Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
File:                     WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json)
Hash identifier:          ZH5aj+oUEfPbYPqlLRxF6iWd21Vp1QQY0KH+/mpdCfo=
Subject key identifier:   31:00:C5:A3:BE:F1:DB:8B:57:0A:67:8A:2E:F3:72:82:77:86:33:3D
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Certificate issuer:       /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial:       019D2929763939CBE3E7CF7212E5D3D67EC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
Manifest number:          18A2
Signing time:             Thu 26 Mar 2026 08:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:16 +0000
Files and hashes:         1: 3W9R-YT71N2KOE9koy1r5cINKX0.roa (hash: clKClGDaGmI0tmvfHI+K0tkdnMBa+OFDvpOE7hWE5Ts=)
                          2: 5UeKqt91iujWrLpmveszaAeKq38.roa (hash: uGfE9PLC67qvNbDJ8GUA0pov+PYaKuZOHQHTjJZLOVs=)
                          3: AUg0z5yXbzh2DRCyGjN0QT6euNA.roa (hash: RSYJ1asjZqxOdOG/NJBg7u2rmfVrBP+knp47N/2/EDM=)
                          4: NG61yH3HN97TjS1iRIUPVdYaQ7A.roa (hash: x678lkfNMzciNejX1Mk4JHb1ftZLDB8lKMVQe+Qriio=)
                          5: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: 0PmxlXkxvl9Q7zDZZa3pAJN7LB+FU2rLjU+0FfOl5Vw=)
                          6: p0oEcMg8sG6gT08Fcxw4r9QhamI.roa (hash: z6uLeIBaxCEHOYTKTX4AQu+ufdq2lBhvDUsLTsxGNkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:76:39:39:cb:e3:e7:cf:72:12:e5:d3:d6:7e:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
        Validity
            Not Before: Mar 26 08:01:16 2026 GMT
            Not After : Mar 27 08:01:16 2026 GMT
        Subject: CN=3100c5a3bef1db8b570a678a2ef372827786333d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:64:ad:5a:0f:fa:1c:36:3e:ff:2a:4a:ce:e8:
                    e9:a1:69:fc:08:c8:53:d0:fb:eb:14:89:c9:18:d1:
                    97:ea:45:7a:ad:51:3f:f2:7d:ca:ba:79:ad:72:f6:
                    17:1c:55:59:1e:be:e5:1a:8c:cb:f2:c0:09:80:f7:
                    ce:73:60:b8:ac:3c:cd:bb:3e:f4:b2:38:f7:ba:7e:
                    57:4a:4c:55:6d:56:65:c7:70:36:ed:a5:a2:95:8e:
                    b9:c7:df:b1:9b:61:0b:2e:29:fe:42:2c:43:30:79:
                    78:bf:5f:68:63:7a:4d:e3:05:73:e5:cd:09:6c:f5:
                    e9:a8:03:ac:5d:84:76:c6:67:ae:e8:92:16:4b:35:
                    92:d9:64:ed:04:1d:70:6f:a3:ce:12:9c:92:8f:f7:
                    94:6d:ec:52:0e:55:bf:3d:f9:e1:3f:59:43:95:61:
                    d3:f4:08:d9:a4:3f:fc:0a:32:65:b0:23:3f:c6:4a:
                    4f:ba:98:f0:11:c7:8b:2f:e0:0d:af:0f:7c:7d:90:
                    45:3c:09:85:66:2e:8a:f9:43:3a:b2:51:e2:38:8f:
                    de:ec:87:6b:95:e0:7a:9e:3a:5f:9d:05:14:f3:a3:
                    33:09:1b:55:27:b2:0b:ee:5f:5b:86:26:eb:80:de:
                    3b:66:99:62:60:cb:a0:22:b5:f5:ff:de:77:08:2b:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:00:C5:A3:BE:F1:DB:8B:57:0A:67:8A:2E:F3:72:82:77:86:33:3D
            X509v3 Authority Key Identifier:
                keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:82:5a:fd:a7:6c:72:54:7a:d6:fb:95:0b:ee:1c:b1:25:d7:
         61:78:1b:85:e9:6f:58:25:80:72:83:a4:f3:bc:ab:48:e9:9e:
         e5:81:f3:1c:51:78:e6:8b:48:c0:63:c9:52:fa:e8:1c:6a:2a:
         1b:84:30:d6:11:08:ac:08:71:21:05:24:09:7a:79:aa:d7:1a:
         55:7a:90:d6:0b:74:70:25:27:d9:c1:af:dc:6f:c9:58:25:fb:
         3a:d0:4e:90:a5:41:79:fb:f5:e1:40:c0:0e:76:ec:49:34:a9:
         df:84:5d:87:32:88:81:13:25:b5:db:5f:8b:4b:0a:17:83:71:
         85:9a:b8:11:da:01:f1:75:40:2c:49:9b:4f:5b:69:48:61:b9:
         1e:f8:c5:72:f1:30:c4:c0:7e:a6:3c:6d:9d:1f:12:52:a3:9c:
         ca:a1:7f:43:c3:43:b1:6d:8e:36:33:1c:90:b8:04:1c:12:2a:
         9f:6c:7e:82:2b:7a:bb:8c:6f:f7:6f:70:b5:23:00:95:22:93:
         52:f1:97:11:99:5d:67:f8:88:3f:25:76:c0:77:83:9e:79:f7:
         52:c0:c5:e1:d3:e1:4e:a8:6f:8b:19:92:72:94:0e:83:01:4d:
         0a:70:fb:d3:77:70:36:8d:d7:68:ad:54:4a:5e:2e:c9:62:af:
         5f:fe:19:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pKXY5Ocvj589yEuXT1n7CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm
MGViN2IwHhcNMjYwMzI2MDgwMTE2WhcNMjYwMzI3MDgwMTE2WjAzMTEwLwYDVQQD
EygzMTAwYzVhM2JlZjFkYjhiNTcwYTY3OGEyZWYzNzI4Mjc3ODYzMzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2StWg/6HDY+/ypKzujpoWn8CMhT
0PvrFInJGNGX6kV6rVE/8n3KunmtcvYXHFVZHr7lGozL8sAJgPfOc2C4rDzNuz70
sjj3un5XSkxVbVZlx3A27aWilY65x9+xm2ELLin+QixDMHl4v19oY3pN4wVz5c0J
bPXpqAOsXYR2xmeu6JIWSzWS2WTtBB1wb6POEpySj/eUbexSDlW/PfnhP1lDlWHT
9AjZpD/8CjJlsCM/xkpPupjwEceLL+ANrw98fZBFPAmFZi6K+UM6slHiOI/e7Idr
leB6njpfnQUU86MzCRtVJ7IL7l9bhibrgN47ZpliYMugIrX1/953CCtbKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEAxaO+8duLVwpnii7zcoJ3hjM9MB8GA1UdIwQY
MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt
MzE4MGFlNDI3NGYzLzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz
LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4Ja/ads
clR61vuVC+4csSXXYXgbhelvWCWAcoOk87yrSOme5YHzHFF45otIwGPJUvroHGoq
G4Qw1hEIrAhxIQUkCXp5qtcaVXqQ1gt0cCUn2cGv3G/JWCX7OtBOkKVBefv14UDA
DnbsSTSp34RdhzKIgRMltdtfi0sKF4NxhZq4EdoB8XVALEmbT1tpSGG5HvjFcvEw
xMB+pjxtnR8SUqOcyqF/Q8NDsW2ONjMckLgEHBIqn2x+git6u4xv929wtSMAlSKT
UvGXEZldZ/iIPyV2wHeDnnn3UsDF4dPhTqhvixmScpQOgwFNCnD703dwNo3XaK1U
Sl4uyWKvX/4Z+g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:54:21 2026 by rpki-client