Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
File:                     WHiPOEJuA2KzTdVnND_oRhpYur4.mft (raw, json)
Hash identifier:          8BN4KktFahtvHQ/IObnvIeZIxagiFlKmXF3oP95RW4E=
Subject key identifier:   4D:04:D2:B4:2C:7F:80:57:C5:E9:6A:20:F4:BA:0D:85:37:0E:36:94
Authority key identifier: 58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE
Certificate issuer:       /CN=58788f38426e0362b34dd567343fe8461a58babe
Certificate serial:       019D2996EDCA7CA6BF0470E5C76BBED52AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
Manifest number:          15CD
Signing time:             Thu 26 Mar 2026 10:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 10:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 10:00:50 +0000
Files and hashes:         1: UQttblox4YqbtmcdrnTNUlIXUrA.roa (hash: Kp4mizWB09vMj96WX2Mw1hMJlxG7gErBxSdQDtVOWsI=)
                          2: WHiPOEJuA2KzTdVnND_oRhpYur4.crl (hash: hVKVw2wHr8AkS+bf34WJTluzzzo3FvrVIQwZ9qF2xlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:96:ed:ca:7c:a6:bf:04:70:e5:c7:6b:be:d5:2a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58788f38426e0362b34dd567343fe8461a58babe
        Validity
            Not Before: Mar 26 10:00:50 2026 GMT
            Not After : Mar 27 10:00:50 2026 GMT
        Subject: CN=4d04d2b42c7f8057c5e96a20f4ba0d85370e3694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d6:af:2c:48:6a:15:e9:3a:4e:dd:89:0f:17:
                    1d:26:ad:1d:2d:88:42:c6:84:04:8c:c2:38:a4:37:
                    d7:9a:3d:0e:91:eb:8d:e8:6c:0d:3b:35:84:a6:72:
                    3d:22:a5:78:f4:55:32:68:a1:43:01:f0:62:00:11:
                    0f:7b:fe:7d:e4:01:1d:02:6a:7a:9a:5b:c8:25:25:
                    4f:bb:09:a6:ce:3e:8d:6d:c3:f8:32:89:d9:7f:19:
                    23:48:5a:34:60:6f:35:ae:5a:92:9d:ec:6a:bc:7e:
                    4b:c4:9b:a5:17:f8:75:e1:f4:ab:15:c3:f4:56:f4:
                    17:2d:0d:86:32:3d:3e:3d:3f:c7:0d:35:2a:c6:87:
                    00:aa:05:1d:1d:df:db:f1:90:8c:99:46:be:e1:36:
                    c7:c6:70:23:14:17:a8:d8:cf:3f:d1:41:76:45:e8:
                    2f:61:a0:e9:91:9d:fe:8f:fe:ca:b3:9b:23:1b:76:
                    51:a7:c5:5c:ca:4f:a4:bd:58:31:1d:e4:c6:b9:ca:
                    53:f3:b6:ba:8c:e2:c7:72:f9:d2:b0:f5:8d:75:1b:
                    19:bc:55:6b:50:7c:ba:73:71:79:fa:41:57:d2:92:
                    b0:c7:75:16:37:48:17:b8:08:15:82:18:62:0b:49:
                    35:53:69:a9:a1:24:59:97:b9:cf:ea:3b:3e:21:43:
                    69:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:04:D2:B4:2C:7F:80:57:C5:E9:6A:20:F4:BA:0D:85:37:0E:36:94
            X509v3 Authority Key Identifier:
