83:43:cf:f3:b6:2e:ca:ed:d6:bf:8b:09:9c:ff:46:
                    da:19:c4:0b:03:3c:41:23:a5:2c:25:57:c9:95:ed:
                    d9:2b:50:c8:1d:08:c6:7c:e2:b6:85:9d:be:68:e3:
                    fb:db:1e:0e:a3:49:0f:1e:99:c7:b9:1b:df:a4:83:
                    37:46:f0:fe:95:42:df:5e:0f:09:4d:e4:a7:0b:07:
                    08:c0:61:11:82:60:63:96:94:67:7a:9f:bd:0a:29:
                    2c:a0:3e:f6:ac:7a:79:fb:d7:d5:b3:51:eb:ac:eb:
                    ca:61:a1:b3:96:1d:ad:26:02:c1:79:4a:c3:14:4b:
                    52:d6:70:23:3f:ff:a6:a2:fb:66:a3:f2:80:2b:49:
                    ca:64:18:65:23:91:ca:3d:0e:83:90:f0:57:81:b3:
                    d8:cb:28:82:e8:6c:bd:8b:a5:c0:93:ff:fc:4d:8c:
                    2d:6a:73:39:db:87:61:44:95:6f:67:d5:7a:f3:1f:
                    90:03:4e:5f:c7:e2:fb:77:d3:fe:56:19:c3:c1:e8:
                    a1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:25:03:FF:1F:5E:5B:6A:2C:2E:78:50:6B:B6:4E:FF:55:3C:46:95
            X509v3 Authority Key Identifier:
                keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:cc:12:bb:46:e7:c3:8b:52:b5:f7:2a:a4:bf:cf:99:fc:d7:
         e2:b6:23:37:d3:0a:10:f1:8c:f3:8f:b1:28:9d:fe:75:fd:86:
         b9:df:96:4d:64:a5:32:58:b3:53:8e:09:50:93:7f:23:0e:77:
         af:f9:21:25:a8:cc:a7:f1:f0:16:98:f7:f2:5d:13:45:db:1b:
         2c:3d:e8:b5:b1:0e:8e:b2:a6:f9:a9:57:54:7f:c4:c9:32:5a:
         1e:3c:26:2d:68:0e:3a:e2:75:37:69:c7:ed:34:bd:ac:7f:94:
         44:e9:14:77:a2:82:7c:94:51:26:1a:16:cc:f6:ca:39:62:70:
         d2:a9:7c:f9:d4:82:e5:7d:1b:a7:3c:c8:62:88:1a:00:60:cf:
         74:61:5d:46:10:13:78:c2:01:56:05:5f:a9:5e:d8:e7:34:5e:
         2d:1c:a3:67:65:39:e8:d1:d4:bc:60:73:55:30:7b:86:ec:1e:
         d9:58:2a:03:73:80:1a:8f:41:3b:08:25:9f:1b:74:66:7e:c2:
         f5:94:75:24:15:48:49:bf:5a:41:d3:63:7d:64:90:16:a1:bb:
         4c:47:39:2f:30:26:c6:e7:b9:24:4d:43:65:11:dc:48:2e:7d:
         e0:fb:7d:c0:e9:4d:45:27:fd:75:ae:c7:94:6b:fb:02:81:72:
         2f:2b:50:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzkSGU0wug7Oquc/uyl15VkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg5ZGMxODllMDA5MzYxYWNiMjY1NTY4MGU2NjljMGJj
NDc0NTYwHhcNMjYwMzEyMjMwMTE1WhcNMjYwMzEzMjMwMTE1WjAzMTEwLwYDVQQD
Eyg3YTI1MDNmZjFmNWU1YjZhMmMyZTc4NTA2YmI2NGVmZjU1M2M0Njk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d9yL5MyG3uzc05JDZOC52d2IMmD
dm0GIVYOmtcDzFm4eHjrGbmvwJHicEPAn8PVdi6OVVzCsB26BiWDQ8/zti7K7da/
iwmc/0baGcQLAzxBI6UsJVfJle3ZK1DIHQjGfOK2hZ2+aOP72x4Oo0kPHpnHuRvf
pIM3RvD+lULfXg8JTeSnCwcIwGERgmBjlpRnep+9CiksoD72rHp5+9fVs1HrrOvK
YaGzlh2tJgLBeUrDFEtS1nAjP/+movtmo/KAK0nKZBhlI5HKPQ6DkPBXgbPYyyiC
6Gy9i6XAk//8TYwtanM524dhRJVvZ9V68x+QA05fx+L7d9P+VhnDweihRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHolA/8fXltqLC54UGu2Tv9VPEaVMB8GA1UdIwQY
MBaAFFjYncGJ4Ak2GssmVWgOZpwLxHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGIt
OWRmZjViZDU0ODhhLzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGItOWRmZjViZDU0ODhh
LzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMwSu0bn
w4tStfcqpL/PmfzX4rYjN9MKEPGM84+xKJ3+df2Gud+WTWSlMlizU44JUJN/Iw53
r/khJajMp/HwFpj38l0TRdsbLD3otbEOjrKm+alXVH/EyTJaHjwmLWgOOuJ1N2nH
7TS9rH+UROkUd6KCfJRRJhoWzPbKOWJw0ql8+dSC5X0bpzzIYogaAGDPdGFdRhAT
eMIBVgVfqV7Y5zReLRyjZ2U56NHUvGBzVTB7huwe2VgqA3OAGo9BOwglnxt0Zn7C
9ZR1JBVISb9aQdNjfWSQFqG7TEc5LzAmxue5JE1DZRHcSC594Pt9wOlNRSf9da7H
lGv7AoFyLytQIQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 08:43:16 2026 by rpki-client