Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
File:                     wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json)
Hash identifier:          Rzu9/ik+3C3H1liL6m3JwnbXYNIA+k2s/LCPBA1LxYk=
Subject key identifier:   85:27:29:41:54:14:9B:4D:BE:62:9B:AC:CD:B4:BC:DC:94:4F:FF:4B
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Certificate issuer:       /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial:       019D2816892F0F1C3CF0A89A246DC40BC5A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 03:00:58 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:58 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:58 +0000
Files and hashes:         1: vHJ3_tVkd2GdWkqS4nCb67yzeNU.roa (hash: F8siYYIOWBqcJc18xZZBvTPob2dHLHgiU0/yM3ixtco=)
                          2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: CEXeOtgwywfi7TFVlci1yE+Rg7ZYTmqSofgwI1I4GjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:89:2f:0f:1c:3c:f0:a8:9a:24:6d:c4:0b:c5:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
        Validity
            Not Before: Mar 26 03:00:58 2026 GMT
            Not After : Mar 27 03:00:58 2026 GMT
        Subject: CN=8527294154149b4dbe629baccdb4bcdc944fff4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:c0:97:97:3c:c3:13:f4:2b:49:8c:1f:46:
                    2a:09:6c:58:0d:de:fe:6e:7e:5d:d4:b0:c0:89:52:
                    80:a8:57:83:81:2f:90:5e:5f:24:22:aa:61:d3:44:
                    1a:be:03:c4:6d:21:19:6e:52:d9:73:e0:d4:24:93:
                    2a:82:80:b1:c0:33:87:75:4e:f2:24:f0:aa:ab:b9:
                    45:65:12:11:f9:36:d0:84:de:66:07:6e:71:c3:7e:
                    56:d7:2f:ca:06:22:21:e3:ea:82:09:f1:fe:68:b8:
                    e9:ee:5d:b6:cb:29:ea:b1:fd:32:64:73:e7:44:58:
                    ef:23:12:7a:3e:60:ae:6d:48:ac:7c:35:52:92:78:
                    ec:6c:41:65:23:47:f0:a3:bf:ec:f8:85:d7:bb:46:
                    13:9d:f4:d8:c0:eb:dd:e3:ee:4c:35:35:91:a8:8a:
                    48:2f:01:4e:5c:42:d6:d3:a5:a6:99:78:1f:89:95:
                    8d:70:3b:1f:f1:a8:2d:15:7e:ca:00:2c:64:49:73:
                    47:38:cb:f2:0c:d0:64:2d:42:5f:12:8a:db:7c:70:
                    ee:95:ff:a4:06:0f:a1:41:1f:9f:75:4a:fa:96:3c:
                    6e:a4:11:02:13:44:4f:1e:8b:f4:3b:3a:40:6e:e4:
                    07:ef:54:64:d8:49:63:94:ba:b7:a0:fb:6c:c9:1e:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:27:29:41:54:14:9B:4D:BE:62:9B:AC:CD:B4:BC:DC:94:4F:FF:4B
            X509v3 Authority Key Identifier:
                keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:73:29:87:3b:6e:50:8b:6b:d8:72:1c:dd:32:85:1f:60:a6:
         1f:ad:57:dd:9c:27:d0:24:e7:4b:ef:c0:2f:db:52:b4:cc:46:
         0e:23:b1:aa:c4:84:12:b6:d9:33:77:93:fc:bd:fc:fa:35:fa:
         b7:b2:c3:06:ef:e2:77:44:9e:db:dc:37:05:47:5d:a4:24:2f:
         d6:65:97:27:31:16:1c:d8:7a:af:c6:e6:60:44:87:8c:aa:d7:
         27:b5:26:c2:da:5c:8b:4b:0d:03:8a:98:b0:29:c6:48:53:06:
         36:39:86:bb:3c:2b:44:14:42:28:5c:f2:2d:75:e3:df:df:13:
         2e:c0:3f:ab:90:f9:6c:4d:7d:c2:cd:a3:5f:4c:c6:f7:d8:02:
         df:54:aa:e2:11:7c:f6:e2:62:e1:bf:8c:da:3a:d0:b8:de:a4:
         e7:ce:21:d5:2e:89:0b:ce:41:27:22:4a:5e:40:c5:9a:02:9f:
         e7:48:28:1c:a5:d4:3f:9e:1a:ea:4c:32:e3:9b:3e:15:f7:e1:
         d1:0c:5a:68:f4:5d:2b:da:40:f0:05:2d:22:d2:08:33:a2:f9:
         35:1c:94:1f:f6:25:aa:84:38:25:a9:9a:9f:4c:dc:8b:13:86:
         74:39:56:cb:59:72:a9:71:8f:8f:f4:ce:17:f3:9f:26:ed:f8:
         57:df:6f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:56 2026 by rpki-client