Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
File:                     wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft (raw, json)
Hash identifier:          roYz4MmDgrYRk74EBm/S/eGbM40a1tgkvRySuGNIrWE=
Subject key identifier:   CF:40:03:34:4C:57:F1:65:2B:12:75:E8:AE:7E:22:87:F4:EA:36:FE
Authority key identifier: C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
Certificate issuer:       /CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Certificate serial:       019D27E06A61FE561EF18E561244E71DA9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
Manifest number:          0B7E
Signing time:             Thu 26 Mar 2026 02:01:51 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:51 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:51 +0000
Files and hashes:         1: JwY7qn8a3rdnRmh0s9t_pZe3M4Y.roa (hash: Kh5jCLLNLF6VLZQMkZ83iOoAb6T34T0+sDH0R/ASPFY=)
                          2: wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl (hash: dPBCbotM2U5CGZpMxcaJg843Z5P0O5UoiCrzJMY4BVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:6a:61:fe:56:1e:f1:8e:56:12:44:e7:1d:a9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2370cf1809b7bc663ad4143c08976b48102efb9
        Validity
            Not Before: Mar 26 02:01:51 2026 GMT
            Not After : Mar 27 02:01:51 2026 GMT
        Subject: CN=cf4003344c57f1652b1275e8ae7e2287f4ea36fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bd:9f:e6:66:b7:ff:3b:18:0f:4c:7d:c1:7b:
                    be:41:6e:ca:93:fe:1d:e4:46:f7:41:38:42:61:42:
                    73:54:15:07:91:e7:33:51:63:8c:b4:31:11:f5:c3:
                    e3:de:a0:21:51:48:a4:40:44:1a:7d:fe:b2:23:1f:
                    8c:18:16:d6:88:34:26:b6:7a:21:54:c9:fb:a9:3a:
                    ae:e3:22:ef:3d:79:fc:cf:35:ab:08:de:40:01:db:
                    ba:69:05:84:13:44:c6:e5:c8:d6:96:02:bd:77:6b:
                    29:cb:67:b0:95:a2:78:06:9e:a8:e2:92:3a:a3:59:
                    92:69:7e:14:60:9e:20:32:39:f6:4e:19:15:c8:0b:
                    c2:46:de:05:07:7e:53:5f:91:bf:b6:61:b9:a5:3c:
                    f5:3c:f8:3e:e7:e2:e8:71:4f:a6:83:fe:2d:74:b8:
                    85:b8:5d:aa:0f:6b:5e:d6:08:97:0f:7e:c3:c4:4a:
                    ea:eb:c3:2e:a4:ae:4e:7a:fd:96:92:85:af:db:7e:
                    06:5e:1a:ab:e6:12:4d:8e:fd:2e:ac:97:e6:59:e5:
                    d8:1b:c8:4f:f6:fd:6f:88:23:5a:96:ca:c8:7d:3b:
                    11:bc:31:02:9d:bc:85:cb:4b:b4:ba:15:af:5d:c7:
                    8e:15:5a:49:df:7f:8c:db:71:78:13:aa:42:4d:68:
                    fe:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:40:03:34:4C:57:F1:65:2B:12:75:E8:AE:7E:22:87:F4:EA:36:FE
