Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
File:                     wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft (raw, json)
Hash identifier:          7sSr53WJl6mkJCK4Jm+sVQtBLgjwghkrRqlkNB6sCuU=
Subject key identifier:   BB:D0:7B:D0:A5:BB:00:9B:8C:3E:64:39:53:5F:DC:43:CC:62:E9:F3
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Certificate issuer:       /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial:       019D2584270EC3317CA9C4A123D5CA3AB4D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
Manifest number:          1895
Signing time:             Wed 25 Mar 2026 15:01:50 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:50 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:50 +0000
Files and hashes:         1: 3jqeLp31Ia72OLV8Vsb0DKq9fLg.roa (hash: 8CA6QC7AuB3Gqp1AExkzok06YhM4gdbvljn5N5Amqps=)
                          2: j56JgDQ7deItiz4SwN3u_sTMv1A.roa (hash: Sf7VCDy2DZYrfhfR8bd2YHx/KU03gMpcan4C+fydjnc=)
                          3: lBUVAt70R1-1BAR2vy4_xkP_gao.roa (hash: XL0AtgP0aRu8pzRocWYutB3KozJzOUh9bOk7zF939M8=)
                          4: wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl (hash: h7qlEFgaHBagjoxKeWhM7XFTL7LJzOjgfEOL8OgevYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:84:27:0e:c3:31:7c:a9:c4:a1:23:d5:ca:3a:b4:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
        Validity
            Not Before: Mar 25 15:01:50 2026 GMT
            Not After : Mar 26 15:01:50 2026 GMT
        Subject: CN=bbd07bd0a5bb009b8c3e6439535fdc43cc62e9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:ae:11:47:9e:46:69:7e:dc:2b:58:c7:7b:
                    9a:c4:f5:8b:04:4e:9f:c4:c7:d5:48:db:d8:96:b1:
                    07:93:b4:bb:84:c3:3f:8f:df:0c:6d:18:36:dc:18:
                    82:84:ef:e9:b0:b3:14:e1:d1:5d:7d:2d:66:40:86:
                    62:19:c1:55:cd:2e:da:03:7b:f6:f4:a9:50:be:5d:
                    bf:2e:5c:79:fd:af:a9:fc:75:23:c9:f7:0e:fa:25:
                    2a:04:7a:58:be:99:f3:22:af:98:d3:62:05:81:6e:
                    4b:ea:31:80:b9:5f:d0:66:8e:e2:2a:32:79:bf:a6:
                    5b:56:1f:05:d2:b9:d7:29:90:ce:6f:4e:38:6c:00:
                    7b:8c:b0:61:35:6d:1a:9e:5b:35:a6:71:f3:2b:18:
                    cc:cb:f4:30:3f:ee:1e:34:9d:f8:63:64:af:c3:19:
                    d8:7e:b2:3a:ca:4f:81:6d:2c:d2:04:a8:98:65:79:
                    8e:60:58:97:4d:d6:96:95:a0:3e:af:cb:b8:70:62:
                    40:fc:2d:f9:28:af:94:d2:13:28:23:90:ca:05:f7:
                    14:5c:58:66:bd:ad:7b:6c:94:67:52:fa:5b:97:d4:
                    1c:0f:ed:0d:10:dc:be:79:ea:87:d9:58:cb:f8:6e:
                    21:55:cd:35:46:77:89:75:13:62:c5:a6:14:42:f8:
                    93:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D0:7B:D0:A5:BB:00:9B:8C:3E:64:39:53:5F:DC:43:CC:62:E9:F3
            X509v3 Authority Key Identifier:
                keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:94:be:54:94:11:ea:59:97:da:b8:2f:8c:3a:06:7b:62:99:
         1b:90:e6:81:48:27:ba:e3:5f:37:c7:77:b1:7e:d2:06:da:3c:
         16:a0:6e:ff:fc:b1:f9:0b:30:24:ed:66:de:b1:25:1e:da:67:
         5c:8d:80:87:40:3d:df:c3:54:e7:58:39:94:3e:ab:35:7e:67:
         10:ff:29:d7:9d:f7:ee:5e:50:da:d3:35:fd:ef:74:61:9e:18:
         f6:ad:da:63:f1:d5:bf:39:04:3b:2e:f7:fe:23:d2:59:1b:32:
         85:74:83:0e:3c:d6:b0:1c:07:c5:9c:23:31:45:44:7b:c8:01:
         8f:ab:b3:2a:0f:13:49:1b:09:59:0a:79:89:c5:16:fb:ef:0e:
         f0:38:da:c8:07:d3:f3:af:7a:4f:cd:9f:f6:10:d2:dd:7a:4a:
         34:28:99:71:db:af:69:3e:1d:7c:39:0a:83:67:21:5b:4c:dc:
         7c:bc:3b:3c:a2:d3:30:8d:8f:d9:4b:9f:b2:17:73:81:fd:7e:
         36:30:95:59:4e:e0:a1:cd:c0:42:42:e3:6e:9c:81:27:2d:07:
         e1:85:3c:56:18:24:1b:d0:5c:06:d4:dd:e4:e8:f4:18:93:0b:
         14:f2:b1:46:51:1c:cd:77:c0:41:c7:59:2a:46:46:44:b7:0c:
         9b:b1:3a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:52 2026 by rpki-client