Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
File:                     w-twdDgV_kRclYo8URfvJ1PTD34.mft (raw, json)
Hash identifier:          c/wq61XAxgV28lqkWpFOeRLu7xTm25klZ9yBh8TPfd0=
Subject key identifier:   F2:73:65:58:48:CD:A8:F7:5E:84:BF:EE:3B:8C:F4:E5:99:7B:6C:67
Authority key identifier: C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E
Certificate issuer:       /CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
Certificate serial:       019D28BB94C326A13198F4A024332F292D85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 06:01:15 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:15 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:15 +0000
Files and hashes:         1: 9q8SdW4K_Qfg_qhjmay8aSi22H8.roa (hash: Ep0bFnw6XVVIIq0VGt/sxRJ3Mflsj+GO7Wgmc5rKidw=)
                          2: w-twdDgV_kRclYo8URfvJ1PTD34.crl (hash: FSQEpBAoO+4lUiZ6TzsOlT2I1Mn5nraC6yawamqShA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:94:c3:26:a1:31:98:f4:a0:24:33:2f:29:2d:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3eb70743815fe445c958a3c5117ef2753d30f7e
        Validity
            Not Before: Mar 26 06:01:15 2026 GMT
            Not After : Mar 27 06:01:15 2026 GMT
        Subject: CN=f273655848cda8f75e84bfee3b8cf4e5997b6c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:e3:df:18:74:66:7d:c6:1b:06:8f:58:d0:
                    b9:f4:32:8c:6c:3e:01:6b:46:1f:7d:53:9c:f9:a0:
                    86:13:2e:56:16:e7:c6:8b:a3:5a:86:66:73:9a:29:
                    a9:c0:78:92:1e:8e:8b:0c:4e:96:6c:f3:c8:2c:bb:
                    4e:28:a6:d0:30:7b:1b:19:7b:6c:81:66:dd:83:ef:
                    ab:0e:f9:51:02:5f:17:f7:b6:d9:bc:0d:ca:3c:9f:
                    d9:ce:a7:3e:37:8d:1a:19:cc:5f:32:87:d2:2d:3b:
                    67:06:40:e4:08:34:42:f9:e5:8a:7f:ba:24:d1:09:
                    68:4e:ef:79:a2:5c:f6:a0:66:6f:4d:4b:b1:cb:09:
                    b2:3a:7b:cd:a9:36:fe:2c:47:8f:74:5d:41:f0:78:
                    02:ea:74:7e:8e:f9:06:a8:06:6c:b6:9a:4e:98:73:
                    82:d7:97:fe:f0:cd:ab:fb:48:e8:8c:39:c6:dc:54:
                    26:10:5d:90:6a:df:8a:1b:90:6f:39:03:52:8e:9b:
                    95:b5:66:ee:df:46:fd:19:15:7a:2c:de:16:46:85:
                    72:34:45:64:b1:b7:c4:de:44:c5:d7:13:2b:55:8b:
                    00:3f:42:08:9a:83:95:e0:f4:27:f2:c7:21:2e:71:
                    11:ab:8d:9c:f1:82:6a:97:f4:3a:90:9c:07:fa:ba:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:73:65:58:48:CD:A8:F7:5E:84:BF:EE:3B:8C:F4:E5:99:7B:6C:67
            X509v3 Authority Key Identifier:
