Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
File:                     wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft (raw, json)
Hash identifier:          luCHKfPz/eGBzWiMr+6zeGqa6ljLijslGDysXA1IhYQ=
Subject key identifier:   05:41:4F:C0:8C:0A:D0:1D:AF:05:FA:AF:53:75:46:6A:D2:3C:46:25
Authority key identifier: C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08
Certificate issuer:       /CN=c14d63d39707d45a8c683cb52e47171d136ce508
Certificate serial:       019D2A72D125DF4F53D539011B434EB2CE90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
Manifest number:          115B
Signing time:             Thu 26 Mar 2026 14:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 14:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 14:01:00 +0000
Files and hashes:         1: 4nK7xMejEGysuibSYJIso6RlQpI.roa (hash: WFo/Wgq0Q0zz5SgRWVK30WfT98xnLcIsGWqhNlQwY78=)
                          2: wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl (hash: xEuamvhAOmvM7UKwTcsaLNWt7Un2qvDwjgwDY9eUz3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:d1:25:df:4f:53:d5:39:01:1b:43:4e:b2:ce:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14d63d39707d45a8c683cb52e47171d136ce508
        Validity
            Not Before: Mar 26 14:01:00 2026 GMT
            Not After : Mar 27 14:01:00 2026 GMT
        Subject: CN=05414fc08c0ad01daf05faaf5375466ad23c4625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:47:0a:37:48:cd:86:ea:60:80:31:60:47:
                    0d:e5:50:d0:7c:2f:92:bf:86:52:95:fb:67:4d:26:
                    9b:7f:b5:4a:64:13:b9:80:6b:e4:6c:2b:4c:f8:4d:
                    9d:b6:5b:13:42:22:c5:b8:64:1e:0a:45:58:60:19:
                    dc:57:b2:18:3c:28:f9:54:30:10:a1:fe:bc:29:90:
                    3c:9c:e1:41:5c:a2:13:97:bb:39:bf:93:42:48:fa:
                    3d:5f:b3:c1:8c:7a:f3:c1:b3:b7:ca:1c:e2:c4:a4:
                    4d:ac:b1:69:e8:d2:d5:57:65:d9:09:9e:41:46:bd:
                    57:63:89:9a:d6:cc:e0:7e:1a:c4:2e:75:c4:5c:65:
                    27:4a:9c:50:a9:0e:fa:75:c8:80:18:4b:63:0d:66:
                    ac:bd:05:d3:3d:91:2c:dd:0b:06:a0:69:8b:ec:42:
                    dd:08:8b:6e:05:10:f4:ac:1d:8f:93:e2:3b:1a:c5:
                    27:63:19:46:79:e7:33:f6:02:a3:63:6e:d9:d6:ed:
                    c7:2e:04:12:ee:b1:6d:6c:c0:38:9d:39:14:2d:59:
                    0d:cd:ee:7a:f5:d0:e4:38:e4:25:b4:44:38:0b:76:
                    cc:44:8b:cc:46:67:a6:46:db:17:bf:52:25:18:b1:
                    b5:1c:df:e8:44:09:0e:8e:73:45:b1:a3:2b:b9:81:
                    59:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:41:4F:C0:8C:0A:D0:1D:AF:05:FA:AF:53:75:46:6A:D2:3C:46:25
            X509v3 Authority Key Identifier:
