Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
File:                     Wc4cxXrNTYGB7TBThd7njbF14iE.mft (raw, json)
Hash identifier:          DdZXsEGQJX4poQhg5/p/rheCamDOt20MO0qyBDh0Kc4=
Subject key identifier:   BC:19:20:74:A0:19:65:3D:93:A5:73:EA:00:1B:67:85:64:C6:60:B0
Authority key identifier: 59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21
Certificate issuer:       /CN=59ce1cc57acd4d8181ed305385dee78db175e221
Certificate serial:       019D2A728B09ACF2B9D7E8038FD95D6022A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
Manifest number:          1866
Signing time:             Thu 26 Mar 2026 14:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:42 +0000
Files and hashes:         1: JHzr-fDxgEMp9ezJsIm0piJhMic.roa (hash: xjYg8AyxN1oM4uVPsqeVh/5zmMR24rFQndC0jX4CsDk=)
                          2: Wc4cxXrNTYGB7TBThd7njbF14iE.crl (hash: ZuYonoTQU+B7CwR96JFMyck5OnFyLeKRgVE//pJLB3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:8b:09:ac:f2:b9:d7:e8:03:8f:d9:5d:60:22:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ce1cc57acd4d8181ed305385dee78db175e221
        Validity
            Not Before: Mar 26 14:00:42 2026 GMT
            Not After : Mar 27 14:00:42 2026 GMT
        Subject: CN=bc192074a019653d93a573ea001b678564c660b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:59:55:fd:f1:ec:57:cf:22:e4:64:fc:02:
                    1c:39:d5:fe:bb:14:e4:15:c3:a7:7d:b4:67:4d:5e:
                    2f:3e:c1:ce:eb:ca:4d:3a:f6:5f:0b:4f:a4:c9:71:
                    11:f2:4b:9c:71:80:1a:b4:7e:ee:6d:ce:3f:91:86:
                    dc:91:f1:c2:32:72:70:73:86:aa:74:28:52:5a:75:
                    5e:bc:df:b0:66:36:ff:78:68:cf:e9:31:e7:0f:61:
                    0c:f0:37:ff:6b:9b:f4:ba:e4:d5:96:e0:28:a7:42:
                    25:ad:34:a9:85:08:38:5d:5e:41:32:12:7f:2b:b4:
                    49:2d:f6:07:f8:2d:9e:3c:fa:f6:de:9b:3b:eb:9f:
                    30:7f:47:16:fb:9d:38:b8:0e:69:f9:b9:40:30:d1:
                    e1:c1:2b:4c:b5:3c:98:57:3d:69:ef:aa:fd:ec:46:
                    0e:ff:1b:98:70:d7:cc:a7:0f:20:75:3c:77:df:2d:
                    cd:95:e3:0a:f9:f4:72:7f:f4:1c:a7:89:26:b5:09:
                    0c:06:4c:ea:ed:17:51:f0:c8:79:5f:1c:7f:e3:b4:
                    e2:af:89:5e:7e:7d:ce:76:54:44:84:a3:ba:33:8c:
                    71:6b:de:b5:57:e7:f5:03:47:7d:ed:b3:91:ee:f2:
                    15:fa:e9:2b:fe:5e:1f:14:5e:e0:40:90:51:07:c1:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:19:20:74:A0:19:65:3D:93:A5:73:EA:00:1B:67:85:64:C6:60:B0
            X509v3 Authority Key Identifier:
                keyid:59:CE:1C:C5:7A:CD:4D:81:81:ED:30:53:85:DE:E7:8D:B1:75:E2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc4cxXrNTYGB7TBThd7njbF14iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c144dc-f562-4a3e-b6ca-c162ddfdee73/1/Wc4cxXrNTYGB7TBThd7njbF14iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:1b:6f:c4:6c:dd:5d:48:b1:4b:79:27:78:fd:19:a0:7b:4b:
         34:b9:0e:2e:48:28:2f:3c:25:2e:d5:b1:b2:0a:ac:96:73:f7:
         a6:5c:a7:49:a5:80:9b:0f:e3:c3:5b:63:fd:a4:9c:1c:69:7b:
         33:08:c6:eb:c9:3f:88:58:f6:ce:1d:fe:ca:7e:3c:55:70:89:
         d0:fc:7e:16:9c:45:26:62:09:1f:0b:7d:c8:20:46:30:f3:03:
         3c:9c:d5:d5:55:35:0f:93:77:52:0a:88:ce:12:60:e4:d3:b3:
         98:24:5d:3b:61:49:a2:f2:ee:fe:7a:9a:86:05:dc:43:64:af:
         79:56:74:c9:5a:c8:12:c8:41:9f:dc:f7:bb:65:cb:28:bd:32:
         1a:f0:f9:71:1f:70:8d:83:25:1d:db:ed:e8:c0:6e:07:d9:b4:
         9d:87:9c:79:5f:52:6e:ef:a6:fb:5a:a0:89:96:4a:44:b2:b8:
         93:62:18:05:d8:a6:06:07:e2:f6:ae:32:80:89:c6:4d:75:bf:
         bf:37:da:9f:ff:94:35:ea:6d:4f:bd:f7:26:43:41:a5:de:41:
         84:a2:96:9a:81:47:72:07:b7:3f:d0:a6:77:c5:8f:a8:26:a6:
         45:c1:4f:a1:90:88:3a:12:b4:56:1e:3c:23:ce:42:c6:16:33:
         f9:7f:ee:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:33:07 2026 by rpki-client