            X509v3 Authority Key Identifier:
                keyid:C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:77:20:18:0e:22:f4:71:44:25:c4:fe:bc:d4:84:07:9a:
         4d:93:e5:62:42:7b:9c:38:1c:56:5f:4b:e8:87:1b:62:78:ab:
         f6:89:7b:e2:86:1f:51:a5:9b:98:c6:05:d3:d3:80:46:10:07:
         03:a0:1d:88:04:42:ae:dd:da:3b:e6:98:1a:94:de:01:27:bd:
         4f:a2:f5:fe:8d:48:f2:bc:6c:67:08:fd:2c:aa:b2:23:fb:51:
         b7:3b:5c:58:eb:77:0e:19:68:34:a6:1d:30:15:6c:dc:87:05:
         9d:18:c7:0b:89:61:33:5f:3e:e7:2c:6d:83:c0:87:04:7b:50:
         2a:d5:6b:26:3e:2e:12:0c:dc:98:43:87:59:32:8a:5b:5d:53:
         3d:a3:69:37:fe:3f:d7:e6:f9:4e:de:db:f6:ad:d1:0f:46:14:
         97:4f:db:22:d7:44:84:b1:ae:80:d9:51:5d:af:59:df:b9:59:
         42:82:6f:58:49:ae:a8:09:5d:52:8f:4a:29:2b:2c:9e:50:ba:
         e1:01:31:e0:33:09:47:5c:a4:3f:ce:fb:7c:27:c1:1b:4c:f9:
         f0:d4:cd:7b:81:04:2f:a0:65:38:e8:03:b0:1e:a2:f3:2d:40:
         bc:a7:d9:bb:dd:f7:6a:66:8d:01:3e:95:c6:0d:98:7c:1c:83:
         bd:c9:97:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4Gph/lYe8Y5WEkTnHandMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzcwY2YxODA5YjdiYzY2M2FkNDE0M2MwODk3NmI0ODEw
MmVmYjkwHhcNMjYwMzI2MDIwMTUxWhcNMjYwMzI3MDIwMTUxWjAzMTEwLwYDVQQD
EyhjZjQwMDMzNDRjNTdmMTY1MmIxMjc1ZThhZTdlMjI4N2Y0ZWEzNmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr2f5ma3/zsYD0x9wXu+QW7Kk/4d
5Eb3QThCYUJzVBUHkeczUWOMtDER9cPj3qAhUUikQEQaff6yIx+MGBbWiDQmtnoh
VMn7qTqu4yLvPXn8zzWrCN5AAdu6aQWEE0TG5cjWlgK9d2spy2ewlaJ4Bp6o4pI6
o1mSaX4UYJ4gMjn2ThkVyAvCRt4FB35TX5G/tmG5pTz1PPg+5+LocU+mg/4tdLiF
uF2qD2te1giXD37DxErq68MupK5Oev2WkoWv234GXhqr5hJNjv0urJfmWeXYG8hP
9v1viCNalsrIfTsRvDECnbyFy0u0uhWvXceOFVpJ33+M23F4E6pCTWj+5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9AAzRMV/FlKxJ16K5+Iof06jb+MB8GA1UdIwQY
MBaAFMI3DPGAm3vGY61BQ8CJdrSBAu+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pjTThZQ2JlOFpqclVGRHdJbDJ0SUVDNzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hY2RiZTMtYjgyZi00OTViLWI1NWIt
ZTE1NjNmODEyOTI5LzEvd2pjTThZQ2JlOFpqclVGRHdJbDJ0SUVDNzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9hY2RiZTMtYjgyZi00OTViLWI1NWItZTE1NjNmODEyOTI5
LzEvd2pjTThZQ2JlOFpqclVGRHdJbDJ0SUVDNzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrZ3IBgO
IvRxRCXE/rzUhAeaTZPlYkJ7nDgcVl9L6IcbYnir9ol74oYfUaWbmMYF09OARhAH
A6AdiARCrt3aO+aYGpTeASe9T6L1/o1I8rxsZwj9LKqyI/tRtztcWOt3DhloNKYd
MBVs3IcFnRjHC4lhM18+5yxtg8CHBHtQKtVrJj4uEgzcmEOHWTKKW11TPaNpN/4/
1+b5Tt7b9q3RD0YUl0/bItdEhLGugNlRXa9Z37lZQoJvWEmuqAldUo9KKSssnlC6
4QEx4DMJR1ykP877fCfBG0z58NTNe4EEL6BlOOgDsB6i8y1AvKfZu933amaNAT6V
xg2YfByDvcmXkQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:20 2026 by rpki-client