Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
File:                     WC4hcKe8vsMQFU8rzpmDP-woAfs.mft (raw, json)
Hash identifier:          fzd+Bw83t86rHJXPXc88A20MmFM9FtORmUBrgpfjweI=
Subject key identifier:   69:6D:37:AA:A0:C6:3E:7C:CC:D7:BA:18:A8:75:8F:B0:37:FB:76:9A
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Certificate issuer:       /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial:       019D27044791164811BD60C6102A4497EFDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
Manifest number:          0A7A
Signing time:             Wed 25 Mar 2026 22:01:25 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:25 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:25 +0000
Files and hashes:         1: 6mj9wjIYkwPsA3c5MxWWRMkBmSY.roa (hash: E1XVoQk2psLjeVe0+NkJREdlEcbwRYRghSTnYcJUsio=)
                          2: WC4hcKe8vsMQFU8rzpmDP-woAfs.crl (hash: trpBEmEHo5edLJ6/Rc1AHuIuM9KzbsLAN7GEwuiCFpo=)
                          3: eieZOr9FHJILQ01WF-oyQAME0-4.roa (hash: ahdbiO7qmkWYgXQ04GmEQrp4ceapMkzBgwSwQKptvJI=)
                          4: sJMlQlmuU4_t9JLTWEOG32Cq6MQ.roa (hash: E7O6wd0Zjg99STe3wUKf7d1f1MzUTLb1rAZKDrFTMV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:47:91:16:48:11:bd:60:c6:10:2a:44:97:ef:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
        Validity
            Not Before: Mar 25 22:01:25 2026 GMT
            Not After : Mar 26 22:01:25 2026 GMT
        Subject: CN=696d37aaa0c63e7cccd7ba18a8758fb037fb769a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:b7:70:11:cb:cc:b5:c2:24:19:32:21:07:
                    32:60:e0:4a:83:ee:0d:10:e3:25:57:38:14:67:f7:
                    0c:d1:b2:67:30:ce:29:96:e3:da:e5:37:ea:7e:03:
                    50:a2:a4:aa:98:46:dd:4b:76:23:06:d3:5a:46:7f:
                    6f:f8:9a:25:f4:57:74:10:48:f0:3d:4d:72:eb:3c:
                    73:22:52:bc:0b:e0:3d:7d:3d:53:ea:5c:65:b6:4a:
                    68:ab:8d:30:2f:32:48:76:7d:00:71:3a:11:3e:71:
                    ad:20:51:8e:29:fd:89:d8:6b:26:6b:8e:28:9f:82:
                    a6:86:84:1c:ec:14:7b:d9:28:bf:66:ac:f5:a1:22:
                    6e:41:0f:5b:0e:46:ca:41:85:72:fd:d3:8a:8c:64:
                    f0:13:89:99:83:30:fc:68:e4:5e:38:17:10:0f:c6:
                    a4:27:71:f6:d4:64:ff:e2:76:0e:df:aa:4a:0b:10:
                    77:48:ce:51:c2:c0:46:d7:14:de:9e:2f:9a:a5:5e:
                    30:09:80:84:ab:45:58:4a:1e:9e:a2:da:9c:7d:2f:
                    0c:10:f0:e8:07:c3:4a:09:36:f4:fc:a6:6c:16:44:
                    a2:78:8d:da:62:d1:4c:33:a7:da:f5:0d:b9:3c:29:
                    98:27:5a:99:67:e6:ca:0b:f0:72:11:cf:27:bb:3b:
