Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
File:                     Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft (raw, json)
Hash identifier:          HOdtGkCuRP0A21QuYiURtvczz+3GxXoBWr6Y8Avg+9g=
Subject key identifier:   A8:D2:EC:1C:2B:E1:CE:AF:3D:4D:56:62:10:0F:7E:85:AF:82:07:04
Authority key identifier: 5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F
Certificate issuer:       /CN=5afd8667cce95be0ae96058c4550d7088035312f
Certificate serial:       019E1DFDFB8E4FA27801C55C0F173F73E176
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
Manifest number:          1587
Signing time:             Tue 12 May 2026 21:00:44 +0000
Manifest this update:     Tue 12 May 2026 21:00:44 +0000
Manifest next update:     Wed 13 May 2026 21:00:44 +0000
Files and hashes:         1: 6-cD7PwZNNg8B5NEI6cnS9qsYws.roa (hash: EYqd8s/hHYel0xQm6Q8ZXtIUTI9f5VFJlpaewnbnCgw=)
                          2: OOHuoxQHwcTPw0lmXeoWsx3MPDs.roa (hash: 0adogDb33iNZDpARqzB5nWTOkYnidB5h7S3awTSepJY=)
                          3: Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl (hash: sQgJQnidlqb7wivMqZWJNt5BE0GwuZYH9KAuDPUif8M=)
                          4: zHZaUGL1PgevIY9huCaPmQ1rgRA.roa (hash: ncKaZ+bqsMAHSDw8fyhXbISTNBW6FE6m6Rhkmp7c75o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fd:fb:8e:4f:a2:78:01:c5:5c:0f:17:3f:73:e1:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afd8667cce95be0ae96058c4550d7088035312f
        Validity
            Not Before: May 12 21:00:44 2026 GMT
            Not After : May 13 21:00:44 2026 GMT
        Subject: CN=a8d2ec1c2be1ceaf3d4d5662100f7e85af820704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:55:08:9a:d3:1e:26:4f:c1:49:ec:0a:90:
                    da:c2:90:13:69:11:0c:e5:97:99:bd:ad:d4:c7:cc:
                    4c:42:59:b8:b0:ab:fd:40:e8:e2:70:89:5e:79:b3:
                    ed:0a:b4:6c:4d:bb:a2:2e:28:7d:5c:ad:fd:10:79:
                    f1:6e:da:00:b4:24:96:94:3e:c5:81:f9:f8:9e:a2:
                    dc:3c:0c:ed:1f:ae:cb:f1:79:20:c7:03:60:df:15:
                    0a:df:ce:c2:1f:f7:ed:3b:2b:0e:8d:6d:f6:f2:33:
                    77:f0:10:c0:9e:ae:00:75:9b:9a:78:96:28:fa:fd:
                    8c:b7:ff:d7:cd:e1:51:6c:56:e1:9a:9f:cb:dc:97:
                    b7:63:42:ea:70:96:a9:98:ad:72:9b:9c:2d:af:e0:
                    da:e4:5d:08:22:17:36:6d:b2:10:cf:78:90:10:fb:
                    7e:0b:4c:c4:9b:52:0b:f9:77:f8:dd:86:86:8e:df:
                    be:8b:d9:b9:e1:cb:3e:9f:ed:98:e5:9c:aa:12:34:
                    91:60:0b:81:00:31:05:73:e3:3e:2c:be:1a:61:fe:
                    46:31:f0:ef:c7:d4:95:47:21:93:8d:de:76:25:08:
                    c0:37:1f:61:71:1d:be:ca:de:66:f1:c1:63:45:64:
                    c3:cd:03:30:45:00:d3:20:4b:26:df:a5:9a:06:a0:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:EC:1C:2B:E1:CE:AF:3D:4D:56:62:10:0F:7E:85:AF:82:07:04
