Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
File:                     Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft (raw, json)
Hash identifier:          eIERQltAIXaCbTJZfwKOBIhQuys32DVHUxPcdt3E12s=
Subject key identifier:   E1:BD:2A:45:E1:78:D6:80:FA:48:15:05:17:AB:93:11:B3:A7:75:4B
Authority key identifier: 5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28
Certificate issuer:       /CN=5afde8d9ea6431808c20401d2875c477e4dc5928
Certificate serial:       019CAD90353CE6095E5D94247F1707460B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
Manifest number:          5F
Signing time:             Mon 02 Mar 2026 08:00:35 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:35 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:35 +0000
Files and hashes:         1: Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl (hash: QY+d7vtvB9BK+QHvS+t4zuSEloCWJ8XSExWsB9IzkyQ=)
                          2: t1-vFkCnh7mi57Y9qLg057uqJ5E.roa (hash: RWPEiX8Zv6h5QYL5UZv+eOJ31e8i3TXjuYrity9H4xM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:35:3c:e6:09:5e:5d:94:24:7f:17:07:46:0b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afde8d9ea6431808c20401d2875c477e4dc5928
        Validity
            Not Before: Mar  2 08:00:35 2026 GMT
            Not After : Mar  3 08:00:35 2026 GMT
        Subject: CN=e1bd2a45e178d680fa48150517ab9311b3a7754b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b7:ab:75:e5:b6:45:09:cd:86:de:70:ab:e0:
                    23:7a:84:74:9b:2c:b5:9c:4c:59:b9:ff:72:20:b1:
                    58:d8:34:69:94:d5:2a:b5:5f:15:5a:60:4d:80:06:
                    ad:e7:a4:3c:1b:6f:83:df:b0:09:84:ad:99:cc:bd:
                    08:59:1d:f4:56:04:ad:34:d1:da:d9:1c:ee:ac:30:
                    65:b9:23:24:d3:36:e4:21:40:e4:a4:6c:cf:86:37:
                    4e:e2:b6:6a:5b:3f:b8:90:d8:40:15:6b:46:a3:53:
                    35:72:b1:a5:aa:82:b0:29:12:d6:22:9d:d8:86:77:
                    bc:69:ee:68:40:91:95:2b:3a:64:d0:35:5c:a0:71:
                    15:82:52:e7:bf:3a:5d:44:3a:91:9f:8b:44:e1:02:
                    4e:37:60:c1:6b:7a:d9:5c:d1:d5:ca:c1:67:63:be:
                    08:a4:8d:58:a5:8a:59:47:0c:76:fe:34:1b:68:f8:
                    e5:f8:95:86:48:59:be:dc:1a:8f:3a:a1:d5:89:61:
                    b2:20:87:1c:0d:e4:5f:8b:c4:bd:f0:4f:74:a3:1a:
                    72:f3:17:cd:e0:83:a6:3b:0c:4d:d7:8b:ab:00:62:
                    fe:ba:4f:dc:9b:98:4e:e4:dc:54:81:6c:3b:2b:7e:
                    13:26:c4:eb:49:be:44:9a:63:98:8f:2c:d2:5d:18:
                    53:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BD:2A:45:E1:78:D6:80:FA:48:15:05:17:AB:93:11:B3:A7:75:4B
            X509v3 Authority Key Identifier:
                keyid:5A:FD:E8:D9:EA:64:31:80:8C:20:40:1D:28:75:C4:77:E4:DC:59:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv3o2epkMYCMIEAdKHXEd-TcWSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/434f81-b98a-4fc2-bc7e-484cc528ee04/1/Wv3o2epkMYCMIEAdKHXEd-TcWSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:38:0f:35:08:d1:5d:e5:81:53:94:54:dc:dd:89:83:66:70:
         c9:0b:d5:3b:55:63:98:bc:f8:b0:24:eb:18:23:8f:38:7b:2e:
         1c:91:82:9b:12:24:d3:97:b4:a9:a0:f6:3e:08:d5:2c:be:22:
         76:21:9a:a9:e1:5d:7c:79:f1:5c:da:8a:71:14:1c:da:f9:ee:
         bd:63:95:83:ef:ec:14:c5:d6:67:0a:43:2a:e1:69:1b:14:7a:
         c5:a0:8a:7e:28:bf:24:08:2d:5d:6b:56:74:a4:ff:8b:08:44:
         fb:67:84:b8:7a:d4:ea:e2:c2:11:8f:e1:7d:30:ac:92:62:8f:
         3f:27:30:3c:5f:c8:ae:d5:fc:ed:c8:6f:26:c3:00:1a:70:90:
         23:a3:d3:cf:c2:fe:10:32:b0:83:41:5c:17:38:b4:8b:d2:4f:
         d4:a2:9f:2d:0f:63:c8:7f:8d:89:eb:cf:b5:b7:97:29:e3:8c:
         8c:16:c3:55:6d:a6:17:d9:61:0a:43:02:82:2c:ef:85:14:25:
         46:5a:cc:d6:f7:3f:10:45:a9:16:24:d1:c7:1b:91:df:bb:7e:
         af:78:93:06:c7:15:80:0d:f9:86:e6:a5:95:fb:3e:b7:d4:98:
         51:9f:69:86:35:cd:e0:ea:21:25:b7:ef:70:02:86:d6:15:09:
         52:d7:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:18:57 2026 by rpki-client