Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
File:                     w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft (raw, json)
Hash identifier:          6lVnAnLqz9/zycA+EAPX+TiUfisrm2A0YE7rMEuG5lU=
Subject key identifier:   EF:EE:FB:4D:50:EC:C4:A6:42:43:B4:26:89:79:84:CA:6A:9D:D2:4D
Authority key identifier: C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF
Certificate issuer:       /CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
Certificate serial:       019D284E36BA8DB81E1CCF372EFC54F4F04B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 04:01:47 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:47 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:47 +0000
Files and hashes:         1: dkQTrdNvtvje7aKttedC3FE0Fck.roa (hash: IBLR02ROwGRE+mKgwpI/u7N2DEv8jHgVC6B9SzrNPZc=)
                          2: jkV0poRpEabjs8GbnFFp-G9LAo4.roa (hash: FGABQx3WiC5iQbCtEVt4c6hjkgReQfgzufO5sALc4Wg=)
                          3: w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl (hash: HOVCJUC1TBa3eg4a7n+V22yFomblXmicrKWavW4W4jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:36:ba:8d:b8:1e:1c:cf:37:2e:fc:54:f4:f0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a49f65a3d680c428fd94d67e65a2709f0292cf
        Validity
            Not Before: Mar 26 04:01:47 2026 GMT
            Not After : Mar 27 04:01:47 2026 GMT
        Subject: CN=efeefb4d50ecc4a64243b426897984ca6a9dd24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4c:aa:d0:5a:03:b1:71:d5:e2:2b:5e:ad:8b:
                    1b:7a:a5:cd:d6:77:8d:0d:b1:6c:63:79:4c:db:fa:
                    ed:b7:f5:1c:95:bf:73:78:04:55:dc:b6:23:01:25:
                    e8:cd:c3:24:28:45:21:59:a9:6f:5e:ec:7c:0a:e1:
                    d2:7b:12:5b:87:06:d1:a1:ca:53:54:9b:1f:a8:11:
                    64:c1:53:0f:51:66:39:4d:e3:3d:2a:d6:3f:0b:e8:
                    d9:87:c7:7b:a3:7d:33:11:c5:be:33:b9:1f:f1:f7:
                    f5:89:37:f5:43:b1:cd:b3:55:0f:b4:80:92:cb:ce:
                    7e:0f:89:c1:fb:19:76:fe:22:40:1c:e0:d3:4c:75:
                    82:d1:04:c0:60:42:8b:64:96:20:6e:5e:eb:40:97:
                    cf:de:7d:92:0e:ef:78:c5:03:07:cb:38:ab:dc:24:
                    13:04:25:8b:d0:32:94:a5:28:b3:2b:fc:b2:4f:f6:
                    8c:3a:fd:2b:cf:40:cc:b4:12:7b:b9:bc:f0:1e:fb:
                    81:1b:12:e1:41:da:b9:14:44:46:5c:4a:d1:ce:41:
                    65:8f:a0:dc:49:a1:9c:d8:bf:9b:e2:e5:8d:9c:27:
                    30:24:8b:15:9e:9d:cf:58:45:50:cb:5b:e1:ff:dc:
                    07:c8:4e:2b:db:b5:8f:8a:68:c6:3a:c3:14:32:1d:
                    85:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EE:FB:4D:50:EC:C4:A6:42:43:B4:26:89:79:84:CA:6A:9D:D2:4D
            X509v3 Authority Key Identifier:
