Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
File:                     WNLScV9D90e-p2Lc4Wa8pLjpZes.mft (raw, json)
Hash identifier:          jKbYogB27KSQWvvy3kpnYpFHyHKhzTHYZSozoYSaHmg=
Subject key identifier:   63:99:5C:F8:9D:A9:3F:28:49:FA:CC:4F:55:D3:E6:0B:EA:94:FB:0D
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Certificate issuer:       /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial:       019D28BB58E7C9D2DC0A4CECFA2E90AFAD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
Manifest number:          1897
Signing time:             Thu 26 Mar 2026 06:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:59 +0000
Files and hashes:         1: B0GjFFho4L3mRU1i2gZen9fWf8o.roa (hash: 0wLIwQSadFn+t/oVNRPg5fGLqnyacncDio6VpgbB62M=)
                          2: WNLScV9D90e-p2Lc4Wa8pLjpZes.crl (hash: dNQX2f0Gm9Bi2II68eViQsJ5HLZgrlsS4giiNqznEH4=)
                          3: jDqKUZBODUjBnVNebvS0O1uTYVg.roa (hash: +/llkkAW3JdOUYZ8UHsLUQJmNLSLCBnzHv87Ol04gZU=)
                          4: vjjNirlV9YoXstARjswGH3SkSGs.roa (hash: chn0/YJ36zUfQlB64u8vlgqzqY6hyVXARJHun9FywnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:58:e7:c9:d2:dc:0a:4c:ec:fa:2e:90:af:ad:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
        Validity
            Not Before: Mar 26 06:00:59 2026 GMT
            Not After : Mar 27 06:00:59 2026 GMT
        Subject: CN=63995cf89da93f2849facc4f55d3e60bea94fb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:1a:b1:84:e2:dc:d0:1d:8b:45:ef:81:bf:
                    5c:79:f5:ec:b4:f5:82:9d:73:74:a6:34:e6:bb:ca:
                    14:3f:cf:9f:b1:6d:ea:f4:64:4d:25:32:80:0e:3b:
                    be:2d:4a:cb:af:53:6f:8b:76:dd:ec:1b:7b:3e:0c:
                    38:b1:ef:a5:40:a8:c3:3b:86:f2:94:21:b7:4a:7f:
                    8f:ad:6e:25:58:cc:43:b5:5d:fd:85:b6:2a:9a:1d:
                    46:3f:52:4e:40:34:f8:ae:50:bf:d0:9f:75:4b:df:
                    ca:3d:09:28:45:b4:a3:ec:3b:9c:37:34:2c:8d:5c:
                    ab:a9:77:6e:96:73:7d:75:73:a5:b7:ae:fe:a8:45:
                    fa:3d:13:32:08:65:7d:dc:08:58:d0:50:40:e4:92:
                    2b:50:b6:54:4d:b9:bb:c0:4e:1a:6d:18:d3:7f:2d:
                    e3:4d:7f:57:dd:85:4d:28:2f:2d:f6:ef:ab:7a:5a:
                    96:79:b1:6a:91:4d:6e:86:27:10:12:59:5c:ee:16:
                    e4:f3:69:df:bb:e8:73:66:b0:37:e9:1f:49:26:f2:
                    3e:38:4c:2d:44:b9:8b:9e:91:c2:2e:85:05:4e:b1:
                    6e:cd:f6:05:0d:d1:e7:0f:92:98:ca:b8:c3:3a:db:
                    1e:0c:6f:f5:54:0b:9d:27:e5:68:c2:df:08:9a:c1:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:99:5C:F8:9D:A9:3F:28:49:FA:CC:4F:55:D3:E6:0B:EA:94:FB:0D
