Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
File:                     wFIM7LolHNN83zxNWrA2JVIruqw.mft (raw, json)
Hash identifier:          IiWxuOrrsSVb9Op7bt+aIYzTEhFfQd3skcxJiOP6XD8=
Subject key identifier:   E9:54:9F:AA:8C:8D:49:25:65:AE:12:64:98:69:16:2A:B3:51:25:B2
Authority key identifier: C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC
Certificate issuer:       /CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
Certificate serial:       019D37C0636970B896BEE2ADB4D48D3FA8D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 04:00:48 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:48 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:48 +0000
Files and hashes:         1: 36T8Tn4Sup8fmQcjWCy26dR6re0.roa (hash: SG3LgOxnqBUaF6P4Vt2PLcBh7paYsvxM9iIaS6ERJJ0=)
                          2: 5QI4fVyPMm0-K60PBKXaZ8ZbhYY.roa (hash: PJ8hWL8fv95vnL+98n7N2nc5zp7ZDQ14+kWYLI42xqM=)
                          3: D3Scbfl6fBr15c-mbPSi-zu0HHY.roa (hash: GocWeJMCxjrHRiAM5S4dU7oou7wP+fPBVESKdHPj5Io=)
                          4: wFIM7LolHNN83zxNWrA2JVIruqw.crl (hash: dToSoJ5LhLEtkV+uEs8JK7ZEG50CaTDh0apZbV3+CZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:63:69:70:b8:96:be:e2:ad:b4:d4:8d:3f:a8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0520cecba251cd37cdf3c4d5ab03625522bbaac
        Validity
            Not Before: Mar 29 04:00:48 2026 GMT
            Not After : Mar 30 04:00:48 2026 GMT
        Subject: CN=e9549faa8c8d492565ae12649869162ab35125b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:7f:9e:d2:10:76:b9:61:ac:40:29:19:1c:aa:
                    6f:d4:fc:16:c5:54:78:80:9a:01:3f:8f:2d:27:ec:
                    df:86:3c:8d:b7:a1:00:8e:2e:8b:46:2c:a3:c3:c5:
                    f5:88:b2:6b:26:db:b9:bf:95:42:55:ea:6b:a2:f8:
                    51:71:f2:67:2a:f6:57:45:9f:ac:3c:d1:1f:72:ec:
                    ad:08:69:55:bb:85:04:9c:63:7c:17:96:28:65:61:
                    a9:45:70:7d:37:d6:a2:88:a5:49:e7:da:07:d5:52:
                    68:16:3c:65:17:c4:47:81:8e:5a:9d:37:40:36:b1:
                    36:ad:d9:f5:b8:d5:1f:14:cd:87:a6:88:da:a2:13:
                    9d:47:89:f4:2f:d0:68:44:e8:52:8f:33:7a:da:a9:
                    f5:fc:22:fb:c6:69:57:cb:eb:e6:04:48:e6:c4:9a:
                    03:b0:14:ee:31:ad:f6:c4:87:9b:f1:13:af:83:fc:
                    46:82:ad:f6:14:03:de:85:24:a1:82:d9:70:21:f3:
                    19:6e:41:77:79:7f:c9:1c:7d:a3:c8:d5:d8:d8:c4:
                    bf:bb:1f:fe:2a:d6:0c:92:2a:83:43:0a:77:e0:7c:
                    c7:37:06:d4:e5:3b:d7:d7:87:d0:4d:0d:aa:b5:74:
                    8f:90:ec:50:ad:86:4c:93:7c:c2:1c:f8:9d:ae:2c:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:54:9F:AA:8C:8D:49:25:65:AE:12:64:98:69:16:2A:B3:51:25:B2