                keyid:C1:4D:63:D3:97:07:D4:5A:8C:68:3C:B5:2E:47:17:1D:13:6C:E5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1j05cH1FqMaDy1LkcXHRNs5Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/148c6c-ba10-43a3-8482-5a1daa94de42/1/wU1j05cH1FqMaDy1LkcXHRNs5Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:ab:c4:55:6a:9c:81:56:ca:50:1a:82:28:fe:98:13:9d:
         3f:16:2d:9d:22:0d:f5:ba:40:36:b9:13:29:65:cc:16:61:0f:
         ae:3a:a3:ff:2e:ae:6b:5a:6c:27:26:67:ee:97:b9:2c:87:e9:
         41:74:77:09:55:25:87:71:e4:14:fe:84:94:80:b8:dd:51:d7:
         8e:22:e0:81:34:87:59:b4:83:a4:ba:f0:37:91:cf:21:84:20:
         2c:30:25:97:c8:29:d0:bc:d0:7c:92:61:61:89:c6:5a:da:2f:
         3d:64:66:39:b1:f8:8b:e2:85:a2:47:f1:f9:3e:c0:7d:80:45:
         cc:9d:6b:dd:9a:87:a3:c3:c0:a2:7f:c7:74:98:2f:33:69:fe:
         e8:40:30:8e:bc:58:1f:bf:4a:f1:6b:06:f0:83:53:47:dd:cc:
         f4:35:15:5f:4f:8f:7f:1e:50:e6:35:a2:06:fa:b5:18:6e:a0:
         f6:3b:27:af:78:23:fb:ea:1e:1a:21:7b:4c:1e:2b:5e:b6:83:
         87:cb:e0:14:50:ef:02:38:7d:57:45:85:61:f1:0a:89:04:e9:
         d9:4b:d2:d1:14:a9:e4:a2:2b:10:47:80:dc:ae:75:94:52:d5:
         2f:18:31:b0:07:78:67:14:41:e9:51:81:81:ed:f7:01:12:d8:
         bc:2d:c5:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qctEl309T1TkBG0NOss6QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNGQ2M2QzOTcwN2Q0NWE4YzY4M2NiNTJlNDcxNzFkMTM2
Y2U1MDgwHhcNMjYwMzI2MTQwMTAwWhcNMjYwMzI3MTQwMTAwWjAzMTEwLwYDVQQD
EygwNTQxNGZjMDhjMGFkMDFkYWYwNWZhYWY1Mzc1NDY2YWQyM2M0NjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iZHCjdIzYbqYIAxYEcN5VDQfC+S
v4ZSlftnTSabf7VKZBO5gGvkbCtM+E2dtlsTQiLFuGQeCkVYYBncV7IYPCj5VDAQ
of68KZA8nOFBXKITl7s5v5NCSPo9X7PBjHrzwbO3yhzixKRNrLFp6NLVV2XZCZ5B
Rr1XY4ma1szgfhrELnXEXGUnSpxQqQ76dciAGEtjDWasvQXTPZEs3QsGoGmL7ELd
CItuBRD0rB2Pk+I7GsUnYxlGeecz9gKjY27Z1u3HLgQS7rFtbMA4nTkULVkNze56
9dDkOOQltEQ4C3bMRIvMRmemRtsXv1IlGLG1HN/oRAkOjnNFsaMruYFZ5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVBT8CMCtAdrwX6r1N1RmrSPEYlMB8GA1UdIwQY
MBaAFMFNY9OXB9RajGg8tS5HFx0TbOUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODIt
NWExZGFhOTRkZTQyLzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xNDhjNmMtYmExMC00M2EzLTg0ODItNWExZGFhOTRkZTQy
LzEvd1UxajA1Y0gxRnFNYUR5MUxrY1hIUk5zNVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkL2rxFVq
nIFWylAagij+mBOdPxYtnSIN9bpANrkTKWXMFmEPrjqj/y6ua1psJyZn7pe5LIfp
QXR3CVUlh3HkFP6ElIC43VHXjiLggTSHWbSDpLrwN5HPIYQgLDAll8gp0LzQfJJh
YYnGWtovPWRmObH4i+KFokfx+T7AfYBFzJ1r3ZqHo8PAon/HdJgvM2n+6EAwjrxY
H79K8WsG8INTR93M9DUVX0+Pfx5Q5jWiBvq1GG6g9jsnr3gj++oeGiF7TB4rXraD
h8vgFFDvAjh9V0WFYfEKiQTp2UvS0RSp5KIrEEeA3K51lFLVLxgxsAd4ZxRB6VGB
ge33ARLYvC3FPg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:20 2026 by rpki-client