Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
File:                     wi7Wzo-2x52t12WDpeotOruaQy8.mft (raw, json)
Hash identifier:          fMA3syV6ReXEWl99EyUqXW4oWyLSaQpQKLlbZiTAfgs=
Subject key identifier:   FB:03:F0:40:E1:43:4B:71:EA:18:29:95:ED:F3:CB:C2:DC:F1:F7:71
Authority key identifier: C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
Certificate issuer:       /CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Certificate serial:       019D284D71F538F3191D3509AE69A61B4D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
Manifest number:          0296
Signing time:             Thu 26 Mar 2026 04:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:57 +0000
Files and hashes:         1: wi7Wzo-2x52t12WDpeotOruaQy8.crl (hash: jxszphdr2s4N0wAQbARy080khDhJE0ICj/dJveJcbIc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:71:f5:38:f3:19:1d:35:09:ae:69:a6:1b:4d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
        Validity
            Not Before: Mar 26 04:00:57 2026 GMT
            Not After : Mar 27 04:00:57 2026 GMT
        Subject: CN=fb03f040e1434b71ea182995edf3cbc2dcf1f771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:7b:5f:30:ce:56:4d:21:37:73:8a:ad:74:
                    fc:be:63:d3:26:4d:23:df:5e:18:e6:c4:f8:1f:cd:
                    71:56:7c:65:c3:95:be:98:25:1e:60:f7:1f:3f:2e:
                    37:86:2c:1e:da:bc:85:8e:f4:64:e9:ae:a1:20:f9:
                    6a:8e:a5:78:a8:23:7e:d5:ae:27:7f:86:a7:81:fc:
                    75:da:8c:37:1d:81:bb:97:ce:19:a4:54:98:cb:3f:
                    5a:4f:76:e6:95:65:98:61:b6:84:c2:a1:b3:6f:5f:
                    55:12:74:4b:6c:1f:87:52:ba:41:7f:b7:79:a9:f0:
                    6b:66:16:a1:9e:97:ca:9c:1c:ae:c0:fb:f8:71:3d:
                    f4:65:65:ac:ed:77:8d:28:16:58:35:1c:0a:3d:80:
                    10:f1:a7:ab:e9:c5:9b:11:81:92:a3:74:d1:92:55:
                    17:ac:51:e4:09:bf:ac:15:29:2a:ff:23:d0:b8:be:
                    80:3f:c2:9f:92:e0:b9:0b:e7:8b:4e:72:45:63:79:
                    30:07:e5:d9:ec:d6:de:17:2f:36:6c:68:ca:b3:86:
                    a2:d7:ca:dd:9a:55:73:6e:e9:62:87:72:ba:9c:44:
                    46:20:38:fd:6b:a1:b1:01:d5:ed:09:f9:0c:77:18:
                    f8:38:62:05:76:3c:49:d5:e6:b6:31:5e:f0:18:ff:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:03:F0:40:E1:43:4B:71:EA:18:29:95:ED:F3:CB:C2:DC:F1:F7:71
            X509v3 Authority Key Identifier:
                keyid:C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:89:c2:79:82:75:f6:9b:be:7c:2f:bb:fd:f9:33:6f:ee:35:
         75:84:c1:95:bf:60:c3:88:40:3a:6b:81:1b:f7:22:03:1f:df:
         28:75:16:13:70:1e:39:9c:a9:f3:8b:da:1f:9b:2d:61:f0:2b:
         0a:60:75:d3:79:0f:67:61:ca:30:44:e6:b7:31:65:d5:b0:3a:
         9a:d5:ed:c8:0f:33:18:39:f2:85:ae:d5:a8:54:cf:d6:68:61:
         47:35:ee:5a:9d:b4:d5:28:01:8c:c1:c6:33:72:96:9e:2d:e3:
         f7:75:b0:e4:52:21:60:9e:f6:45:40:7d:c2:33:31:7e:b5:04:
         bc:42:9e:a8:c1:0a:90:3f:7c:1c:6d:87:11:d0:d1:aa:4c:e2:
         6f:07:4e:58:b3:6d:d7:0b:b7:58:84:a1:16:a3:0d:87:9e:d1:
         26:d7:fe:40:77:ad:9a:69:10:20:71:9d:e6:df:87:dc:47:a4:
         80:bf:2f:21:d8:d5:96:e8:a8:ff:c5:51:ce:1c:10:62:cf:9b:
         6f:85:5e:d6:c9:fa:5a:1c:a7:de:b7:2b:7b:07:7f:b1:4d:79:
         6d:a5:f0:69:b5:e8:df:31:0d:b5:61:af:a5:31:49:6c:1b:74:
         c1:f8:4e:b9:2d:a0:98:38:ab:b5:47:a5:c9:04:78:a3:20:f1:
         58:74:3c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTXH1OPMZHTUJrmmmG00UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMmVkNmNlOGZiNmM3OWRhZGQ3NjU4M2E1ZWEyZDNhYmI5
YTQzMmYwHhcNMjYwMzI2MDQwMDU3WhcNMjYwMzI3MDQwMDU3WjAzMTEwLwYDVQQD
EyhmYjAzZjA0MGUxNDM0YjcxZWExODI5OTVlZGYzY2JjMmRjZjFmNzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyal7XzDOVk0hN3OKrXT8vmPTJk0j
314Y5sT4H81xVnxlw5W+mCUeYPcfPy43hiwe2ryFjvRk6a6hIPlqjqV4qCN+1a4n
f4angfx12ow3HYG7l84ZpFSYyz9aT3bmlWWYYbaEwqGzb19VEnRLbB+HUrpBf7d5
qfBrZhahnpfKnByuwPv4cT30ZWWs7XeNKBZYNRwKPYAQ8aer6cWbEYGSo3TRklUX
rFHkCb+sFSkq/yPQuL6AP8KfkuC5C+eLTnJFY3kwB+XZ7NbeFy82bGjKs4ai18rd
mlVzbulih3K6nERGIDj9a6GxAdXtCfkMdxj4OGIFdjxJ1ea2MV7wGP/lLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsD8EDhQ0tx6hgple3zy8Lc8fdxMB8GA1UdIwQY
MBaAFMIu1s6Ptsedrddlg6XqLTq7mkMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2k3V3pvLTJ4NTJ0MTJXRHBlb3RPcnVhUXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xNzMwMzUtODhiYS00NDUyLTkwM2Qt
NGJhODVlZmRiMjY2LzEvd2k3V3pvLTJ4NTJ0MTJXRHBlb3RPcnVhUXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8xNzMwMzUtODhiYS00NDUyLTkwM2QtNGJhODVlZmRiMjY2
LzEvd2k3V3pvLTJ4NTJ0MTJXRHBlb3RPcnVhUXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYnCeYJ1
9pu+fC+7/fkzb+41dYTBlb9gw4hAOmuBG/ciAx/fKHUWE3AeOZyp84vaH5stYfAr
CmB103kPZ2HKMETmtzFl1bA6mtXtyA8zGDnyha7VqFTP1mhhRzXuWp201SgBjMHG
M3KWni3j93Ww5FIhYJ72RUB9wjMxfrUEvEKeqMEKkD98HG2HEdDRqkzibwdOWLNt
1wu3WIShFqMNh57RJtf+QHetmmkQIHGd5t+H3EekgL8vIdjVluio/8VRzhwQYs+b
b4Ve1sn6Whyn3rcrewd/sU15baXwabXo3zENtWGvpTFJbBt0wfhOuS2gmDirtUel
yQR4oyDxWHQ8ow==
-----END CERTIFICATE-----