Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
File:                     w-cV2UkPUh42oFb5mb-1bg8h_IY.mft (raw, json)
Hash identifier:          uIF5+6BHTJbasBi43Peu1AaJHlfG74raKQ/ik71U1qE=
Subject key identifier:   C3:E5:91:72:60:0C:5C:3A:20:52:3C:4A:E8:F7:77:60:78:EF:88:AB
Authority key identifier: C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86
Certificate issuer:       /CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
Certificate serial:       019D2583C5BC102C772F5EED76478831DB04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 15:01:25 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:25 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:25 +0000
Files and hashes:         1: rChP9coQkYplEubLbO6s9Cp-q5I.roa (hash: 1LZSA/1gFfSDw/C3+xqoF/PvToYmYwuTx/TQdw2XSbI=)
                          2: w-cV2UkPUh42oFb5mb-1bg8h_IY.crl (hash: 3kHdIPev0x+6RGWPDA9ICIZGelW9lSuhj1cZfyrOk2k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:c5:bc:10:2c:77:2f:5e:ed:76:47:88:31:db:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e715d9490f521e36a056f999bfb56e0f21fc86
        Validity
            Not Before: Mar 25 15:01:25 2026 GMT
            Not After : Mar 26 15:01:25 2026 GMT
        Subject: CN=c3e59172600c5c3a20523c4ae8f7776078ef88ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:2a:12:5e:dc:3b:41:0c:ac:87:ba:3e:bf:
                    e1:d1:de:d4:3a:72:2d:5b:7e:27:f0:4d:9b:55:4b:
                    7e:5b:98:9b:0f:fd:d4:c8:68:dd:32:55:ab:cc:60:
                    3b:92:62:6d:61:c5:82:bc:01:7f:01:63:c4:a5:cf:
                    b1:51:72:a6:bc:f5:47:50:ef:99:07:1a:c6:84:02:
                    0e:db:57:89:b3:60:d4:63:c9:fb:d5:82:38:41:23:
                    a7:84:8a:fa:23:6f:2f:4b:af:89:45:ea:fe:4f:56:
                    1a:5d:09:71:b7:f6:fb:c3:08:75:a9:7f:63:8f:ef:
                    14:8f:1a:22:4d:fa:5a:aa:6f:e4:2f:45:19:73:18:
                    a4:0d:c9:50:97:6b:cd:64:c2:c7:e6:46:97:33:71:
                    35:78:5c:d8:17:78:83:da:fa:19:28:5e:0a:2f:4c:
                    3e:0b:ab:a5:f3:20:f9:fe:7c:fa:61:83:22:b0:41:
                    fd:04:65:25:6b:39:f8:40:36:5c:3d:73:33:c9:99:
                    24:7b:6f:ec:28:04:4f:2e:e8:1e:3e:f4:d1:80:2c:
                    33:cc:5f:38:8c:59:97:a7:f9:5d:d4:f5:3f:75:b2:
                    5e:da:05:e1:c8:40:d6:a8:0f:46:46:e7:34:a1:9c:
                    03:68:34:b6:9f:c6:ff:09:97:6c:19:47:6f:15:ad:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E5:91:72:60:0C:5C:3A:20:52:3C:4A:E8:F7:77:60:78:EF:88:AB
            X509v3 Authority Key Identifier:
                keyid:C3:E7:15:D9:49:0F:52:1E:36:A0:56:F9:99:BF:B5:6E:0F:21:FC:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-cV2UkPUh42oFb5mb-1bg8h_IY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/52b279-4e02-440f-83c0-b936024a254a/1/w-cV2UkPUh42oFb5mb-1bg8h_IY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:e2:55:14:b0:cb:e3:f6:96:d9:bc:30:34:29:14:0d:2d:a1:
         01:94:a7:51:5c:57:15:d7:d5:1f:95:cb:8c:19:e1:91:96:bf:
         53:19:ea:f0:bb:76:1c:06:00:a9:90:76:08:8d:f1:8d:3d:b1:
         d8:7f:6b:e4:7b:7d:87:a5:c0:34:2a:45:9c:2f:55:6a:bb:c8:
         ab:45:06:0f:a6:fd:e1:f8:a6:55:4f:70:e3:f3:7f:c5:6d:56:
         fd:61:c1:92:9c:10:d7:5f:0f:4c:f0:ec:76:89:3a:ee:93:cf:
         f5:4e:df:07:b1:a1:17:92:87:d0:5b:e1:2c:50:ce:b0:11:74:
         f5:db:f3:93:8b:10:85:18:af:de:4d:e7:c5:cb:7c:4a:9b:2b:
         3a:d4:94:1a:82:e5:30:e0:0c:43:14:47:f3:07:81:d6:84:19:
         48:76:06:a2:13:b4:e2:dd:70:ee:81:14:9a:64:e1:e1:ce:0f:
         10:11:e8:c2:e2:86:68:29:e9:90:ef:5b:6e:47:e0:c0:8e:f3:
         24:01:3d:d4:23:69:e0:85:00:4c:9b:3a:23:13:35:5d:17:0d:
         ea:c7:6c:b9:8b:d7:72:dc:c9:6e:23:99:1b:a8:53:43:83:45:
         f2:56:3d:9f:1d:c1:96:6f:5d:4d:14:a0:e2:39:b5:c9:0f:dc:
         7d:a2:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:39 2026 by rpki-client