Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
File:                     WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json)
Hash identifier:          eO9LHcUq6W+ASj4Z3JBpLyR7hn+s3fWvmCGsx6+PB6w=
Subject key identifier:   D4:E9:12:B7:13:42:31:D8:FA:F8:96:A1:F3:47:98:0C:88:C4:15:B9
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Certificate issuer:       /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial:       019D3A8AE41C3673D13839C050FC75D1E8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
Manifest number:          18AB
Signing time:             Sun 29 Mar 2026 17:01:13 +0000
Manifest this update:     Sun 29 Mar 2026 17:01:13 +0000
Manifest next update:     Mon 30 Mar 2026 17:01:13 +0000
Files and hashes:         1: 3W9R-YT71N2KOE9koy1r5cINKX0.roa (hash: clKClGDaGmI0tmvfHI+K0tkdnMBa+OFDvpOE7hWE5Ts=)
                          2: 5UeKqt91iujWrLpmveszaAeKq38.roa (hash: uGfE9PLC67qvNbDJ8GUA0pov+PYaKuZOHQHTjJZLOVs=)
                          3: AUg0z5yXbzh2DRCyGjN0QT6euNA.roa (hash: RSYJ1asjZqxOdOG/NJBg7u2rmfVrBP+knp47N/2/EDM=)
                          4: NG61yH3HN97TjS1iRIUPVdYaQ7A.roa (hash: x678lkfNMzciNejX1Mk4JHb1ftZLDB8lKMVQe+Qriio=)
                          5: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: b/7kFGqdfCcxSB2MFO6/scGM1xOVQ7HjIC5VvuBmWco=)
                          6: p0oEcMg8sG6gT08Fcxw4r9QhamI.roa (hash: z6uLeIBaxCEHOYTKTX4AQu+ufdq2lBhvDUsLTsxGNkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:8a:e4:1c:36:73:d1:38:39:c0:50:fc:75:d1:e8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
        Validity
            Not Before: Mar 29 17:01:13 2026 GMT
            Not After : Mar 30 17:01:13 2026 GMT
        Subject: CN=d4e912b7134231d8faf896a1f347980c88c415b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:30:5e:1a:77:b9:e8:9c:6b:47:bf:29:5a:b9:
                    e5:ef:4a:b8:74:b2:1d:75:6d:fb:fe:bc:82:52:d9:
                    4e:a4:90:7d:f6:31:b6:83:5c:40:2e:85:65:1d:67:
                    d8:b8:2b:58:f0:36:4e:65:48:6d:7d:9e:fc:89:58:
                    d6:e4:8f:2d:01:ad:f8:6a:9e:59:df:dc:1b:b8:45:
                    0a:d5:6b:65:f8:6c:c6:e9:6d:5f:10:ac:41:6d:da:
                    c2:cb:d7:b8:4d:55:17:84:d7:97:65:86:43:0c:b4:
                    8e:ca:c4:d3:ea:d2:6a:9a:0a:b0:c7:3d:fe:2c:16:
                    b2:f6:26:10:6e:9f:a2:45:af:e9:56:f1:d5:eb:fb:
                    71:aa:99:9a:12:e6:bb:cc:48:a2:3f:af:df:62:77:
                    d5:8e:01:37:c8:be:0f:37:b2:15:14:1c:bc:f4:84:
                    7a:c1:1b:19:03:5a:d3:62:06:ff:38:6b:59:24:55:
                    ee:19:fe:b5:86:91:f6:a6:b5:5b:d3:c5:d2:14:64:
                    27:c8:d3:fc:42:1c:e9:19:02:c9:1c:05:34:a1:22:
                    dc:59:d9:1a:a0:97:ad:9a:50:84:b4:33:58:3f:c3:
                    4f:30:5f:38:88:07:1c:c6:08:a9:37:14:3d:2f:0f:
                    30:be:d3:f1:6f:44:c7:7c:50:bb:6d:e1:11:a5:ec:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E9:12:B7:13:42:31:D8:FA:F8:96:A1:F3:47:98:0C:88:C4:15:B9
            X509v3 Authority Key Identifier:
                keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:07:56:9c:cc:1c:6e:87:d6:72:e9:2c:59:49:17:87:63:06:
         d2:69:4c:4e:a9:86:c4:a2:46:39:27:03:cd:96:f4:9f:d6:46:
         74:2c:cd:a6:e6:52:d6:ce:eb:51:22:80:0b:33:1d:5b:45:53:
         8c:ab:25:e9:b0:d1:32:60:0d:cc:46:ae:a1:a3:70:fd:83:eb:
         51:03:33:47:00:0a:54:a5:b7:5d:d4:44:ea:c7:1c:55:f1:7b:
         ba:03:a6:e1:b4:e5:da:88:db:27:06:f8:b4:09:da:7d:36:06:
         fb:f5:7b:27:4f:2f:9c:66:17:6d:48:29:19:27:f9:9d:29:87:
         3f:a3:82:fb:df:51:fb:7a:31:92:44:64:7d:43:99:43:40:18:
         3f:5f:42:38:86:9a:1b:ed:69:76:5c:0f:b2:00:61:c3:a0:13:
         c9:99:24:ab:6f:1f:52:86:ab:82:1b:7b:e2:ed:ac:66:cc:eb:
         ed:d8:75:8c:68:9b:44:e7:1a:0d:10:46:1a:05:8f:54:26:89:
         08:27:43:95:85:46:27:4b:f3:c1:fe:86:c8:8a:cb:12:bf:67:
         48:49:f9:94:ae:fb:4a:0d:52:af:e7:41:b2:61:bc:a7:a6:38:
         8d:4f:29:e0:71:4f:f9:a9:1f:82:39:c9:b8:15:f6:6a:4f:d4:
         57:e3:bf:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06iuQcNnPRODnAUPx10ejFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm
MGViN2IwHhcNMjYwMzI5MTcwMTEzWhcNMjYwMzMwMTcwMTEzWjAzMTEwLwYDVQQD
EyhkNGU5MTJiNzEzNDIzMWQ4ZmFmODk2YTFmMzQ3OTgwYzg4YzQxNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTBeGne56JxrR78pWrnl70q4dLId
dW37/ryCUtlOpJB99jG2g1xALoVlHWfYuCtY8DZOZUhtfZ78iVjW5I8tAa34ap5Z
39wbuEUK1Wtl+GzG6W1fEKxBbdrCy9e4TVUXhNeXZYZDDLSOysTT6tJqmgqwxz3+
LBay9iYQbp+iRa/pVvHV6/txqpmaEua7zEiiP6/fYnfVjgE3yL4PN7IVFBy89IR6
wRsZA1rTYgb/OGtZJFXuGf61hpH2prVb08XSFGQnyNP8QhzpGQLJHAU0oSLcWdka
oJetmlCEtDNYP8NPMF84iAccxgipNxQ9Lw8wvtPxb0THfFC7beERpexnBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTpErcTQjHY+viWofNHmAyIxBW5MB8GA1UdIwQY
MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt
MzE4MGFlNDI3NGYzLzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz
LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQdWnMwc
bofWcuksWUkXh2MG0mlMTqmGxKJGOScDzZb0n9ZGdCzNpuZS1s7rUSKACzMdW0VT
jKsl6bDRMmANzEauoaNw/YPrUQMzRwAKVKW3XdRE6sccVfF7ugOm4bTl2ojbJwb4
tAnafTYG+/V7J08vnGYXbUgpGSf5nSmHP6OC+99R+3oxkkRkfUOZQ0AYP19COIaa
G+1pdlwPsgBhw6ATyZkkq28fUoarght74u2sZszr7dh1jGibROcaDRBGGgWPVCaJ
CCdDlYVGJ0vzwf6GyIrLEr9nSEn5lK77Sg1Sr+dBsmG8p6Y4jU8p4HFP+akfgjnJ
uBX2ak/UV+O/mw==
-----END CERTIFICATE-----
Generated at Mon Mar 30 00:01:49 2026 by rpki-client