Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
File:                     WVS2GD5Fl0jInuVDG48x3mkq47c.mft (raw, json)
Hash identifier:          Xd7A7KGD5sj7G9odIRm3SAZv66zC6GHCv+QrexHYF/8=
Subject key identifier:   C4:24:D7:B1:81:D6:71:68:E0:FA:2F:13:8A:07:27:4E:CB:DB:44:B3
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Certificate issuer:       /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial:       019CAE35DD279A4E5BF42163D60A4A4790A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
Manifest number:          0327
Signing time:             Mon 02 Mar 2026 11:01:31 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:31 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:31 +0000
Files and hashes:         1: 0zTnu3eetG80x2gMRoOlaoyi1XU.roa (hash: JB6ymCBpp5g40s9Jq193pLVDWp3PsCGkFMNv91GH2CU=)
                          2: 3zzsb1jQ_lvXG-VEnpZCp86b5j8.roa (hash: LiKv+aa3BFXXs2ma47Vq9z++KB7KeUjRWOrIp2T9EgY=)
                          3: 8UKAERrBYmJnT6c7KmOWpnP03AU.roa (hash: RSk1BA4bvSXH8hjE9Jc578pan9A3SzSNjGvKDRIsMTI=)
                          4: I9s0CuAsSv9jjGBuidBaFKRxG3E.roa (hash: +S81j8HPK5cUpwT0sL9F/IE0uD5isO0a17oFhAA521M=)
                          5: ITlvHJTabQxrwYN7APUVh9jQlL4.roa (hash: K1JUQry9xi3Jfbc+E8pcHXHacpTFbHE9SecisGZYRcI=)
                          6: L7TLFBXL4z1WD9xSuh_8mjs8pNA.roa (hash: /44RMLWxsefoSSby5FAIrP2+PlWLCEJGS/8SHUKD1gQ=)
                          7: P_jLMFxjrLHZpuJwNRHVIIVL1uE.roa (hash: xhvm+OP2tRXnMLchMgxOuMaH+QA4LsMG9VYW7yCNe1M=)
                          8: RF1SfGcG1N5bLpX0hcp041AmWfU.roa (hash: s1kWCgAQUp+QoFax5vV8exMTSj2ofeEGJck0ysWTXXU=)
                          9: V1Zt7dOkRQJN8fVzbXfX6mLnU_Y.roa (hash: x7DcWnCYkgI3fchvUXufEb7jxl82DTdbTgzjrV24NZA=)
                          10: V_oMMTgFoWuuY2pFJTCd8RBDqAU.roa (hash: 6++Fc1z5+O8bljyaPUkjtqhqNBYss1M9D2DcO9unmBo=)
                          11: WVS2GD5Fl0jInuVDG48x3mkq47c.crl (hash: Z4u9YEupIOC+yEvP17IUPBQpdlSwl+l1BDvWw/sKuqA=)
                          12: ZmdXwtXBsnD2eyISB1nt0uyRdc4.roa (hash: uFKND0fVT6e97x91HY39nkCJBf2t0BI+jc6CgQmrdSg=)
                          13: hNMQhsjYM6Uq0dSSqIKPHdkys8Y.roa (hash: LTzNdEe/1x0DanrXSog92pL9Bszed1eMmLw8IlaTktM=)
                          14: kMWSysbBsMqlXuTaQ6EgsY6hfxg.roa (hash: 2RHp0NzQ4Xm2ijusQnNDw/6Xw7WkgJBLq25UTMY/YTc=)
                          15: kZtotJGtittx67Xw9ogTJ6-0m_4.roa (hash: 4wTVFZNFiq62fEFOVQHFZlHy0vYQwGfzuXSPeTT7CvI=)
                          16: pLaNYArbIS0rafOBL7h0fXIe6CM.roa (hash: zf52GsTjQldTWK0nhHsTnNM6ABPaj1zGS4hFUqV1OmQ=)
                          17: pfyric5h7xeVQp0AeOxHEf7JqH4.roa (hash: RKrodjdWZ0LDd0kdOTep6N8Rj5HhfxrE1euasP4BTSU=)
                          18: t76vUkxnTyB0mdkK33aiYE36KdM.roa (hash: o3rv2n3beg9k6cYokwM82dkugQ4adErtxUWGMAX6m7w=)
                          19: t8niaCudsUklWmI60ErEEk9qVaY.roa (hash: 9AT4+zyzuGSGoAFcdQAqXDdfcjjYBcKBFUicQGTapwg=)
