Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
File:                     wtVzsWdwcfL9bUS4QBthISBZjM8.mft (raw, json)
Hash identifier:          sq4IJWrAg3G/Es+wB8LVGFRJk+fMToudaiRoPofIM9Y=
Subject key identifier:   A2:47:59:B6:68:6A:C4:08:CF:2B:00:31:B7:C1:40:B1:51:2F:DC:65
Authority key identifier: C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
Certificate issuer:       /CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Certificate serial:       019D28BB70494F055C6A973A65A99CA2BE26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
Manifest number:          1883
Signing time:             Thu 26 Mar 2026 06:01:05 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:05 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:05 +0000
Files and hashes:         1: wtVzsWdwcfL9bUS4QBthISBZjM8.crl (hash: FWaBWBMz/GKSsUe5o5EHrUeD1U+84Bj+o93zP7Km/HU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:70:49:4f:05:5c:6a:97:3a:65:a9:9c:a2:be:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d573b1677071f2fd6d44b8401b612120598ccf
        Validity
            Not Before: Mar 26 06:01:05 2026 GMT
            Not After : Mar 27 06:01:05 2026 GMT
        Subject: CN=a24759b6686ac408cf2b0031b7c140b1512fdc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1f:fe:4c:d5:42:b0:69:c4:3a:b6:c2:e0:a1:
                    be:5f:1d:d3:58:a9:d1:42:fd:8e:df:b9:f9:8a:a2:
                    e3:d0:98:e8:dc:b0:d2:9d:34:08:67:28:72:31:6f:
                    db:98:c6:fd:2f:fb:be:30:90:05:ef:49:b8:3c:66:
                    62:44:19:0d:92:cd:a4:59:1c:7d:91:69:d7:50:53:
                    4d:48:46:c1:7c:e2:cd:6c:1d:22:22:91:b5:61:16:
                    08:73:0b:e6:a0:0e:1a:c8:d9:0b:66:e5:18:1e:b5:
                    b6:db:7e:5a:ab:dc:5f:5e:de:58:e2:7d:2b:b3:cd:
                    1c:0e:bb:d2:32:cc:e9:65:c8:6e:63:48:65:ac:a1:
                    31:fa:52:42:64:15:27:a3:d0:91:54:f9:62:ee:99:
                    8d:b9:91:55:d7:3d:fd:a5:9f:7b:5a:1e:c2:e0:a9:
                    5e:9e:24:e4:da:e5:d0:85:df:86:01:50:55:59:1e:
                    8d:ef:a7:de:ee:cb:fe:c6:6b:4a:5e:24:57:8a:c9:
                    5f:01:20:c0:7d:8c:b0:8f:c3:aa:b3:13:d3:07:dc:
                    6d:fb:ab:67:36:6b:5e:53:81:c9:48:b6:ba:62:ed:
                    54:36:a5:68:32:1a:e6:c6:85:fd:36:2c:93:ba:d7:
                    52:45:cd:19:dd:35:a4:f1:c9:66:b4:24:75:4a:07:
                    de:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:47:59:B6:68:6A:C4:08:CF:2B:00:31:B7:C1:40:B1:51:2F:DC:65
            X509v3 Authority Key Identifier:
                keyid:C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:01:4c:19:d2:94:4e:f4:e8:9c:72:4d:7a:a0:21:04:0b:31:
         26:53:b5:39:31:e2:06:5c:e8:c8:38:10:44:a2:cc:f7:84:c3:
         47:4a:ef:7c:20:25:8d:6a:be:64:9e:a6:c0:53:7d:f1:43:61:
         2b:92:77:5a:90:fd:a8:bd:3f:8d:ab:af:51:71:be:a8:1d:19:
         ff:d8:63:5c:39:a0:e1:50:45:12:b5:79:76:b6:f9:06:f6:f7:
         5a:ac:04:4b:bc:2e:98:9b:9c:f5:87:87:e3:da:15:db:8d:25:
         64:89:00:08:3a:7b:cd:d9:90:24:12:c6:bb:f0:61:4d:c9:0c:
         e7:bc:eb:2e:df:b4:bc:b4:0c:ca:74:dc:82:fd:c7:0f:40:2b:
         f5:5a:63:93:78:96:02:31:ee:80:be:82:e4:3f:d4:2e:a2:cd:
         54:4f:70:e9:de:79:a0:0e:df:16:12:b4:38:d9:b7:e4:f1:d2:
         0d:fc:af:0a:7f:12:9a:bf:a9:10:df:a7:db:84:1f:5f:72:29:
         b8:c2:1d:a0:53:28:03:96:76:6e:38:52:90:25:bd:f4:1d:e6:
         6a:02:07:ba:91:12:da:18:17:f3:83:76:5f:7e:0c:ac:46:36:
         bd:64:ec:20:d3:85:7b:9e:d2:15:7e:df:70:f0:7e:ac:da:15:
         de:ca:f5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:34:37 2026 by rpki-client