            X509v3 Authority Key Identifier:
                keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:54:e2:78:c3:a3:ad:4c:d0:43:79:83:4e:e5:f9:38:eb:08:
         82:dc:07:5f:ea:66:54:c6:48:9b:a0:9c:49:26:c0:73:1a:b4:
         0b:96:cf:16:ed:52:e3:3c:6b:73:b2:54:2f:48:94:ac:10:6b:
         1d:39:92:3c:7c:73:bd:cc:41:90:42:fe:fb:69:55:80:15:cb:
         6c:3c:bb:6e:f4:cf:bd:ac:96:f6:30:8c:5c:ef:7f:c2:30:b4:
         c9:28:1b:a7:c6:df:76:bc:a4:52:16:65:7f:8d:d4:b5:1a:41:
         2d:fa:9e:8f:6e:e4:1e:06:4e:c8:c0:15:ad:ed:e9:c3:66:03:
         5e:cf:c5:c7:28:ab:b7:83:8c:e1:11:85:13:76:de:96:c6:4f:
         27:1a:3e:e9:ba:c9:00:a2:da:15:fd:71:bd:d4:31:33:bd:bd:
         0d:d3:e0:60:4a:98:12:43:64:95:7a:29:70:5c:8c:25:17:cb:
         2f:6d:79:59:4b:d0:23:a3:38:3e:dc:77:b1:d3:ec:97:01:ac:
         30:40:9e:89:fa:9b:84:ac:7f:a4:c6:43:34:cc:9f:80:9b:b1:
         ff:73:3f:ca:16:b5:3f:17:b9:01:d4:c6:85:8c:ea:f7:05:b2:
         f4:a6:e7:c4:b6:ea:2e:aa:75:07:90:60:d2:9e:e1:8f:ac:a9:
         43:65:b7:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou1jnydLcCkzs+i6Qr60OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDJkMjcxNWY0M2Y3NDdiZWE3NjJkY2UxNjZiY2E0Yjhl
OTY1ZWIwHhcNMjYwMzI2MDYwMDU5WhcNMjYwMzI3MDYwMDU5WjAzMTEwLwYDVQQD
Eyg2Mzk5NWNmODlkYTkzZjI4NDlmYWNjNGY1NWQzZTYwYmVhOTRmYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkAasYTi3NAdi0Xvgb9cefXstPWC
nXN0pjTmu8oUP8+fsW3q9GRNJTKADju+LUrLr1Nvi3bd7Bt7Pgw4se+lQKjDO4by
lCG3Sn+PrW4lWMxDtV39hbYqmh1GP1JOQDT4rlC/0J91S9/KPQkoRbSj7DucNzQs
jVyrqXdulnN9dXOlt67+qEX6PRMyCGV93AhY0FBA5JIrULZUTbm7wE4abRjTfy3j
TX9X3YVNKC8t9u+relqWebFqkU1uhicQEllc7hbk82nfu+hzZrA36R9JJvI+OEwt
RLmLnpHCLoUFTrFuzfYFDdHnD5KYyrjDOtseDG/1VAudJ+Vowt8ImsGSowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOZXPidqT8oSfrMT1XT5gvqlPsNMB8GA1UdIwQY
MBaAFFjS0nFfQ/dHvqdi3OFmvKS46WXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kNjdiN2ItYzc5OC00OTAxLTgwZjkt
ZTM4MzQ1MTZmYzA4LzEvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9kNjdiN2ItYzc5OC00OTAxLTgwZjktZTM4MzQ1MTZmYzA4
LzEvV05MU2NWOUQ5MGUtcDJMYzRXYThwTGpwWmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelTieMOj
rUzQQ3mDTuX5OOsIgtwHX+pmVMZIm6CcSSbAcxq0C5bPFu1S4zxrc7JUL0iUrBBr
HTmSPHxzvcxBkEL++2lVgBXLbDy7bvTPvayW9jCMXO9/wjC0ySgbp8bfdrykUhZl
f43UtRpBLfqej27kHgZOyMAVre3pw2YDXs/Fxyirt4OM4RGFE3belsZPJxo+6brJ
AKLaFf1xvdQxM729DdPgYEqYEkNklXopcFyMJRfLL215WUvQI6M4Ptx3sdPslwGs
MECeifqbhKx/pMZDNMyfgJux/3M/yha1Pxe5AdTGhYzq9wWy9KbnxLbqLqp1B5Bg
0p7hj6ypQ2W35w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:20:22 2026 by rpki-client