                keyid:C3:A4:9F:65:A3:D6:80:C4:28:FD:94:D6:7E:65:A2:70:9F:02:92:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/04e8dd-de3c-47fa-a024-f33797e39bb2/1/w6SfZaPWgMQo_ZTWfmWicJ8Cks8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c2:d6:e9:47:8e:c2:9f:49:77:cd:9b:79:28:c3:dc:e2:4f:
         e4:e7:09:16:83:bb:44:6d:c4:d6:47:87:cc:a0:18:c7:42:56:
         dd:fd:7e:ad:e3:4f:18:63:13:c7:d0:60:8d:ea:21:24:45:02:
         fb:97:11:36:58:09:3b:34:b3:4c:7f:71:7f:d5:c2:a7:0b:4f:
         4e:ef:2d:43:84:58:af:ca:33:12:79:ea:61:fb:e7:98:e0:8f:
         34:76:c3:df:d1:3b:a0:8a:4c:8d:dd:08:6a:c1:02:ba:e6:82:
         3c:66:a5:1e:d5:67:e6:b8:d8:17:3b:47:73:df:b9:2a:de:26:
         b9:1c:53:b8:0d:71:b3:01:48:30:ba:ba:95:e8:63:af:48:0c:
         bf:69:57:82:12:16:25:c9:97:13:e1:e4:ab:ad:88:98:59:81:
         b6:47:eb:a3:43:dd:56:59:89:10:55:ff:5e:95:90:d4:97:17:
         4d:3d:3c:af:aa:20:4c:6f:89:89:e8:d4:17:b0:e6:e8:94:b2:
         9d:71:10:71:6a:27:8f:99:c6:44:2e:36:56:cb:c3:2e:ec:ed:
         85:62:1c:2a:cb:ba:ec:8a:1c:e0:a3:e6:ac:20:80:60:ee:6c:
         2a:2c:fb:d4:10:8f:a5:1a:37:45:9c:80:c8:65:9d:2e:03:7d:
         95:ab:50:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTja6jbgeHM83LvxU9PBLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTQ5ZjY1YTNkNjgwYzQyOGZkOTRkNjdlNjVhMjcwOWYw
MjkyY2YwHhcNMjYwMzI2MDQwMTQ3WhcNMjYwMzI3MDQwMTQ3WjAzMTEwLwYDVQQD
EyhlZmVlZmI0ZDUwZWNjNGE2NDI0M2I0MjY4OTc5ODRjYTZhOWRkMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70yq0FoDsXHV4iterYsbeqXN1neN
DbFsY3lM2/rtt/Uclb9zeARV3LYjASXozcMkKEUhWalvXux8CuHSexJbhwbRocpT
VJsfqBFkwVMPUWY5TeM9KtY/C+jZh8d7o30zEcW+M7kf8ff1iTf1Q7HNs1UPtICS
y85+D4nB+xl2/iJAHODTTHWC0QTAYEKLZJYgbl7rQJfP3n2SDu94xQMHyzir3CQT
BCWL0DKUpSizK/yyT/aMOv0rz0DMtBJ7ubzwHvuBGxLhQdq5FERGXErRzkFlj6Dc
SaGc2L+b4uWNnCcwJIsVnp3PWEVQy1vh/9wHyE4r27WPimjGOsMUMh2F2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/u+01Q7MSmQkO0Jol5hMpqndJNMB8GA1UdIwQY
MBaAFMOkn2Wj1oDEKP2U1n5lonCfApLPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZTZlphUFdnTVFvX1pUV2ZtV2ljSjhDa3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8wNGU4ZGQtZGUzYy00N2ZhLWEwMjQt
ZjMzNzk3ZTM5YmIyLzEvdzZTZlphUFdnTVFvX1pUV2ZtV2ljSjhDa3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8wNGU4ZGQtZGUzYy00N2ZhLWEwMjQtZjMzNzk3ZTM5YmIy
LzEvdzZTZlphUFdnTVFvX1pUV2ZtV2ljSjhDa3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecLW6UeO
wp9Jd82beSjD3OJP5OcJFoO7RG3E1keHzKAYx0JW3f1+reNPGGMTx9BgjeohJEUC
+5cRNlgJOzSzTH9xf9XCpwtPTu8tQ4RYr8ozEnnqYfvnmOCPNHbD39E7oIpMjd0I
asECuuaCPGalHtVn5rjYFztHc9+5Kt4muRxTuA1xswFIMLq6lehjr0gMv2lXghIW
JcmXE+Hkq62ImFmBtkfro0PdVlmJEFX/XpWQ1JcXTT08r6ogTG+JiejUF7Dm6JSy
nXEQcWonj5nGRC42VsvDLuzthWIcKsu67Ioc4KPmrCCAYO5sKiz71BCPpRo3RZyA
yGWdLgN9latQXQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:19:47 2026 by rpki-client