Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File:                     Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier:          r5GN8t473IHhRa6lBg+p/kdro1fo9IXmr9JEz7hR6Gw=
Subject key identifier:   D7:E8:D0:91:C2:FE:C6:B8:CA:54:F6:4F:93:2B:BD:83:60:31:95:0E
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer:       /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial:       019CAEA356414365784204E331389D64601C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number:          05BD
Signing time:             Mon 02 Mar 2026 13:01:05 +0000
Manifest this update:     Mon 02 Mar 2026 13:01:05 +0000
Manifest next update:     Tue 03 Mar 2026 13:01:05 +0000
Files and hashes:         1: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: 4k7ypnhlF9bJMW9F2kYcb2fpxSWCH4nOWhg4VEKm0fM=)
                          2: m0yOtQ4zzaWwbkLA2mct7O9eAl8.roa (hash: TTt4vBq0ts1GuSUcOF2cVVxmQbeDaFKzFBYDNYxTze8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a3:56:41:43:65:78:42:04:e3:31:38:9d:64:60:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
        Validity
            Not Before: Mar  2 13:01:05 2026 GMT
            Not After : Mar  3 13:01:05 2026 GMT
        Subject: CN=d7e8d091c2fec6b8ca54f64f932bbd836031950e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:7c:f1:de:6f:f8:b6:cf:77:46:60:2e:83:
                    5b:63:1d:02:63:fc:a8:76:ce:13:b6:b4:f8:f2:7b:
                    eb:1c:cd:25:04:43:ed:b5:7d:b8:37:f1:c7:37:a4:
                    4a:02:c9:b2:2f:7b:03:71:e7:99:7e:14:11:d8:b1:
                    49:b7:b5:2e:96:5a:d1:95:f2:78:a1:fd:8e:53:eb:
                    96:30:25:b2:83:30:99:01:3b:62:ff:1e:58:13:f5:
                    db:2b:29:e0:13:79:3d:0b:4c:05:75:d8:8d:07:a8:
                    8c:b8:70:55:df:04:74:6e:3e:c5:86:60:4d:dd:2b:
                    d0:de:5a:0a:94:41:c0:fb:14:3b:8f:51:aa:7f:d8:
                    74:31:e4:31:66:c1:c5:4d:7a:4f:19:a0:8f:26:9a:
                    8a:2e:8e:bc:36:f3:ba:16:65:59:9d:f0:b5:ab:77:
                    dd:3d:a9:a1:fe:84:fd:d9:86:e5:e8:64:a4:ef:9b:
                    e3:fa:75:7d:a6:b0:bf:71:28:ab:87:81:a3:72:3f:
                    7f:63:c5:8e:b0:d5:fe:17:69:a2:bf:9d:a6:40:c9:
                    de:67:50:1d:b7:27:0d:01:76:6e:c7:92:65:78:d8:
                    90:25:04:27:b8:2b:73:f3:c6:f1:9f:90:24:2f:1a:
                    08:a5:71:df:f3:f2:cf:23:d4:b3:44:7c:fe:18:8b:
                    a9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E8:D0:91:C2:FE:C6:B8:CA:54:F6:4F:93:2B:BD:83:60:31:95:0E
            X509v3 Authority Key Identifier:
                keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:35:10:03:01:42:a9:c2:24:ac:fe:4e:26:7e:3a:68:dc:ce:
         07:a4:2b:48:d5:2a:86:89:a1:dd:31:c1:f2:dd:72:24:16:bf:
         8c:28:0d:69:26:3e:63:3c:34:8d:df:af:cf:47:39:c3:c4:1d:
         82:f0:1d:d5:e8:5e:36:ab:bc:b8:30:30:f1:2d:44:92:24:a6:
         18:4c:a1:d0:08:eb:21:56:4e:ef:d6:4e:4c:e8:e3:91:86:7f:
         17:00:2a:d5:e0:73:e7:7e:8b:5a:05:a8:88:07:dc:48:6c:fe:
         4d:c3:84:07:fb:3d:06:01:78:47:2d:e3:da:18:d8:89:c6:0d:
         66:0b:b9:c0:17:88:86:94:45:48:9e:67:65:72:10:bd:65:d4:
         1e:f5:6c:d8:88:9f:f0:35:4c:d9:49:3d:08:82:16:4a:7d:cf:
         85:1d:ff:63:26:90:65:38:66:2c:21:30:62:f7:d4:df:c2:13:
         9a:8b:52:23:3b:15:ae:4a:43:a3:16:3b:8b:96:d9:aa:a6:9f:
         bc:43:c5:ee:c3:eb:03:51:a3:ca:30:8f:36:f4:75:f6:01:b1:
         1e:dd:59:bb:cb:36:c9:28:6c:66:be:3b:3c:ed:18:1a:7f:0f:
         8e:f0:2e:cb:f1:57:27:ba:db:36:71:f3:31:80:bf:8f:57:0b:
         58:a3:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:51 2026 by rpki-client