Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File:                     W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier:          6pV15MD4Cc+SnvgnDgTC6pnBQAsMu/96YjSb5UTFfRs=
Subject key identifier:   B1:C3:05:CA:52:F0:4D:F4:14:16:B4:F2:06:2F:7E:B4:0D:6F:A4:B1
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer:       /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial:       019DA37911A9720785D3536E93B7D279DA65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number:          037A
Signing time:             Sun 19 Apr 2026 02:01:53 +0000
Manifest this update:     Sun 19 Apr 2026 02:01:53 +0000
Manifest next update:     Mon 20 Apr 2026 02:01:53 +0000
Files and hashes:         1: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: FxgdaGpt1MnOpN2zID8TuC75n51CGY9yHdRFG17rvRA=)
                          2: fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa (hash: hJyQkOhG2dynFkXSSov+GNMjBt8nhvuX9AxIVC3sXH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:79:11:a9:72:07:85:d3:53:6e:93:b7:d2:79:da:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
        Validity
            Not Before: Apr 19 02:01:53 2026 GMT
            Not After : Apr 20 02:01:53 2026 GMT
        Subject: CN=b1c305ca52f04df41416b4f2062f7eb40d6fa4b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:a4:14:b5:24:af:d5:ff:ec:23:df:87:85:
                    82:f1:0f:b2:2c:d3:d7:a4:d3:2b:bf:b6:4d:46:8d:
                    a4:36:75:88:0c:a0:a1:ff:63:a6:06:2d:ad:e0:4c:
                    cf:c7:37:b3:68:af:c7:e9:4d:7e:69:7f:3c:63:f9:
                    5c:e4:2d:19:41:9e:5e:e3:f0:d4:b0:d0:13:eb:11:
                    fe:63:f9:bd:c4:2f:c8:c8:13:8b:e2:fd:8b:d2:43:
                    f7:e1:ed:b9:dc:50:c6:d0:67:e5:44:6c:df:42:35:
                    6d:46:d4:a4:45:2f:98:43:3c:fd:08:57:43:0f:4c:
                    db:fb:be:8e:60:07:7d:80:53:d8:3a:6e:3f:3c:1f:
                    1c:df:f3:3f:de:cc:e6:c4:89:88:6f:bc:fb:05:71:
                    ad:e0:1e:e8:e6:84:a5:eb:a8:02:c5:04:52:4b:05:
                    43:a5:1f:12:52:64:ee:c6:ef:f4:bd:64:89:33:6a:
                    21:8e:74:73:ea:3e:73:66:20:e2:b1:3f:c8:c4:15:
                    9a:91:1d:f3:48:dd:33:eb:de:36:49:6a:f0:df:92:
                    20:9d:13:7c:eb:c3:33:8d:bc:06:db:60:7a:73:52:
                    71:cb:04:41:bf:53:07:f7:f2:70:b0:68:4f:bf:d8:
                    c5:d9:00:ed:d5:a3:e3:d3:45:cc:7e:79:07:55:0d:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C3:05:CA:52:F0:4D:F4:14:16:B4:F2:06:2F:7E:B4:0D:6F:A4:B1
            X509v3 Authority Key Identifier:
                keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:50:01:16:b2:99:a5:ed:a6:4c:d3:3a:38:3e:fd:3a:4f:
         2e:38:3a:bc:b4:03:94:a2:7d:24:fa:7b:5a:e5:55:a1:ba:81:
         9b:74:f4:a9:03:69:bf:a4:2d:eb:c3:ce:22:4d:e5:8b:89:f7:
         1f:a6:42:ec:fb:8f:cd:29:e9:49:71:b1:9a:6d:99:ba:dd:5e:
         ec:0d:3d:3d:55:f8:9c:92:e6:65:f5:4f:db:ee:f7:51:ae:b9:
         08:e2:eb:76:c2:0d:fc:98:bd:04:94:69:26:bd:30:a8:28:6e:
         f8:c3:69:4d:dd:c4:78:99:c9:75:12:ca:22:4f:2d:af:33:5c:
         88:f8:eb:d2:85:b8:4a:02:37:0e:4e:14:bd:d0:3a:f4:4b:f4:
         28:f5:80:e2:e3:4a:8f:ff:65:fe:53:b5:ad:f3:5c:d4:96:3e:
         6d:8e:f8:1b:df:35:9a:2a:93:08:35:3a:e6:06:77:60:e8:72:
         6c:26:36:8e:c7:3a:7e:bb:71:e2:06:bd:23:05:31:17:3a:14:
         f1:2b:96:92:7a:9a:e0:05:6b:ee:8e:4b:c7:d5:d6:4f:83:23:
         e1:86:b9:3b:f9:cb:38:46:9f:fa:0e:eb:4e:94:39:cc:19:e6:
         61:7d:48:06:95:2b:8f:86:36:c9:89:b6:d3:8d:53:c8:5e:6e:
         43:5d:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:28:15 2026 by rpki-client