Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
File:                     WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft (raw, json)
Hash identifier:          EdBe2X/gR2DcuLF6XbJCjf2aHPMmKImloETrNrFHjt4=
Subject key identifier:   88:D3:58:C8:62:05:EB:74:FD:B1:1D:73:34:DE:A1:9A:C4:8A:04:0C
Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB
Certificate issuer:       /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
Certificate serial:       019D273A8CB3B785C40A004A66BF68065182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
Manifest number:          0933
Signing time:             Wed 25 Mar 2026 23:00:41 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:41 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:41 +0000
Files and hashes:         1: Ig_WgszMhVHZYvhX0AKKIeaHqO4.roa (hash: 31Kwv0BFF15OinZPzQ5WYpqKoqx/spvM+71+hOhfBu8=)
                          2: N3r4w-QIKvt5t1EKPBx4W22sMKU.roa (hash: Qa8i2BVXp+zXiBbIFyM8ihwV78k0q1+vinEYtsDy1/E=)
                          3: UhhULK4VhHUpXbHrquJFK5XwzTM.roa (hash: cTOGj51BZIsKfKZvp1Y6kCOw9tCtCwH0h8hrKoSZm2w=)
                          4: UqpRL__Efeid9a8cIN4aVjD7btc.roa (hash: Jo0BVJIAZaCqo9aHwqKM5mX9gen1oqBNsGDUzTFR458=)
                          5: WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl (hash: 5R3RKmmne1UdYpePHjO2Yrgq1hrnh7xDiHzicEmUsjQ=)
                          6: ZyRWAC7NCFedZIOpxUg9JU9IHfM.roa (hash: djiwnDUBrkX+JjGnUgH9ECdWKDO/0XRL0v5VkTR1fr4=)
                          7: dZJs3c-Ps2gkaeUKqIh59bbFTbA.roa (hash: YlXWb2ZjWO3ovA5560Lai+bFI6OdRPrtCGWZJCxeZw8=)
                          8: eiNx0hyWr9_GPT53IvxQM9d7nQM.roa (hash: 24M5NJX5qdMlDv9jNkA+N6M6xg4k0uj4d4NoagskJ0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:8c:b3:b7:85:c4:0a:00:4a:66:bf:68:06:51:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb
        Validity
            Not Before: Mar 25 23:00:41 2026 GMT
            Not After : Mar 26 23:00:41 2026 GMT
        Subject: CN=88d358c86205eb74fdb11d7334dea19ac48a040c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:36:6b:b1:61:24:91:36:5f:87:e2:33:95:17:
                    59:7e:f6:3d:54:38:7f:d6:dd:2f:00:93:87:af:ac:
                    ae:6c:7c:f0:b3:a2:21:60:18:4a:f8:ed:f1:81:c1:
                    87:8f:df:f6:11:d7:4f:69:b5:a5:df:df:23:4d:a0:
                    8b:87:9c:86:a3:3c:b4:d7:01:81:de:39:d5:4d:fe:
                    07:5a:ca:38:35:87:d2:b5:64:4c:08:5c:61:80:98:
                    fa:55:4a:85:23:6e:44:25:93:37:fd:a4:3f:7e:21:
                    ee:03:6b:26:37:3c:ff:f3:bc:00:31:bc:41:97:17:
                    44:41:01:e9:32:07:b5:69:e9:af:e7:69:ce:23:d8:
                    79:b3:a8:06:c7:e9:f9:b2:8d:8c:d3:05:90:de:59:
                    71:8b:fc:86:7d:2a:8a:e2:69:7f:5f:94:e3:ab:f0:
                    9e:18:4d:98:f4:1c:d1:e2:50:66:fd:e8:d8:81:a0:
                    39:54:84:dc:4e:25:aa:8e:1c:d0:1b:e3:22:ca:fa:
                    08:5d:eb:41:9f:8a:e1:16:fc:c9:0b:b5:d7:11:8d:
                    e6:18:a3:57:87:8b:b0:71:b2:be:d1:2e:b5:74:db:
                    20:63:7f:d1:28:44:80:26:52:e8:79:d0:f7:0c:34:
                    b5:32:99:ab:3a:ea:78:59:4b:92:d5:f2:f8:c2:de:
                    c0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D3:58:C8:62:05:EB:74:FD:B1:1D:73:34:DE:A1:9A:C4:8A:04:0C
            X509v3 Authority Key Identifier:
                keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:54:c1:1b:2e:b0:45:95:4c:28:dc:ab:30:7e:09:54:60:c5:
         a1:bc:51:d3:56:45:6e:9f:c1:9c:42:a7:80:cb:29:ac:db:e4:
         1b:00:8e:f8:1a:8e:f7:09:a7:65:da:63:1b:dd:9f:fe:30:41:
         fd:97:02:2c:52:68:2a:3d:8b:e4:38:d7:65:c3:6e:23:86:66:
         e5:15:b9:cd:a0:5a:b3:df:79:cf:a0:50:23:d0:88:da:52:71:
         60:9f:7c:fa:98:2b:8e:24:50:a9:2a:ac:43:82:9e:b0:a1:05:
         21:3c:6c:82:82:15:a3:26:ec:33:6e:04:7b:4d:f9:44:26:cd:
         30:79:7e:23:0d:b5:82:c5:16:bd:9a:7d:71:55:28:1e:8d:80:
         93:87:7a:f9:75:e7:76:6b:ae:2f:e7:db:7e:d8:c3:b7:cd:87:
         49:6f:a5:b0:fb:27:e5:8e:c0:2d:56:0f:0b:60:e6:71:0a:3b:
         f3:65:3e:8c:4b:10:29:47:9f:0a:6a:64:33:0d:a9:85:e0:0a:
         b5:59:38:ac:a7:ce:82:47:64:28:96:33:68:ff:06:1c:74:4b:
         a1:27:f1:25:ec:cb:14:1c:a9:9f:14:40:a5:52:75:82:bb:63:
         2a:20:04:1e:8b:f3:96:6c:92:4f:71:92:ad:f1:de:7a:62:f1:
         01:23:f6:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOoyzt4XECgBKZr9oBlGCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3
YWJlZmIwHhcNMjYwMzI1MjMwMDQxWhcNMjYwMzI2MjMwMDQxWjAzMTEwLwYDVQQD
Eyg4OGQzNThjODYyMDVlYjc0ZmRiMTFkNzMzNGRlYTE5YWM0OGEwNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjZrsWEkkTZfh+IzlRdZfvY9VDh/
1t0vAJOHr6yubHzws6IhYBhK+O3xgcGHj9/2EddPabWl398jTaCLh5yGozy01wGB
3jnVTf4HWso4NYfStWRMCFxhgJj6VUqFI25EJZM3/aQ/fiHuA2smNzz/87wAMbxB
lxdEQQHpMge1aemv52nOI9h5s6gGx+n5so2M0wWQ3llxi/yGfSqK4ml/X5Tjq/Ce
GE2Y9BzR4lBm/ejYgaA5VITcTiWqjhzQG+MiyvoIXetBn4rhFvzJC7XXEY3mGKNX
h4uwcbK+0S61dNsgY3/RKESAJlLoedD3DDS1MpmrOup4WUuS1fL4wt7AMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjTWMhiBet0/bEdczTeoZrEigQMMB8GA1UdIwQY
MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt
NzljODk4N2E4YjFjLzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj
LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVTBGy6w
RZVMKNyrMH4JVGDFobxR01ZFbp/BnEKngMsprNvkGwCO+BqO9wmnZdpjG92f/jBB
/ZcCLFJoKj2L5DjXZcNuI4Zm5RW5zaBas995z6BQI9CI2lJxYJ98+pgrjiRQqSqs
Q4KesKEFITxsgoIVoybsM24Ee035RCbNMHl+Iw21gsUWvZp9cVUoHo2Ak4d6+XXn
dmuuL+fbftjDt82HSW+lsPsn5Y7ALVYPC2DmcQo782U+jEsQKUefCmpkMw2pheAK
tVk4rKfOgkdkKJYzaP8GHHRLoSfxJezLFBypnxRApVJ1grtjKiAEHovzlmyST3GS
rfHeemLxASP2aw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:23 2026 by rpki-client