Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
File:                     WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json)
Hash identifier:          qO9dwdhkKDcsnQT0BpFruudR/Kv+i36QvGX36UevliA=
Subject key identifier:   DA:C8:E4:04:55:02:6C:46:D5:72:A2:FA:14:F6:C8:94:FC:7B:17:38
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Certificate issuer:       /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial:       019D25F1322312382209940AD9F512E8F94E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
Manifest number:          0CE8
Signing time:             Wed 25 Mar 2026 17:00:57 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:57 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:57 +0000
Files and hashes:         1: ISoN8Hz1Tt-g6dokZBe32zhY29I.roa (hash: jqVnvsymB8ypbwPu5QGw3Kqpgjs5LT+P+1zvgA/xIZg=)
                          2: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: Rcs+69CFKo36Z1FRG+DquTCp7/6ZfWuyyjwXnIIKRKI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:32:23:12:38:22:09:94:0a:d9:f5:12:e8:f9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
        Validity
            Not Before: Mar 25 17:00:57 2026 GMT
            Not After : Mar 26 17:00:57 2026 GMT
        Subject: CN=dac8e40455026c46d572a2fa14f6c894fc7b1738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:95:c4:ef:32:b9:97:71:f9:a1:f5:9b:6f:18:
                    25:da:59:23:58:6a:26:27:71:7c:44:16:3c:63:b1:
                    03:6b:47:9d:3e:5e:bb:8e:4a:f0:21:56:ce:1e:1a:
                    0e:25:2e:71:12:d1:10:32:e4:31:62:8c:c9:88:f9:
                    a2:de:b0:a6:9d:e9:19:b4:57:b2:10:85:f7:b5:05:
                    78:94:d6:e3:f5:b2:0d:81:d3:0c:50:61:d7:c3:b4:
                    08:48:fa:da:c8:e6:c6:a6:0b:bf:ed:c5:a2:9a:a4:
                    37:e1:df:1e:fd:c3:6a:bc:77:30:9a:9f:da:6e:7c:
                    37:ae:4e:34:b6:59:72:a0:68:17:58:6f:db:d3:e5:
                    34:18:0b:9a:c4:88:29:60:f9:19:73:32:90:99:36:
                    27:ec:43:01:04:92:fe:e2:5d:00:7f:3e:9a:73:98:
                    77:7d:fb:b5:ec:2b:c0:07:71:03:8c:a2:81:a1:02:
                    ef:9e:38:13:c4:21:6a:4d:96:7f:2b:f5:d5:06:92:
                    93:a5:b2:3e:1f:20:8a:8c:c5:10:c2:be:38:3b:df:
                    a5:42:0a:1f:9a:7b:08:9a:47:96:c0:41:39:5a:e1:
                    c7:27:cf:92:97:28:f3:0d:0f:15:19:de:23:39:84:
                    8d:52:cb:b6:15:d8:38:cd:2e:b2:fb:4d:b0:f8:cc:
                    88:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C8:E4:04:55:02:6C:46:D5:72:A2:FA:14:F6:C8:94:FC:7B:17:38
            X509v3 Authority Key Identifier:
                keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:96:66:9d:57:3c:be:ed:3b:69:3b:9c:19:41:ea:93:48:
         a7:0f:10:ab:cf:85:70:44:60:d7:a8:bc:48:07:09:33:c7:00:
         bc:17:b4:8d:10:d6:c6:27:1f:1e:ba:fc:30:2d:0c:2e:c8:98:
         89:0c:07:ea:cc:46:a5:97:cd:ee:b7:9c:aa:32:01:fd:56:53:
         35:6d:45:75:37:5c:5c:e5:b0:8e:1b:ee:33:90:5b:7a:76:e8:
         f6:f2:f2:23:8f:df:8d:15:b1:94:f5:e5:1a:a9:ab:4b:45:94:
         80:b5:3e:1d:1f:83:f4:a5:6f:05:33:2a:1a:d1:ac:8b:8e:03:
         d9:c7:4d:e5:41:2b:52:0e:6f:5c:a7:b6:ba:30:26:40:eb:12:
         01:9a:b6:fa:1d:d5:a3:36:f3:d3:22:cf:5e:58:5c:1b:cb:09:
         a2:35:05:be:a2:8a:d1:9a:a3:bc:99:7d:14:d5:eb:18:ed:05:
         a7:c4:d7:7c:d1:4c:fd:78:36:23:fc:67:62:e4:d8:17:05:ee:
         16:0c:5e:a2:10:ba:8d:af:4f:e4:71:58:22:52:87:da:d6:ce:
         ed:de:a8:90:a7:34:19:3c:5e:3f:ff:64:13:8a:4a:17:15:09:
         5b:04:b2:f9:82:bb:d7:6b:7c:4a:51:54:74:73:13:26:7d:ee:
         8f:4b:1f:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8TIjEjgiCZQK2fUS6PlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MTM4ZTNkYjc3NjQwYmVhZGYxZGE1YjE1MTk0YjkzODRh
MTQ0NGUwHhcNMjYwMzI1MTcwMDU3WhcNMjYwMzI2MTcwMDU3WjAzMTEwLwYDVQQD
EyhkYWM4ZTQwNDU1MDI2YzQ2ZDU3MmEyZmExNGY2Yzg5NGZjN2IxNzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZXE7zK5l3H5ofWbbxgl2lkjWGom
J3F8RBY8Y7EDa0edPl67jkrwIVbOHhoOJS5xEtEQMuQxYozJiPmi3rCmnekZtFey
EIX3tQV4lNbj9bINgdMMUGHXw7QISPrayObGpgu/7cWimqQ34d8e/cNqvHcwmp/a
bnw3rk40tllyoGgXWG/b0+U0GAuaxIgpYPkZczKQmTYn7EMBBJL+4l0Afz6ac5h3
ffu17CvAB3EDjKKBoQLvnjgTxCFqTZZ/K/XVBpKTpbI+HyCKjMUQwr44O9+lQgof
mnsImkeWwEE5WuHHJ8+SlyjzDQ8VGd4jOYSNUsu2Fdg4zS6y+02w+MyIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrI5ARVAmxG1XKi+hT2yJT8exc4MB8GA1UdIwQY
MBaAFFkTjj23dkC+rfHaWxUZS5OEoUROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDkt
N2E0ZTMzNDBhNDkxLzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDktN2E0ZTMzNDBhNDkx
LzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGeWZp1X
PL7tO2k7nBlB6pNIpw8Qq8+FcERg16i8SAcJM8cAvBe0jRDWxicfHrr8MC0MLsiY
iQwH6sxGpZfN7recqjIB/VZTNW1FdTdcXOWwjhvuM5Bbenbo9vLyI4/fjRWxlPXl
GqmrS0WUgLU+HR+D9KVvBTMqGtGsi44D2cdN5UErUg5vXKe2ujAmQOsSAZq2+h3V
ozbz0yLPXlhcG8sJojUFvqKK0ZqjvJl9FNXrGO0Fp8TXfNFM/Xg2I/xnYuTYFwXu
FgxeohC6ja9P5HFYIlKH2tbO7d6okKc0GTxeP/9kE4pKFxUJWwSy+YK712t8SlFU
dHMTJn3uj0sfoQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:33:54 2026 by rpki-client