Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
File:                     wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json)
Hash identifier:          zmsygBtqMXAZpAI1gUT1LAE+E/5sa9Haw6H3YrufTmo=
Subject key identifier:   D9:C8:5D:B5:51:69:DB:D2:60:EC:C1:87:2E:BC:93:64:A3:2F:96:CC
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Certificate issuer:       /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial:       019CE3A32B220E456E92F5B88616158C0262
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
Manifest number:          1863
Signing time:             Thu 12 Mar 2026 20:00:47 +0000
Manifest this update:     Thu 12 Mar 2026 20:00:47 +0000
Manifest next update:     Fri 13 Mar 2026 20:00:47 +0000
Files and hashes:         1: fkjKY1GubqopgVMFItI3Dks0F0s.roa (hash: XHHriZ3RedEv637kMieJw9uopGlbC5EMU7/X4VulIbY=)
                          2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: O+avqrF7fr3JRXYJfS1S/be4MqL1piyuQMkAo8N0Z/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:a3:2b:22:0e:45:6e:92:f5:b8:86:16:15:8c:02:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
        Validity
            Not Before: Mar 12 20:00:47 2026 GMT
            Not After : Mar 13 20:00:47 2026 GMT
        Subject: CN=d9c85db55169dbd260ecc1872ebc9364a32f96cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:41:e6:d3:40:9c:73:97:b8:00:73:45:55:
                    62:52:29:b3:cc:59:53:58:74:d2:5e:3d:71:bd:95:
                    32:a2:80:aa:0c:a5:db:6f:69:e2:9e:5e:cb:4e:f8:
                    b9:29:1d:0d:49:46:20:f8:5c:20:05:2a:06:92:9c:
                    95:47:b5:a8:f9:9e:89:bc:4a:34:03:00:ce:f3:55:
                    d1:75:0c:53:ab:fa:82:32:d0:32:49:ba:f5:d7:f6:
                    2f:f4:4c:f0:d8:13:31:a0:e0:6e:b1:a7:3d:58:bc:
                    88:47:7b:71:56:c8:fc:f9:82:b1:e0:73:65:27:e7:
                    ca:65:c2:ff:32:7f:46:17:58:13:2e:53:9c:c5:71:
                    2d:36:8d:74:36:cf:c7:ea:4e:17:4f:a9:5b:52:65:
                    16:c8:3f:7d:5c:8c:bf:f3:9f:d5:08:1c:11:fc:5c:
                    55:f2:dd:fc:cf:35:00:aa:60:00:07:7c:41:2e:5c:
                    df:40:c2:0b:12:fe:77:e6:ec:a0:c1:bb:b1:5f:be:
                    e0:2f:70:ce:12:e0:0c:22:18:98:85:e8:6f:73:cc:
                    a4:ba:f5:e5:45:88:7c:98:b4:c7:af:9a:ab:f1:67:
                    7a:08:79:28:fe:28:f3:bd:66:e5:d3:e6:89:5c:5b:
                    25:92:1b:26:73:b2:ee:c8:a6:5f:d0:8a:a2:f4:a8:
                    0c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C8:5D:B5:51:69:DB:D2:60:EC:C1:87:2E:BC:93:64:A3:2F:96:CC
            X509v3 Authority Key Identifier:
                keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d8:93:d5:84:c8:48:59:48:3c:cf:d4:2d:b0:18:8d:4b:6c:
         61:71:8d:21:9e:56:85:48:47:17:cf:a5:c2:9e:37:b7:26:8f:
         48:e7:4e:7d:68:73:6f:04:e0:f8:ec:b5:34:86:dc:90:d3:51:
         da:48:e9:7c:ed:f8:b6:c8:6f:65:91:c9:05:4e:de:27:ca:92:
         4b:e9:3c:27:6f:85:c0:e4:4e:4e:f3:f0:9f:36:1b:85:ba:69:
         51:6a:ad:8f:bb:04:7d:5a:26:7e:09:9b:57:ff:49:28:af:ce:
         52:9a:b3:77:0c:3f:33:58:1a:41:be:44:64:7f:c9:b5:12:01:
         05:3f:4d:a6:ac:a2:c2:f5:c0:ec:e5:bf:4e:64:ac:69:83:94:
         eb:52:d6:ca:22:18:92:fe:ec:ad:f0:c6:e3:02:17:51:71:88:
         bb:57:71:48:b4:83:c1:7f:91:c2:f0:ae:bb:bd:eb:c8:90:67:
         a8:fd:a0:08:bc:45:f6:22:3c:44:08:a2:4e:fb:2a:67:d3:3a:
         44:be:bf:c6:58:b2:50:34:35:e9:c4:a3:19:44:c8:d5:74:58:
         0f:7f:df:39:fc:f6:eb:d7:a9:27:fc:81:22:56:88:c6:04:22:
         91:5c:ca:83:ee:e1:81:aa:d1:b2:dc:20:d0:72:24:29:a6:8c:
         11:1d:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:48:11 2026 by rpki-client