Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File:                     wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier:          jV12hnmZU78yvfl38SuVNQKC+qRluJvt/nS8KBfNq6I=
Subject key identifier:   58:44:CD:2A:33:D4:D2:07:72:B3:91:CE:C1:D5:23:6C:38:0D:04:B0
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer:       /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial:       019D284DA34BEF0656B45892B5827A4379E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 04:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:09 +0000
Files and hashes:         1: 7Y44MOwzJmz5iRw5y_JduCcKKUk.roa (hash: 2vcmpHN+5kJCm/08etkIw8U2CdDO3ehswhHinxrPXXA=)
                          2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: b4Zg9NFxIjq1bTMhCPHbjFqfw/fGICjRToIsDoflqzM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:a3:4b:ef:06:56:b4:58:92:b5:82:7a:43:79:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
        Validity
            Not Before: Mar 26 04:01:09 2026 GMT
            Not After : Mar 27 04:01:09 2026 GMT
        Subject: CN=5844cd2a33d4d20772b391cec1d5236c380d04b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3e:d0:91:d9:ab:ab:8a:dd:35:73:36:cc:80:
                    14:6c:44:d0:b7:96:b0:dc:c2:43:52:43:d5:bf:0f:
                    e7:f7:8b:e6:1a:f4:d0:cc:70:1e:44:cf:69:f2:e3:
                    79:98:5d:22:a1:ed:4e:22:3d:3a:f6:49:68:d5:34:
                    65:f9:d1:8b:29:ed:f2:cb:3a:be:d0:3e:5a:95:77:
                    38:c9:40:0d:08:2c:fc:8a:04:22:b0:37:f6:a4:33:
                    01:fe:47:52:af:ad:25:e1:93:36:d3:8b:94:54:bd:
                    b3:73:16:fb:5d:4b:1c:37:3f:34:0f:f9:f1:2c:76:
                    26:17:09:82:65:bb:aa:61:6c:2f:e2:a3:56:af:7e:
                    fe:45:d9:f1:4c:32:76:e1:1d:5e:c3:dc:59:bf:b2:
                    cc:f8:16:44:f7:40:fb:12:c6:87:c5:c9:36:a9:06:
                    e6:c4:65:94:75:04:6c:71:81:e6:b1:ef:85:9f:9a:
                    9a:28:72:e6:18:d3:e7:e1:81:d3:9e:26:87:67:9c:
                    63:38:a9:b0:b1:8d:81:ee:21:a7:74:45:58:80:c9:
                    a3:2c:4b:a2:2a:17:14:6e:0b:1d:86:f6:54:38:0f:
                    43:69:36:af:f0:fe:fc:94:1b:eb:2c:0f:63:40:d8:
                    bc:5b:7a:0b:cc:46:3e:fa:59:94:dd:98:b2:b0:f8:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:44:CD:2A:33:D4:D2:07:72:B3:91:CE:C1:D5:23:6C:38:0D:04:B0
            X509v3 Authority Key Identifier:
                keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:85:3e:ca:cc:e4:49:ec:cc:be:10:7a:aa:1c:50:fe:46:4a:
         ea:2e:bb:06:60:42:c3:11:7c:c7:56:72:eb:a1:32:84:95:be:
         df:1a:27:57:af:9c:c8:e9:ff:de:0f:6e:71:9a:ba:aa:c2:b8:
         42:71:51:4a:d0:1f:d0:9a:8d:2e:7a:9c:48:40:a2:5d:b5:c4:
         5e:ea:bc:46:67:d9:d2:23:6e:1c:52:ff:70:1d:1a:99:0b:41:
         3e:30:bb:ed:ae:b9:3a:9f:a4:50:58:84:7e:6d:02:f1:8f:6d:
         a3:21:b1:7f:14:1c:c3:c3:af:0a:3c:07:78:59:db:05:c0:eb:
         5c:2b:4f:cc:8f:85:8c:f9:f5:16:bc:93:10:e9:02:7b:b6:dd:
         be:1d:4e:85:a1:1c:61:45:e2:13:0d:7e:33:49:88:3a:4e:5a:
         f4:71:ed:9f:47:e3:1d:46:52:f7:fd:2d:fa:7c:4c:0a:99:e3:
         81:37:83:44:d7:5f:d5:07:8d:1c:ee:0d:87:29:9d:cc:6b:7c:
         cc:75:0d:94:56:b9:c2:48:41:4d:be:f6:5c:67:b9:e0:31:fe:
         88:f7:59:e9:f5:50:00:1d:5a:92:b4:c1:e1:a7:d2:fa:3f:4d:
         ab:08:c6:93:60:fb:3e:de:83:9d:10:60:30:37:62:f5:a5:e2:
         2e:45:01:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTaNL7wZWtFiStYJ6Q3noMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMmZjOTMzM2RiNDNlMjRiM2YyM2JjNjRhM2FlMTNmNDBm
YjBhYTcwHhcNMjYwMzI2MDQwMTA5WhcNMjYwMzI3MDQwMTA5WjAzMTEwLwYDVQQD
Eyg1ODQ0Y2QyYTMzZDRkMjA3NzJiMzkxY2VjMWQ1MjM2YzM4MGQwNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD7Qkdmrq4rdNXM2zIAUbETQt5aw
3MJDUkPVvw/n94vmGvTQzHAeRM9p8uN5mF0ioe1OIj069klo1TRl+dGLKe3yyzq+
0D5alXc4yUANCCz8igQisDf2pDMB/kdSr60l4ZM204uUVL2zcxb7XUscNz80D/nx
LHYmFwmCZbuqYWwv4qNWr37+RdnxTDJ24R1ew9xZv7LM+BZE90D7EsaHxck2qQbm
xGWUdQRscYHmse+Fn5qaKHLmGNPn4YHTniaHZ5xjOKmwsY2B7iGndEVYgMmjLEui
KhcUbgsdhvZUOA9DaTav8P78lBvrLA9jQNi8W3oLzEY++lmU3ZiysPgARwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhEzSoz1NIHcrORzsHVI2w4DQSwMB8GA1UdIwQY
MBaAFMMvyTM9tD4ks/I7xko64T9A+wqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWIt
YTY3MTkxNWVlOTlhLzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWItYTY3MTkxNWVlOTlh
LzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIU+yszk
SezMvhB6qhxQ/kZK6i67BmBCwxF8x1Zy66EyhJW+3xonV6+cyOn/3g9ucZq6qsK4
QnFRStAf0JqNLnqcSECiXbXEXuq8RmfZ0iNuHFL/cB0amQtBPjC77a65Op+kUFiE
fm0C8Y9toyGxfxQcw8OvCjwHeFnbBcDrXCtPzI+FjPn1FryTEOkCe7bdvh1OhaEc
YUXiEw1+M0mIOk5a9HHtn0fjHUZS9/0t+nxMCpnjgTeDRNdf1QeNHO4NhymdzGt8
zHUNlFa5wkhBTb72XGe54DH+iPdZ6fVQAB1akrTB4afS+j9NqwjGk2D7Pt6DnRBg
MDdi9aXiLkUBXg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:18 2026 by rpki-client