                    5a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:6D:37:AA:A0:C6:3E:7C:CC:D7:BA:18:A8:75:8F:B0:37:FB:76:9A
            X509v3 Authority Key Identifier:
                keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:eb:f6:84:76:90:70:5e:dc:a1:0e:e5:93:6e:86:5f:48:9c:
         0c:b4:3f:bc:0b:0b:43:71:f0:dc:0e:c7:ec:6d:f9:e4:fe:01:
         95:51:b9:90:39:e8:5a:24:7f:de:b2:4e:a2:f3:cc:c7:e2:df:
         8a:57:fb:89:5f:de:f3:6c:84:fb:db:a1:34:f5:9f:03:3d:82:
         b0:c7:a7:e0:ed:08:5f:2a:ce:f1:61:cd:88:bc:d1:85:50:09:
         a6:8b:a9:62:32:65:26:1e:e8:1b:69:b2:d5:b7:b5:da:40:98:
         40:7b:cf:fa:ad:72:20:b7:a3:2a:9e:33:b5:1b:63:ad:1e:f5:
         90:46:d6:e9:ca:86:da:3d:af:a8:68:fa:bb:ea:40:29:2a:9c:
         b9:48:21:16:95:48:8d:63:c8:98:e2:dc:78:df:7f:bc:13:21:
         8b:19:bb:5d:7e:5e:44:ce:9c:2f:78:3f:50:1a:22:14:05:97:
         3b:d6:67:8a:c2:21:0d:22:ed:46:16:7e:80:be:0f:c9:fd:fa:
         09:99:0d:fe:c5:a2:ec:94:5a:9c:a9:11:00:3b:72:9b:69:5e:
         15:b5:3b:52:b7:b4:19:37:73:05:5d:86:e4:db:5b:5d:cd:1e:
         21:91:f2:37:92:c1:53:b5:1b:17:61:c4:0c:10:2c:33:f4:93:
         a9:d4:7d:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBEeRFkgRvWDGECpEl+/eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmUyMTcwYTdiY2JlYzMxMDE1NGYyYmNlOTk4MzNmZWMy
ODAxZmIwHhcNMjYwMzI1MjIwMTI1WhcNMjYwMzI2MjIwMTI1WjAzMTEwLwYDVQQD
Eyg2OTZkMzdhYWEwYzYzZTdjY2NkN2JhMThhODc1OGZiMDM3ZmI3NjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcK3cBHLzLXCJBkyIQcyYOBKg+4N
EOMlVzgUZ/cM0bJnMM4pluPa5TfqfgNQoqSqmEbdS3YjBtNaRn9v+Jol9Fd0EEjw
PU1y6zxzIlK8C+A9fT1T6lxltkpoq40wLzJIdn0AcToRPnGtIFGOKf2J2Gsma44o
n4KmhoQc7BR72Si/Zqz1oSJuQQ9bDkbKQYVy/dOKjGTwE4mZgzD8aOReOBcQD8ak
J3H21GT/4nYO36pKCxB3SM5RwsBG1xTeni+apV4wCYCEq0VYSh6eotqcfS8MEPDo
B8NKCTb0/KZsFkSieI3aYtFMM6fa9Q25PCmYJ1qZZ+bKC/ByEc8nuztaHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGltN6qgxj58zNe6GKh1j7A3+3aaMB8GA1UdIwQY
MBaAFFguIXCnvL7DEBVPK86Zgz/sKAH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTct
YjJmZDliZjA5N2Y4LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTctYjJmZDliZjA5N2Y4
LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3ev2hHaQ
cF7coQ7lk26GX0icDLQ/vAsLQ3Hw3A7H7G355P4BlVG5kDnoWiR/3rJOovPMx+Lf
ilf7iV/e82yE+9uhNPWfAz2CsMen4O0IXyrO8WHNiLzRhVAJpoupYjJlJh7oG2my
1be12kCYQHvP+q1yILejKp4ztRtjrR71kEbW6cqG2j2vqGj6u+pAKSqcuUghFpVI
jWPImOLceN9/vBMhixm7XX5eRM6cL3g/UBoiFAWXO9ZnisIhDSLtRhZ+gL4Pyf36
CZkN/sWi7JRanKkRADtym2leFbU7Ure0GTdzBV2G5NtbXc0eIZHyN5LBU7UbF2HE
DBAsM/STqdR9gw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:48 2026 by rpki-client