                keyid:C3:EB:70:74:38:15:FE:44:5C:95:8A:3C:51:17:EF:27:53:D3:0F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-twdDgV_kRclYo8URfvJ1PTD34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13754c-8be7-460e-8507-13575ef729f3/1/w-twdDgV_kRclYo8URfvJ1PTD34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:47:00:46:39:db:8f:67:5e:4c:a7:22:79:5a:4c:90:19:04:
         3a:50:72:b2:ff:30:e2:5b:5b:73:5d:64:8a:81:c9:4d:74:dc:
         b9:79:c1:e8:b7:a4:96:6e:64:7a:f1:16:0c:5a:30:61:ac:a4:
         8c:ce:87:8f:9b:1f:0a:7a:73:9e:c8:f1:6a:2d:84:23:23:96:
         a1:d2:fd:0a:01:49:a5:fe:25:74:16:6f:1d:25:63:e8:66:1e:
         39:7e:21:be:12:b2:bf:2a:17:66:d6:52:63:df:5e:b0:4a:52:
         e3:5a:79:4a:52:bc:3e:12:64:ad:69:dd:10:fe:34:29:3c:8a:
         c4:e1:aa:4d:ad:bf:d7:a6:b7:f6:8f:38:25:8b:1f:43:c2:d0:
         d0:d9:2f:5f:0f:fb:3d:ed:b5:87:85:16:ab:78:04:dc:b4:c9:
         1e:01:63:96:32:4b:94:5e:4a:6d:59:91:ce:e1:de:8d:e8:65:
         1a:b3:68:b4:9e:c0:78:57:28:db:e1:2b:9a:65:b1:dd:f0:5b:
         5c:6e:a6:d5:ee:bf:81:07:0c:9b:44:90:68:2c:2b:03:9e:a4:
         fd:53:6e:59:41:3b:3c:98:d9:22:0a:69:4f:2f:22:90:f4:d0:
         dd:dd:ae:07:17:fb:41:b3:c8:fe:44:9a:11:72:83:05:5d:4c:
         e0:f5:cc:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5TDJqExmPSgJDMvKS2FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZWI3MDc0MzgxNWZlNDQ1Yzk1OGEzYzUxMTdlZjI3NTNk
MzBmN2UwHhcNMjYwMzI2MDYwMTE1WhcNMjYwMzI3MDYwMTE1WjAzMTEwLwYDVQQD
EyhmMjczNjU1ODQ4Y2RhOGY3NWU4NGJmZWUzYjhjZjRlNTk5N2I2YzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUbj3xh0Zn3GGwaPWNC59DKMbD4B
a0YffVOc+aCGEy5WFufGi6NahmZzmimpwHiSHo6LDE6WbPPILLtOKKbQMHsbGXts
gWbdg++rDvlRAl8X97bZvA3KPJ/Zzqc+N40aGcxfMofSLTtnBkDkCDRC+eWKf7ok
0QloTu95olz2oGZvTUuxywmyOnvNqTb+LEePdF1B8HgC6nR+jvkGqAZstppOmHOC
15f+8M2r+0jojDnG3FQmEF2Qat+KG5BvOQNSjpuVtWbu30b9GRV6LN4WRoVyNEVk
sbfE3kTF1xMrVYsAP0IImoOV4PQn8schLnERq42c8YJql/Q6kJwH+rqOFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJzZVhIzaj3XoS/7juM9OWZe2xnMB8GA1UdIwQY
MBaAFMPrcHQ4Ff5EXJWKPFEX7ydT0w9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xMzc1NGMtOGJlNy00NjBlLTg1MDct
MTM1NzVlZjcyOWYzLzEvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8xMzc1NGMtOGJlNy00NjBlLTg1MDctMTM1NzVlZjcyOWYz
LzEvdy10d2REZ1Zfa1JjbFlvOFVSZnZKMVBURDM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoEcARjnb
j2deTKcieVpMkBkEOlBysv8w4ltbc11kioHJTXTcuXnB6Leklm5kevEWDFowYayk
jM6Hj5sfCnpznsjxai2EIyOWodL9CgFJpf4ldBZvHSVj6GYeOX4hvhKyvyoXZtZS
Y99esEpS41p5SlK8PhJkrWndEP40KTyKxOGqTa2/16a39o84JYsfQ8LQ0NkvXw/7
Pe21h4UWq3gE3LTJHgFjljJLlF5KbVmRzuHejehlGrNotJ7AeFco2+ErmmWx3fBb
XG6m1e6/gQcMm0SQaCwrA56k/VNuWUE7PJjZIgppTy8ikPTQ3d2uBxf7QbPI/kSa
EXKDBV1M4PXMIA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:22:30 2026 by rpki-client