Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File:                     WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier:          udJ93it+2Ydtujhikths4rHFtuovinzXFUMCa5o0EPQ=
Subject key identifier:   EA:CF:80:80:D9:C5:93:FC:FE:DD:DF:C2:BB:63:D6:A0:AF:C1:B9:8B
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer:       /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial:       019D2816BAA2ED440ED6D83F4B223884A5EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number:          03E0
Signing time:             Thu 26 Mar 2026 03:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:11 +0000
Files and hashes:         1: 3LKBFi7qK9-mH9zvi-Ys8DrPyCc.roa (hash: 3n/tlWwRztOB/Yu2+sFP0seUelZYfaMtfMJ5VRgA2p0=)
                          2: 3lscwPyVq0HwpYOhe1qOH376GbY.roa (hash: ABURxSq0W7iaabEt0YGRwE5xtvDmIVi3eCKYaDM6tzo=)
                          3: AnOV32OnLS7vzP0Ic_vNsSbH3VU.roa (hash: 2+tbTXLyonVPPU5Qc4ONeo44MFYnrVJPmBUJMwxiq4M=)
                          4: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: lOfqoZOr3CwwI4AmxDRyMoJ/HhVXbU2VnSzJXU/8vVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:ba:a2:ed:44:0e:d6:d8:3f:4b:22:38:84:a5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
        Validity
            Not Before: Mar 26 03:01:11 2026 GMT
            Not After : Mar 27 03:01:11 2026 GMT
        Subject: CN=eacf8080d9c593fcfedddfc2bb63d6a0afc1b98b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7c:03:7f:59:be:7b:98:74:f6:a9:65:53:88:
                    34:97:f8:3a:8c:33:35:98:e3:29:a3:fa:cb:55:dd:
                    9b:a8:c0:9a:8c:27:a0:ba:ce:e3:4e:63:ad:79:d4:
                    65:84:8f:76:de:be:19:a8:6f:c9:a0:3b:32:d9:45:
                    a1:9e:f3:a3:56:28:1f:bd:fe:a5:7f:38:7c:33:a8:
                    7f:30:6e:4d:cb:dc:d1:26:7c:c7:b6:e5:e2:18:6d:
                    2f:f4:6e:e0:78:a1:81:0c:9b:c9:0a:87:84:47:e2:
                    46:97:a6:c5:13:74:7c:4d:ed:50:5d:f8:fe:46:66:
                    9b:cc:cc:3e:f0:95:ee:f8:fb:ea:4f:34:96:e7:c5:
                    0e:27:91:60:75:8f:1d:a3:53:e2:56:7b:7c:b5:0a:
                    b5:11:68:7d:4f:00:db:c8:59:0e:47:73:75:e5:e4:
                    a1:0b:37:d9:9b:6d:19:23:c1:e6:32:73:f1:be:0f:
                    f4:17:01:90:4e:f2:46:d6:50:d5:20:f6:f9:94:f0:
                    99:7f:14:a2:ba:60:a6:52:b3:40:9d:29:f7:00:d8:
                    9b:e3:4f:46:e6:22:37:71:66:ca:60:b1:70:ad:f7:
                    65:02:40:ef:b6:c9:05:a5:52:4a:f6:da:61:25:20:
                    ef:48:82:76:33:90:a6:ae:ed:db:3b:34:c5:30:e4:
                    69:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CF:80:80:D9:C5:93:FC:FE:DD:DF:C2:BB:63:D6:A0:AF:C1:B9:8B
            X509v3 Authority Key Identifier:
                keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ec:23:e0:fc:bc:4d:13:3e:f5:fd:71:dc:3c:bd:2b:61:a5:
         8b:1d:46:dc:30:94:51:87:71:81:0c:8f:fa:3d:cd:e8:55:fb:
         cd:9c:90:ee:c2:6b:8c:6d:77:a5:4b:23:22:e3:fb:fd:00:43:
         67:78:90:30:6a:69:87:e8:a1:49:74:4d:8c:8b:0e:6f:99:93:
         c2:ca:bd:41:27:70:5b:c8:41:7e:e6:34:ee:bc:f6:07:2e:60:
         c5:a4:46:ad:06:b6:5c:09:3d:30:6b:7a:56:30:3d:76:b6:a4:
         73:28:ae:4a:de:ce:5b:15:c6:bb:92:e6:8a:85:3f:3a:fd:34:
         ab:fa:26:cc:0d:32:cd:8c:5a:7d:ef:a1:9c:91:33:ce:34:78:
         1e:13:de:09:7d:ca:6c:26:e8:3b:7f:d4:a6:e8:94:87:ee:03:
         ec:2e:2b:ad:b2:20:b9:81:ff:a4:a9:3f:f7:60:73:52:ae:36:
         88:44:9f:e7:e2:08:d5:1d:56:bf:b2:2d:5a:17:02:7d:12:93:
         ad:c2:d7:8e:6d:f4:0c:41:bb:ae:67:59:9d:36:50:8b:5c:ae:
         65:88:24:a7:66:b5:d3:2d:23:1e:87:bd:35:d1:71:9a:8d:a8:
         e5:a5:68:9f:59:f0:b6:03:86:48:a1:14:ef:7e:24:91:61:a0:
         90:be:6a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFrqi7UQO1tg/SyI4hKXuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2Q1NjNhMmFlNjUyOWM5ZjQzZmU0YjVjNjdkYjcwZTc3
OWEwOWIwHhcNMjYwMzI2MDMwMTExWhcNMjYwMzI3MDMwMTExWjAzMTEwLwYDVQQD
EyhlYWNmODA4MGQ5YzU5M2ZjZmVkZGRmYzJiYjYzZDZhMGFmYzFiOThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3wDf1m+e5h09qllU4g0l/g6jDM1
mOMpo/rLVd2bqMCajCegus7jTmOtedRlhI923r4ZqG/JoDsy2UWhnvOjVigfvf6l
fzh8M6h/MG5Ny9zRJnzHtuXiGG0v9G7geKGBDJvJCoeER+JGl6bFE3R8Te1QXfj+
RmabzMw+8JXu+PvqTzSW58UOJ5FgdY8do1PiVnt8tQq1EWh9TwDbyFkOR3N15eSh
CzfZm20ZI8HmMnPxvg/0FwGQTvJG1lDVIPb5lPCZfxSiumCmUrNAnSn3ANib409G
5iI3cWbKYLFwrfdlAkDvtskFpVJK9tphJSDvSIJ2M5Cmru3bOzTFMORpNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrPgIDZxZP8/t3fwrtj1qCvwbmLMB8GA1UdIwQY
MBaAFFjNVjoq5lKcn0P+S1xn23DneaCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAt
NDdhNWY0ODFlNmY1LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAtNDdhNWY0ODFlNmY1
LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjewj4Py8
TRM+9f1x3Dy9K2Glix1G3DCUUYdxgQyP+j3N6FX7zZyQ7sJrjG13pUsjIuP7/QBD
Z3iQMGpph+ihSXRNjIsOb5mTwsq9QSdwW8hBfuY07rz2By5gxaRGrQa2XAk9MGt6
VjA9drakcyiuSt7OWxXGu5LmioU/Ov00q/omzA0yzYxafe+hnJEzzjR4HhPeCX3K
bCboO3/UpuiUh+4D7C4rrbIguYH/pKk/92BzUq42iESf5+II1R1Wv7ItWhcCfRKT
rcLXjm30DEG7rmdZnTZQi1yuZYgkp2a10y0jHoe9NdFxmo2o5aVon1nwtgOGSKEU
734kkWGgkL5qow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:28 2026 by rpki-client