Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
File:                     wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft (raw, json)
Hash identifier:          ic8sPVs3A2n/w1szAs810ySttaAS4Sa90Y0y7xZsjsY=
Subject key identifier:   16:2A:70:1D:1B:42:A9:CD:C7:E9:6D:30:AC:45:0C:32:02:A0:ED:AA
Authority key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Certificate issuer:       /CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Certificate serial:       019D26CCBB16D44C306890B4459E31412310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 21:00:44 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:44 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:44 +0000
Files and hashes:         1: 4OUSsPf2UIj1ENWFeSqwKcIXtl0.roa (hash: CU7VD/QjDqVmViCVGjB9C2Hx1kxI21aZllJ4lWIgq7k=)
                          2: J6xC5e6lIltoyJBn6SlWZlAQvIA.roa (hash: LNgbfTK70EVkXbHrJjUfQKsiK79uROdYKu4IkzoIDQ0=)
                          3: wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl (hash: yzfsi94myXbtCT9NICRM/XK9QKNAfryGXvPlw2+TtLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:bb:16:d4:4c:30:68:90:b4:45:9e:31:41:23:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
        Validity
            Not Before: Mar 25 21:00:44 2026 GMT
            Not After : Mar 26 21:00:44 2026 GMT
        Subject: CN=162a701d1b42a9cdc7e96d30ac450c3202a0edaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:45:aa:19:14:30:88:a5:ce:fe:76:28:bf:cd:
                    f5:44:11:c6:30:a2:46:42:06:93:39:ce:88:4a:50:
                    40:f1:f5:b3:7f:4d:d5:a6:c6:5b:d9:1e:3e:38:21:
                    15:44:ff:ca:24:58:1e:06:35:2d:c2:bf:9c:03:6c:
                    6c:b2:11:67:c2:89:ae:97:8b:57:d0:60:48:0b:fc:
                    9b:4c:30:7b:0e:2c:9a:c3:00:32:16:1c:be:27:d3:
                    63:fe:82:37:c9:7c:da:ef:96:76:71:33:c5:57:6c:
                    b0:6e:b4:57:3e:7d:42:e4:31:bc:f9:8e:13:bb:25:
                    26:74:5a:ce:b0:0e:b0:38:02:b3:29:92:47:39:0f:
                    7f:73:86:63:63:1e:75:93:a3:4a:d7:a6:cf:67:7d:
                    79:1b:0a:ba:ee:4a:fa:6e:d2:d6:eb:42:75:e7:6f:
                    ce:2f:79:e1:20:5d:f5:7b:11:90:1b:b7:a0:9c:ef:
                    0e:f9:8d:b4:6c:d3:f5:53:8e:b1:22:72:27:3e:9e:
                    c4:08:ba:21:37:37:6b:7e:88:81:b8:6c:81:0f:a7:
                    e4:d2:85:35:12:fb:27:c2:23:e1:a6:9c:70:54:df:
                    35:40:ad:04:46:e6:83:6b:ae:6a:69:7c:a7:48:7a:
                    ad:64:d7:8d:1f:ff:83:a3:86:22:0d:74:54:a1:2d:
                    5d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2A:70:1D:1B:42:A9:CD:C7:E9:6D:30:AC:45:0C:32:02:A0:ED:AA
            X509v3 Authority Key Identifier:
                keyid:C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:85:7e:12:58:49:f4:f3:c4:d9:96:a6:3e:72:6d:a2:24:16:
         1d:1c:01:59:58:a3:44:7a:ec:21:cf:8b:97:8a:2a:54:00:5a:
         80:a4:fc:8d:b1:d1:86:b0:86:36:4e:2b:28:33:8f:62:d3:58:
         36:ad:d1:7e:1a:b2:f4:27:b6:7b:d4:73:a1:29:f9:ec:36:eb:
         77:55:9d:6f:dd:c0:0d:7d:8f:94:76:14:a8:5d:df:78:a5:7f:
         2a:81:c4:99:59:f5:a5:c8:f3:eb:6c:16:e6:76:9d:f2:8b:f4:
         91:90:52:9a:19:e5:dc:3f:11:f0:73:a2:b2:be:43:8e:5d:d8:
         17:b8:e1:6f:fd:18:c2:48:b1:b5:13:aa:26:92:16:07:d2:94:
         da:23:93:4a:88:80:78:4a:9c:8f:dd:f8:49:39:f4:41:3d:c0:
         a8:ea:f9:79:ac:59:5f:5d:3f:1a:e1:95:08:3b:79:5e:c3:c6:
         0f:49:07:1c:18:f2:6c:a0:58:cb:3b:87:02:2e:f6:be:ce:ed:
         8b:3b:e2:59:34:ee:3a:dd:e6:2d:95:87:d8:da:2b:c4:19:ce:
         bb:26:d2:c6:e3:7c:ad:fa:da:03:f5:59:58:69:9d:a2:66:58:
         bd:ee:40:99:8d:5e:5b:47:8f:0e:a1:32:ec:15:49:84:47:5a:
         a8:a0:04:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzLsW1EwwaJC0RZ4xQSMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGMyZjg1MDI2MTU4Y2JkOWZmNDlkYTE1ZGIyMjVmMDUz
MDc0YWMwHhcNMjYwMzI1MjEwMDQ0WhcNMjYwMzI2MjEwMDQ0WjAzMTEwLwYDVQQD
EygxNjJhNzAxZDFiNDJhOWNkYzdlOTZkMzBhYzQ1MGMzMjAyYTBlZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8EWqGRQwiKXO/nYov831RBHGMKJG
QgaTOc6ISlBA8fWzf03VpsZb2R4+OCEVRP/KJFgeBjUtwr+cA2xsshFnwomul4tX
0GBIC/ybTDB7DiyawwAyFhy+J9Nj/oI3yXza75Z2cTPFV2ywbrRXPn1C5DG8+Y4T
uyUmdFrOsA6wOAKzKZJHOQ9/c4ZjYx51k6NK16bPZ315Gwq67kr6btLW60J152/O
L3nhIF31exGQG7egnO8O+Y20bNP1U46xInInPp7ECLohNzdrfoiBuGyBD6fk0oU1
EvsnwiPhppxwVN81QK0ERuaDa65qaXynSHqtZNeNH/+Do4YiDXRUoS1d8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYqcB0bQqnNx+ltMKxFDDICoO2qMB8GA1UdIwQY
MBaAFMHcL4UCYVjL2f9J2hXbIl8FMHSsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEt
Mjg0ZWM4MTYwMmU3LzEvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi82ZjNlODktMDAxOC00ZGM5LWE5NWEtMjg0ZWM4MTYwMmU3
LzEvd2R3dmhRSmhXTXZaXzBuYUZkc2lYd1V3ZEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIV+ElhJ
9PPE2ZamPnJtoiQWHRwBWVijRHrsIc+Ll4oqVABagKT8jbHRhrCGNk4rKDOPYtNY
Nq3Rfhqy9Ce2e9RzoSn57Dbrd1Wdb93ADX2PlHYUqF3feKV/KoHEmVn1pcjz62wW
5nad8ov0kZBSmhnl3D8R8HOisr5Djl3YF7jhb/0YwkixtROqJpIWB9KU2iOTSoiA
eEqcj934STn0QT3AqOr5eaxZX10/GuGVCDt5XsPGD0kHHBjybKBYyzuHAi72vs7t
izviWTTuOt3mLZWH2NorxBnOuybSxuN8rfraA/VZWGmdomZYve5AmY1eW0ePDqEy
7BVJhEdaqKAE6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:19:29 2026 by rpki-client