Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File:                     W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier:          6Dn9tNBSszbpAihhZlCrVF9M/hNpsihz3Rq7Cn/SSL0=
Subject key identifier:   6A:36:67:A0:0D:99:C6:4F:FC:9E:25:4B:72:8E:9B:F8:5D:93:8A:21
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer:       /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial:       019CB023F2EA01D7028D66576163818027ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number:          02FC
Signing time:             Mon 02 Mar 2026 20:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 20:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 20:01:11 +0000
Files and hashes:         1: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: 7gqzRhE9LrNE28+4NpQehjoKeQMrilE4+qxwr+iew7M=)
                          2: fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa (hash: hJyQkOhG2dynFkXSSov+GNMjBt8nhvuX9AxIVC3sXH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:23:f2:ea:01:d7:02:8d:66:57:61:63:81:80:27:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
        Validity
            Not Before: Mar  2 20:01:11 2026 GMT
            Not After : Mar  3 20:01:11 2026 GMT
        Subject: CN=6a3667a00d99c64ffc9e254b728e9bf85d938a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a9:b4:60:c7:40:3a:69:ab:95:52:3b:27:b4:
                    21:bd:0c:81:ee:58:21:97:e0:70:70:57:78:74:96:
                    f4:f6:88:92:a6:43:0e:18:28:60:0c:c6:f2:a0:21:
                    ee:3d:d1:a1:5f:41:d2:1e:73:a5:bb:18:1c:55:59:
                    84:8f:08:b1:71:08:94:38:db:ff:ac:59:b3:fb:b7:
                    f7:78:2b:84:fa:38:a6:e7:9c:f1:eb:c5:c4:8e:76:
                    13:f7:22:1f:3d:9a:a8:d5:78:94:f0:f1:0a:20:71:
                    71:ac:18:42:fb:30:7e:8a:06:2a:0c:eb:ad:20:e8:
                    50:2a:17:0b:5b:c4:89:7c:14:03:8a:98:91:5f:b0:
                    b5:95:04:fe:7f:27:15:0d:83:08:25:f1:ea:f5:57:
                    9d:68:af:2e:61:38:17:65:e7:f9:42:e9:53:0f:10:
                    c0:13:42:4e:2c:1c:3a:0c:a7:01:9e:9d:02:a9:fc:
                    76:e7:05:06:21:1f:8c:1c:e1:7f:39:59:4f:d9:9f:
                    e7:b3:b4:0f:90:2d:c6:22:53:4a:fe:56:1a:a7:6c:
                    f9:e3:39:5d:24:32:7f:32:21:a3:c9:62:07:27:f5:
                    53:1d:6c:5d:d0:2c:06:30:6d:38:5e:a3:0e:39:07:
                    ad:00:3e:5e:76:33:8b:a3:cf:09:0a:98:80:9f:f1:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:36:67:A0:0D:99:C6:4F:FC:9E:25:4B:72:8E:9B:F8:5D:93:8A:21
            X509v3 Authority Key Identifier:
                keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a4:ae:20:55:58:1f:1d:7d:44:b0:25:5d:c3:66:0c:44:ce:
         8a:90:a1:b2:b2:1a:45:da:79:e3:03:2e:06:9c:a7:e6:4f:73:
         32:1a:cc:80:2a:5a:eb:55:51:77:d4:92:f2:89:2a:62:84:6d:
         dc:c3:f7:0d:c5:97:96:96:74:e2:16:6b:2d:4c:d8:ef:93:ba:
         e2:33:59:08:bc:61:77:2b:41:c7:31:8d:be:81:33:06:2a:de:
         60:54:94:8a:07:02:6e:1f:99:be:b0:41:60:f7:67:ff:f7:65:
         05:1b:24:5e:16:e4:16:03:28:de:c3:ef:24:07:5e:d3:49:56:
         cd:9d:5c:9a:88:cf:f3:cc:fd:65:36:ef:ad:8d:07:9d:67:b4:
         d0:d7:4a:ba:3d:79:ac:24:5f:b1:9c:cd:e5:0b:43:9b:1b:b5:
         a7:bf:17:ef:bb:68:72:42:25:52:f9:75:93:0c:e2:b0:bb:75:
         c8:82:bd:ca:66:a0:88:14:8d:20:86:86:7f:5b:f9:70:b2:58:
         8c:28:2f:40:33:20:51:a4:75:93:c9:3b:41:ed:14:d7:cb:08:
         b8:39:9d:10:b2:01:2a:8c:5c:3e:e5:11:90:cf:a4:04:3a:9a:
         a2:04:f8:23:67:da:46:67:b4:84:33:89:da:fb:e8:02:8a:ff:
         71:cb:83:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:47:18 2026 by rpki-client