            X509v3 Authority Key Identifier:
                keyid:5A:FD:86:67:CC:E9:5B:E0:AE:96:05:8C:45:50:D7:08:80:35:31:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/aacb0a-cf64-4e75-a9df-249ac773c282/1/Wv2GZ8zpW-CulgWMRVDXCIA1MS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:8b:03:8d:d0:c7:4e:a7:08:c8:91:00:a3:45:bb:b3:5f:6a:
         41:da:15:c7:8a:d2:9e:84:82:4b:61:60:e2:b1:7d:c1:d6:3c:
         f8:ef:7b:e2:f4:d4:e9:89:90:99:99:0d:66:3f:2e:ef:6a:9a:
         2d:b2:92:89:0f:47:a8:63:a8:cd:e6:4d:2c:5c:cb:2a:e7:54:
         f8:0a:37:59:ee:d8:d7:79:e9:4e:e6:8a:c9:82:b0:11:97:bb:
         8d:f7:fd:6d:32:c4:88:dc:07:a9:b9:b9:5b:3f:98:f1:3a:de:
         2b:4b:73:22:c5:9a:2d:1a:ac:34:1b:c7:a6:f2:d5:e7:92:70:
         53:06:22:89:60:62:3e:f1:65:4a:bd:df:b8:12:e9:bf:c1:1f:
         64:64:6d:e5:38:f6:7d:b1:16:51:09:25:8c:91:72:ae:e8:6a:
         0f:1b:e9:2f:97:46:f9:fd:ec:af:36:72:8a:c4:e9:39:f5:a6:
         4f:fd:00:87:d6:98:fb:5a:7c:45:07:e4:f5:33:2e:3f:db:21:
         45:67:6a:09:b9:26:de:5c:56:53:b1:ed:57:36:68:04:2e:04:
         ba:a6:fc:1c:c7:09:a1:01:09:c2:c7:68:6c:bd:dd:38:43:60:
         bd:e0:fc:5e:eb:60:69:9f:f6:62:3c:48:8d:b7:31:b1:9d:45:
         71:6b:62:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/fuOT6J4AcVcDxc/c+F2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZmQ4NjY3Y2NlOTViZTBhZTk2MDU4YzQ1NTBkNzA4ODAz
NTMxMmYwHhcNMjYwNTEyMjEwMDQ0WhcNMjYwNTEzMjEwMDQ0WjAzMTEwLwYDVQQD
EyhhOGQyZWMxYzJiZTFjZWFmM2Q0ZDU2NjIxMDBmN2U4NWFmODIwNzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+hVCJrTHiZPwUnsCpDawpATaREM
5ZeZva3Ux8xMQlm4sKv9QOjicIleebPtCrRsTbuiLih9XK39EHnxbtoAtCSWlD7F
gfn4nqLcPAztH67L8XkgxwNg3xUK387CH/ftOysOjW328jN38BDAnq4AdZuaeJYo
+v2Mt//XzeFRbFbhmp/L3Je3Y0LqcJapmK1ym5wtr+Da5F0IIhc2bbIQz3iQEPt+
C0zEm1IL+Xf43YaGjt++i9m54cs+n+2Y5ZyqEjSRYAuBADEFc+M+LL4aYf5GMfDv
x9SVRyGTjd52JQjANx9hcR2+yt5m8cFjRWTDzQMwRQDTIEsm36WaBqCiHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjS7Bwr4c6vPU1WYhAPfoWvggcEMB8GA1UdIwQY
MBaAFFr9hmfM6VvgrpYFjEVQ1wiANTEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYt
MjQ5YWM3NzNjMjgyLzEvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9hYWNiMGEtY2Y2NC00ZTc1LWE5ZGYtMjQ5YWM3NzNjMjgy
LzEvV3YyR1o4enBXLUN1bGdXTVJWRFhDSUExTVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUosDjdDH
TqcIyJEAo0W7s19qQdoVx4rSnoSCS2Fg4rF9wdY8+O974vTU6YmQmZkNZj8u72qa
LbKSiQ9HqGOozeZNLFzLKudU+Ao3We7Y13npTuaKyYKwEZe7jff9bTLEiNwHqbm5
Wz+Y8TreK0tzIsWaLRqsNBvHpvLV55JwUwYiiWBiPvFlSr3fuBLpv8EfZGRt5Tj2
fbEWUQkljJFyruhqDxvpL5dG+f3srzZyisTpOfWmT/0Ah9aY+1p8RQfk9TMuP9sh
RWdqCbkm3lxWU7HtVzZoBC4Euqb8HMcJoQEJwsdobL3dOENgveD8XutgaZ/2YjxI
jbcxsZ1FcWtivw==
-----END CERTIFICATE-----
Generated at Wed May 13 02:43:55 2026 by rpki-client