                          20: yXx8FHPUzNya9PKV0tCpDdaAx2g.roa (hash: 02pPJkqD1/DFS/uNSc/w/zq7wx7K7q0bTvkg6S2hVqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:dd:27:9a:4e:5b:f4:21:63:d6:0a:4a:47:90:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
        Validity
            Not Before: Mar  2 11:01:31 2026 GMT
            Not After : Mar  3 11:01:31 2026 GMT
        Subject: CN=c424d7b181d67168e0fa2f138a07274ecbdb44b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:fc:e7:5f:30:00:69:1f:ce:33:e5:f3:40:
                    61:1f:82:7a:b6:0f:1a:6a:d7:8f:43:57:b5:42:5a:
                    d7:ee:bd:34:16:ce:d9:1f:09:c1:19:50:7d:80:91:
                    73:1d:48:42:7f:38:4c:e8:84:60:9f:d7:e0:26:d4:
                    91:1a:7f:50:f1:9a:c1:b1:b2:57:2b:82:f8:9a:78:
                    ec:8f:57:26:e4:fb:e1:33:e7:83:03:f3:52:61:5b:
                    7c:d8:59:86:0b:24:71:ee:d5:1d:67:46:5c:3f:b6:
                    7d:4f:45:75:d4:b0:97:57:fe:8c:62:79:94:d7:d6:
                    9f:39:e2:f3:12:a4:87:af:b8:15:5f:dc:05:fb:84:
                    92:e5:b5:0e:82:a1:05:b5:50:89:db:05:ff:41:52:
                    95:a0:a4:4b:f7:39:54:7b:e6:24:ce:fe:1f:35:20:
                    69:15:a4:a8:be:ae:b7:f3:8c:fa:c1:7f:15:b0:8e:
                    80:45:4e:c3:92:65:c8:40:1f:98:c7:7d:ec:21:29:
                    7d:85:41:e3:8a:41:7d:8d:ca:d8:43:78:ac:49:f2:
                    0b:47:94:bc:47:32:63:13:15:8a:a3:48:05:d5:dd:
                    23:c1:b8:2d:8f:19:18:54:26:9a:7a:df:a2:4f:f9:
                    33:f9:77:eb:3f:0e:f1:07:00:a7:b2:9c:93:65:36:
                    46:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:24:D7:B1:81:D6:71:68:E0:FA:2F:13:8A:07:27:4E:CB:DB:44:B3
            X509v3 Authority Key Identifier:
                keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:78:1c:0e:0b:1d:70:6b:ac:73:44:f0:bd:bd:0a:e2:ab:80:
         44:51:35:80:34:56:b1:60:b6:4c:f5:db:f5:d1:e7:d0:77:1f:
         af:47:29:bb:92:00:8a:6e:21:0a:36:11:62:f0:1f:81:08:08:
         0d:4a:b2:50:0e:a1:d4:09:94:5f:6b:61:da:d2:79:ac:b5:0c:
         de:7f:c4:13:2b:a1:2b:65:28:2e:32:f4:49:c4:c0:5e:76:3e:
         6b:2b:b5:b1:c8:db:1b:ae:7d:39:4d:9c:c6:12:76:f5:e1:4a:
         bd:8d:ef:02:f0:8b:92:27:dd:4a:e1:b4:c6:d7:df:ea:9b:0c:
         5d:5c:f5:71:22:0b:6f:05:a8:59:82:da:d2:99:e8:a5:91:eb:
         5f:84:4b:02:4d:0c:24:b7:c8:1b:e2:be:34:53:c1:b2:48:08:
         7a:fe:a7:e3:ed:73:68:c1:9c:32:29:87:75:19:39:4e:e5:d6:
         7e:56:b4:50:e2:0d:5f:2a:6d:59:f4:2d:e3:a3:ac:a9:0c:dd:
         94:e4:d9:27:b6:5b:be:c7:ce:41:21:11:48:03:03:ea:d1:d1:
         19:21:f3:6d:9b:35:17:67:cb:71:43:b8:94:69:a8:ab:b4:6c:
         ce:69:c6:eb:f9:1d:4b:86:fe:6c:2a:4d:15:91:c1:a5:6a:42:
         af:06:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:47 2026 by rpki-client