            X509v3 Authority Key Identifier:
                keyid:C0:52:0C:EC:BA:25:1C:D3:7C:DF:3C:4D:5A:B0:36:25:52:2B:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFIM7LolHNN83zxNWrA2JVIruqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/361bae-ab14-4aab-bb8f-7418b92aa209/1/wFIM7LolHNN83zxNWrA2JVIruqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:b1:9e:b8:3a:ce:86:96:67:5a:65:b0:f3:83:f3:1e:a6:
         7d:49:e9:b0:31:ec:7e:2b:ad:e2:6e:be:c5:ee:98:04:4e:fc:
         98:53:a7:31:e7:f9:bc:2b:f6:a2:08:fb:e4:5a:95:b7:09:48:
         71:f3:4c:ce:6d:10:3a:2a:f9:b3:a6:30:35:c5:52:2c:a1:29:
         da:2c:07:75:3b:1b:f9:77:f7:a0:9e:5d:70:27:e9:fe:31:1c:
         59:70:85:fe:48:f0:69:10:08:ca:c5:27:3d:41:a2:5d:0c:76:
         20:40:75:0e:1a:1f:70:c5:0f:85:ea:48:0a:0b:e5:3f:68:f2:
         ed:e4:db:26:c3:df:45:f0:5c:bb:ac:b3:d2:88:16:b7:5d:bd:
         6a:1f:06:70:f7:e0:9e:61:ad:d3:3d:9a:f4:d7:b7:29:6f:93:
         ea:53:0c:be:d9:57:e5:8c:92:0b:1b:7d:25:3c:23:89:c2:77:
         0e:b7:8b:7f:85:d6:01:52:58:5f:ac:d0:46:ef:84:2c:2b:6c:
         bd:39:25:ef:b7:ea:7c:e7:75:ca:31:b3:95:0a:ce:3b:d8:87:
         b8:fa:d4:ef:5c:1e:9b:47:2c:01:8d:45:d3:f6:a9:31:5a:6c:
         82:89:7c:5f:1f:95:67:ed:c0:d9:fb:79:79:8a:60:1f:ea:76:
         76:51:39:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wGNpcLiWvuKttNSNP6jVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTIwY2VjYmEyNTFjZDM3Y2RmM2M0ZDVhYjAzNjI1NTIy
YmJhYWMwHhcNMjYwMzI5MDQwMDQ4WhcNMjYwMzMwMDQwMDQ4WjAzMTEwLwYDVQQD
EyhlOTU0OWZhYThjOGQ0OTI1NjVhZTEyNjQ5ODY5MTYyYWIzNTEyNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn+e0hB2uWGsQCkZHKpv1PwWxVR4
gJoBP48tJ+zfhjyNt6EAji6LRiyjw8X1iLJrJtu5v5VCVeprovhRcfJnKvZXRZ+s
PNEfcuytCGlVu4UEnGN8F5YoZWGpRXB9N9aiiKVJ59oH1VJoFjxlF8RHgY5anTdA
NrE2rdn1uNUfFM2HpojaohOdR4n0L9BoROhSjzN62qn1/CL7xmlXy+vmBEjmxJoD
sBTuMa32xIeb8ROvg/xGgq32FAPehSShgtlwIfMZbkF3eX/JHH2jyNXY2MS/ux/+
KtYMkiqDQwp34HzHNwbU5TvX14fQTQ2qtXSPkOxQrYZMk3zCHPidrizAfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlUn6qMjUklZa4SZJhpFiqzUSWyMB8GA1UdIwQY
MBaAFMBSDOy6JRzTfN88TVqwNiVSK7qsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYt
NzQxOGI5MmFhMjA5LzEvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zNjFiYWUtYWIxNC00YWFiLWJiOGYtNzQxOGI5MmFhMjA5
LzEvd0ZJTTdMb2xITk44M3p4TldyQTJKVklydXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARW+xnrg6
zoaWZ1plsPOD8x6mfUnpsDHsfiut4m6+xe6YBE78mFOnMef5vCv2ogj75FqVtwlI
cfNMzm0QOir5s6YwNcVSLKEp2iwHdTsb+Xf3oJ5dcCfp/jEcWXCF/kjwaRAIysUn
PUGiXQx2IEB1DhofcMUPhepICgvlP2jy7eTbJsPfRfBcu6yz0ogWt129ah8GcPfg
nmGt0z2a9Ne3KW+T6lMMvtlX5YySCxt9JTwjicJ3DreLf4XWAVJYX6zQRu+ELCts
vTkl77fqfOd1yjGzlQrOO9iHuPrU71wem0csAY1F0/apMVpsgol8Xx+VZ+3A2ft5
eYpgH+p2dlE5gw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:37 2026 by rpki-client