Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File:                     WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier:          GpTpV4OKg6GdNjZZs+/54nXyjVHc28ddZpdlUH1n/pk=
Subject key identifier:   63:2F:5F:E0:70:FA:A2:61:62:3C:2A:6F:85:FE:EF:58:E9:12:0D:FE
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer:       /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial:       019D273B1FAD148562E77F999BCF86338ED1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 23:01:19 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:19 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:19 +0000
Files and hashes:         1: 0dnjqtNqlGr2gvhu_tFz-SXliR4.roa (hash: t2qLzugd9xhfE3idBqMcmuwC4C5rfcraLp7miENReGQ=)
                          2: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: h5uh4PBIdkx/eIZIqp+eDCNg5XRfNc9C5Pg9WQ/Wpxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:1f:ad:14:85:62:e7:7f:99:9b:cf:86:33:8e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
        Validity
            Not Before: Mar 25 23:01:19 2026 GMT
            Not After : Mar 26 23:01:19 2026 GMT
        Subject: CN=632f5fe070faa261623c2a6f85feef58e9120dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:6c:32:9d:3a:08:c5:6e:b9:61:56:c0:1d:
                    ad:14:a2:02:4f:3f:8c:4c:d8:5d:53:2f:9f:64:8a:
                    7b:3a:49:da:54:c1:d7:ef:ff:48:14:e5:d9:36:ad:
                    e2:2f:4a:6f:60:70:c2:58:c4:5b:7d:f8:05:bd:dd:
                    31:3e:7d:6f:89:24:c4:a9:b0:fe:ae:fc:81:d2:ad:
                    3f:d3:b1:19:0f:8b:eb:24:43:ea:54:88:13:af:3b:
                    d4:fb:35:0c:6a:5f:52:2a:27:14:a9:2c:71:cf:3d:
                    25:78:65:c2:82:00:b7:be:28:8f:b0:b0:d2:6b:24:
                    0a:cf:e8:a0:62:8f:e4:56:21:6b:3d:da:e1:f4:df:
                    63:08:58:66:c8:bb:9f:6a:9e:a4:20:cd:01:14:b2:
                    a6:eb:1f:84:e9:6b:e3:1a:c6:c6:c0:3f:b4:cb:50:
                    cb:82:02:2a:9f:87:2d:91:07:92:2a:8a:3e:d2:0d:
                    e4:7e:cb:1d:70:d9:e3:fe:25:3d:b0:fd:d5:4a:7f:
                    43:ba:ad:6c:0c:d9:07:17:62:b0:9b:64:ec:94:07:
                    01:bf:70:4a:97:ed:4e:21:78:af:49:5f:6d:62:68:
                    9f:7e:92:24:de:c4:bf:04:98:75:35:f9:5d:bf:61:
                    20:2d:6e:7f:b1:af:9e:5a:13:a8:35:6e:20:62:24:
                    2b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2F:5F:E0:70:FA:A2:61:62:3C:2A:6F:85:FE:EF:58:E9:12:0D:FE
            X509v3 Authority Key Identifier:
                keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cd:61:1d:2e:39:f2:be:e7:1a:34:39:25:30:c7:2c:48:f3:
         b0:93:d0:5f:ba:ab:d5:56:07:0a:2a:a9:f8:e8:00:8f:5b:d6:
         07:73:2a:b0:83:0c:8c:e7:fc:9f:6d:91:7b:52:2d:5a:d3:d6:
         5a:37:6a:f8:b5:95:4c:12:2d:16:11:08:5a:e8:68:24:84:f4:
         41:e1:32:47:de:2e:45:08:a5:75:45:9f:cd:2d:6f:01:fc:be:
         01:72:8d:7e:bf:9a:50:51:dc:4c:4e:b3:9d:ba:c1:20:f0:45:
         38:6f:75:29:4d:ab:ed:c7:fe:b0:cf:f8:dd:8a:2d:b8:80:33:
         72:46:e3:44:68:78:97:82:bd:03:84:43:40:f7:60:ea:64:4e:
         cf:8f:20:1a:77:5f:80:c7:d7:05:c8:52:80:4b:fc:2d:cd:44:
         5b:51:01:e8:58:e1:5e:5d:b7:f0:5f:53:35:f1:01:15:89:a1:
         0d:ab:95:e9:95:d3:d1:1c:22:9d:af:da:de:51:eb:af:81:64:
         31:cf:dc:9d:87:34:5c:1f:d1:79:88:1c:98:56:26:e0:5f:5d:
         61:82:42:62:5a:dc:37:16:89:b3:c2:ce:48:eb:54:94:c2:c6:
         9b:9a:e7:d7:42:d1:87:30:0a:ba:8d:18:8f:45:db:bc:4d:70:
         0e:1e:54:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOx+tFIVi53+Zm8+GM47RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZjFkNTI1ZDllMWM4ZmVlN2Y1MWM5Mjk5ODQzMjE5MTJm
ZmYzNGMwHhcNMjYwMzI1MjMwMTE5WhcNMjYwMzI2MjMwMTE5WjAzMTEwLwYDVQQD
Eyg2MzJmNWZlMDcwZmFhMjYxNjIzYzJhNmY4NWZlZWY1OGU5MTIwZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix1sMp06CMVuuWFWwB2tFKICTz+M
TNhdUy+fZIp7OknaVMHX7/9IFOXZNq3iL0pvYHDCWMRbffgFvd0xPn1viSTEqbD+
rvyB0q0/07EZD4vrJEPqVIgTrzvU+zUMal9SKicUqSxxzz0leGXCggC3viiPsLDS
ayQKz+igYo/kViFrPdrh9N9jCFhmyLufap6kIM0BFLKm6x+E6WvjGsbGwD+0y1DL
ggIqn4ctkQeSKoo+0g3kfssdcNnj/iU9sP3VSn9Duq1sDNkHF2Kwm2TslAcBv3BK
l+1OIXivSV9tYmiffpIk3sS/BJh1Nfldv2EgLW5/sa+eWhOoNW4gYiQrRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMvX+Bw+qJhYjwqb4X+71jpEg3+MB8GA1UdIwQY
MBaAFFrx1SXZ4cj+5/UckpmEMhkS//NMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZIVkpkbmh5UDduOVJ5U21ZUXlHUkxfODB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMGZlYTYtMjJhMS00YWE1LWI1MGQt
YTExNDkzOWNkYWE1LzEvV3ZIVkpkbmh5UDduOVJ5U21ZUXlHUkxfODB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMGZlYTYtMjJhMS00YWE1LWI1MGQtYTExNDkzOWNkYWE1
LzEvV3ZIVkpkbmh5UDduOVJ5U21ZUXlHUkxfODB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArc1hHS45
8r7nGjQ5JTDHLEjzsJPQX7qr1VYHCiqp+OgAj1vWB3MqsIMMjOf8n22Re1ItWtPW
Wjdq+LWVTBItFhEIWuhoJIT0QeEyR94uRQildUWfzS1vAfy+AXKNfr+aUFHcTE6z
nbrBIPBFOG91KU2r7cf+sM/43YotuIAzckbjRGh4l4K9A4RDQPdg6mROz48gGndf
gMfXBchSgEv8Lc1EW1EB6FjhXl238F9TNfEBFYmhDauV6ZXT0Rwina/a3lHrr4Fk
Mc/cnYc0XB/ReYgcmFYm4F9dYYJCYlrcNxaJs8LOSOtUlMLGm5rn10LRhzAKuo0Y
j0XbvE1wDh5UVg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:47 2026 by rpki-client