Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          9yoz+naycyzYXuANdlGRr4n7Et3c2D8yJiexZjB8J/E=
Subject key identifier:   5A:D3:8E:DA:C8:A3:A1:AB:79:72:92:AE:F4:C2:A8:7B:47:7B:E3:BF
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       019D299770DEF92E1A3DDE87AA6A45DAAE14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 10:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 10:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 10:01:23 +0000
Files and hashes:         1: mMZgXaTh11njkW9J1aXnh-Fk-kI.roa (hash: G+4h6jzZGduxse3xQqlcqa2IxQLXKni1IDY6nh6QJc0=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: ZCzH3xY/M97562ZUgHNtUmxXkz6GBZBxJpFvAXBEmTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:97:70:de:f9:2e:1a:3d:de:87:aa:6a:45:da:ae:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Mar 26 10:01:23 2026 GMT
            Not After : Mar 27 10:01:23 2026 GMT
        Subject: CN=5ad38edac8a3a1ab797292aef4c2a87b477be3bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2e:76:f7:c0:72:c4:79:6a:12:ef:48:da:43:
                    20:57:35:91:16:bd:9d:c9:9f:6d:50:f9:48:57:74:
                    5d:4b:f4:00:d4:73:b8:3a:a5:6a:63:11:65:aa:1e:
                    0a:11:9d:96:7e:5b:f2:59:96:1f:2f:28:a2:36:14:
                    28:a8:1d:d9:4b:33:93:6b:87:13:ae:83:c3:38:00:
                    40:10:a1:39:99:47:ca:8b:1b:fe:f0:2f:7f:3a:5e:
                    2d:08:e6:6d:66:63:de:79:24:8c:61:32:91:08:64:
                    f5:7a:5b:0c:9a:5d:c0:67:be:34:bc:71:58:e3:ca:
                    58:36:b1:36:86:8b:b1:53:14:ff:69:66:25:1c:28:
                    10:8c:f1:51:2a:b5:a8:0c:ce:e3:96:57:59:fd:ac:
                    22:7d:d4:43:78:4e:a0:41:18:2d:6a:11:ef:91:21:
                    f1:5c:60:42:78:a0:fa:34:73:90:27:f5:b2:24:cd:
                    b4:9e:97:0d:ac:98:1e:9e:17:7b:40:f7:ea:ed:57:
                    88:37:15:7d:02:d5:09:d7:26:ce:0b:3b:30:4a:05:
                    7b:a6:b4:7c:5e:5d:f8:75:c1:f1:f0:99:50:99:a6:
                    8e:0a:05:f9:16:22:eb:78:fe:d6:e7:92:34:cf:fe:
                    8b:3e:ec:c8:4a:25:5a:af:df:b9:16:76:33:f5:e6:
                    40:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D3:8E:DA:C8:A3:A1:AB:79:72:92:AE:F4:C2:A8:7B:47:7B:E3:BF
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ce:94:3a:6a:70:1e:ea:6f:65:46:21:c8:4d:b5:69:9d:ab:
         cb:b5:08:91:d6:c7:d6:cf:c4:23:b1:e5:05:91:ae:20:03:a1:
         30:35:91:ef:59:0d:65:a1:02:3e:f9:d9:a4:ef:c6:e2:69:6b:
         bf:81:e6:9e:44:57:45:34:5f:cb:73:78:e7:a4:3a:5e:4c:bc:
         15:73:ae:a1:a9:ba:ac:e6:e1:31:93:ca:e6:f9:1c:87:34:58:
         fe:82:f5:1e:4f:0a:30:9d:42:d2:49:03:1b:46:39:a3:1f:d7:
         a0:83:2c:1a:f9:11:07:b0:a0:b1:e7:df:fa:a6:60:32:05:66:
         ee:94:58:e2:33:f5:2d:1f:6f:f2:9f:22:61:19:8f:a9:b6:eb:
         bb:5b:01:0f:b5:44:d6:4b:f9:ec:25:f6:e1:e3:6c:0e:5b:fe:
         4b:7b:09:a2:1b:47:9a:a4:41:c8:d8:c9:de:da:b1:9f:be:01:
         34:46:bf:e4:84:53:4d:50:a8:e9:c5:06:31:23:f5:a0:18:75:
         aa:1c:df:4c:8a:57:3e:f7:4c:d8:43:96:0a:46:c4:54:13:54:
         33:5b:80:4d:fa:d9:0a:cd:d7:33:ab:7c:4e:38:01:e0:00:5b:
         31:cf:77:64:b3:db:6d:c3:09:96:01:3c:19:f2:88:09:5f:61:
         6e:ec:27:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl3De+S4aPd6HqmpF2q4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2I5MGZhYWM1ZWZjZjkzMTk1NjE5ZGExNmYzYTQ3ZWZm
ZTk5ZmUwHhcNMjYwMzI2MTAwMTIzWhcNMjYwMzI3MTAwMTIzWjAzMTEwLwYDVQQD
Eyg1YWQzOGVkYWM4YTNhMWFiNzk3MjkyYWVmNGMyYTg3YjQ3N2JlM2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy5298ByxHlqEu9I2kMgVzWRFr2d
yZ9tUPlIV3RdS/QA1HO4OqVqYxFlqh4KEZ2WflvyWZYfLyiiNhQoqB3ZSzOTa4cT
roPDOABAEKE5mUfKixv+8C9/Ol4tCOZtZmPeeSSMYTKRCGT1elsMml3AZ740vHFY
48pYNrE2houxUxT/aWYlHCgQjPFRKrWoDM7jlldZ/awifdRDeE6gQRgtahHvkSHx
XGBCeKD6NHOQJ/WyJM20npcNrJgenhd7QPfq7VeINxV9AtUJ1ybOCzswSgV7prR8
Xl34dcHx8JlQmaaOCgX5FiLreP7W55I0z/6LPuzISiVar9+5FnYz9eZAFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFrTjtrIo6GreXKSrvTCqHtHe+O/MB8GA1UdIwQY
MBaAFME7kPqsXvz5MZVhnaFvOkfv/pn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgt
YzEzNWE2ZWRiODYxLzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgtYzEzNWE2ZWRiODYx
LzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc6UOmpw
HupvZUYhyE21aZ2ry7UIkdbH1s/EI7HlBZGuIAOhMDWR71kNZaECPvnZpO/G4mlr
v4HmnkRXRTRfy3N456Q6Xky8FXOuoam6rObhMZPK5vkchzRY/oL1Hk8KMJ1C0kkD
G0Y5ox/XoIMsGvkRB7Cgseff+qZgMgVm7pRY4jP1LR9v8p8iYRmPqbbru1sBD7VE
1kv57CX24eNsDlv+S3sJohtHmqRByNjJ3tqxn74BNEa/5IRTTVCo6cUGMSP1oBh1
qhzfTIpXPvdM2EOWCkbEVBNUM1uATfrZCs3XM6t8TjgB4ABbMc93ZLPbbcMJlgE8
GfKICV9hbuwn3Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:57:49 2026 by rpki-client