                keyid:58:78:8F:38:42:6E:03:62:B3:4D:D5:67:34:3F:E8:46:1A:58:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHiPOEJuA2KzTdVnND_oRhpYur4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3d3b27-f786-41e0-ac54-bfc0ff97a190/1/WHiPOEJuA2KzTdVnND_oRhpYur4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:30:ae:b9:e5:17:06:09:f1:fa:aa:28:36:79:28:5d:ab:6b:
         8b:38:a1:22:0c:53:82:b8:99:d5:2a:ed:4f:19:b2:d6:34:1a:
         3d:64:43:08:f3:b7:27:54:cb:31:e9:51:fe:2a:4b:5f:8a:ce:
         0c:ef:f2:d3:ec:70:56:ef:63:65:3e:f8:7c:c3:86:46:6e:05:
         51:d2:d1:dc:83:0c:60:2e:b0:fc:1b:7e:b9:59:eb:1f:f3:7d:
         51:4e:e9:d1:c8:70:63:d2:cb:6e:19:37:8d:22:96:e6:8e:70:
         fe:b0:df:6c:e9:f8:d4:c6:15:6a:3c:09:0c:0f:94:d8:bf:6f:
         62:c9:dd:c1:13:5c:4f:34:41:b0:81:94:32:de:aa:2a:c8:86:
         8a:b9:cd:64:a6:46:ed:02:67:67:b5:03:30:80:c2:e6:f9:78:
         01:8b:5d:84:15:e0:02:50:c0:77:17:51:65:72:10:3f:38:7d:
         60:9d:63:7e:75:73:32:c1:40:bd:ab:20:4c:8f:af:5c:ca:5f:
         a9:1b:6e:84:50:db:a3:f7:79:7d:89:6c:fe:b3:69:47:64:84:
         74:ab:29:7d:93:7f:51:7a:37:26:d5:1b:a2:ff:cd:ea:56:a9:
         d6:81:ff:17:d5:ba:07:f8:55:ab:4f:2e:a4:0e:eb:58:75:4e:
         20:58:95:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plu3KfKa/BHDlx2u+1SqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Nzg4ZjM4NDI2ZTAzNjJiMzRkZDU2NzM0M2ZlODQ2MWE1
OGJhYmUwHhcNMjYwMzI2MTAwMDUwWhcNMjYwMzI3MTAwMDUwWjAzMTEwLwYDVQQD
Eyg0ZDA0ZDJiNDJjN2Y4MDU3YzVlOTZhMjBmNGJhMGQ4NTM3MGUzNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdavLEhqFek6Tt2JDxcdJq0dLYhC
xoQEjMI4pDfXmj0OkeuN6GwNOzWEpnI9IqV49FUyaKFDAfBiABEPe/595AEdAmp6
mlvIJSVPuwmmzj6NbcP4MonZfxkjSFo0YG81rlqSnexqvH5LxJulF/h14fSrFcP0
VvQXLQ2GMj0+PT/HDTUqxocAqgUdHd/b8ZCMmUa+4TbHxnAjFBeo2M8/0UF2Regv
YaDpkZ3+j/7Ks5sjG3ZRp8Vcyk+kvVgxHeTGucpT87a6jOLHcvnSsPWNdRsZvFVr
UHy6c3F5+kFX0pKwx3UWN0gXuAgVghhiC0k1U2mpoSRZl7nP6js+IUNp+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0E0rQsf4BXxelqIPS6DYU3DjaUMB8GA1UdIwQY
MBaAFFh4jzhCbgNis03VZzQ/6EYaWLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQt
YmZjMGZmOTdhMTkwLzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8zZDNiMjctZjc4Ni00MWUwLWFjNTQtYmZjMGZmOTdhMTkw
LzEvV0hpUE9FSnVBMkt6VGRWbk5EX29SaHBZdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjCuueUX
Bgnx+qooNnkoXatrizihIgxTgriZ1SrtTxmy1jQaPWRDCPO3J1TLMelR/ipLX4rO
DO/y0+xwVu9jZT74fMOGRm4FUdLR3IMMYC6w/Bt+uVnrH/N9UU7p0chwY9LLbhk3
jSKW5o5w/rDfbOn41MYVajwJDA+U2L9vYsndwRNcTzRBsIGUMt6qKsiGirnNZKZG
7QJnZ7UDMIDC5vl4AYtdhBXgAlDAdxdRZXIQPzh9YJ1jfnVzMsFAvasgTI+vXMpf
qRtuhFDbo/d5fYls/rNpR2SEdKspfZN/UXo3JtUbov/N6lap1oH/F9W6B/hVq08u
pA7rWHVOIFiVlQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:00 2026 by rpki-client