Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File:                     WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier:          5RAzBh7zyWvbuVY5OyrknyeWUXEMIUxiDh/uGDjIKCU=
Subject key identifier:   E5:63:2B:6A:2F:BE:12:64:97:B0:64:93:A8:9A:B7:F6:FF:CD:D0:5C
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer:       /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial:       019CAA58477680717220393721627D77B727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number:          10D4
Signing time:             Sun 01 Mar 2026 17:00:38 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:38 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:38 +0000
Files and hashes:         1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: x02jalEAoH/sG5wJ9H/V4ydLL1PMxAp4J+gpmpK8MhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:47:76:80:71:72:20:39:37:21:62:7d:77:b7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
        Validity
            Not Before: Mar  1 17:00:38 2026 GMT
            Not After : Mar  2 17:00:38 2026 GMT
        Subject: CN=e5632b6a2fbe126497b06493a89ab7f6ffcdd05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1f:1c:c0:d9:37:81:91:4b:a7:d5:ab:36:c8:
                    41:6d:c9:f6:cc:0e:23:c7:a2:3f:59:65:0f:22:21:
                    ef:a5:64:f4:28:10:ee:03:02:10:b8:d0:e3:4f:cc:
                    14:46:35:a2:ee:1e:77:86:bf:4e:c4:05:77:d3:0a:
                    26:7a:bf:97:93:85:53:2f:5c:15:65:a8:23:4a:08:
                    8e:8f:96:26:00:32:31:83:9f:79:c9:55:6c:19:7a:
                    28:48:53:a7:27:65:c6:2d:9f:38:9e:eb:60:47:63:
                    f0:72:68:f1:55:fb:9b:de:3d:c9:4a:d5:61:3f:80:
                    0c:da:ee:c5:57:0c:0f:f5:af:23:f8:ff:2f:2c:b3:
                    0f:28:95:2f:b6:e1:18:eb:c2:0a:28:86:47:ef:54:
                    e0:51:3d:31:e4:52:e8:0a:fc:97:b0:5b:27:12:f0:
                    aa:96:00:22:50:31:a9:fb:cb:de:4f:46:19:03:d4:
                    37:5a:05:fb:8a:d8:e0:53:eb:2b:75:b8:29:98:f3:
                    77:2e:6f:f6:14:7f:24:c0:bc:d7:5e:66:fa:50:50:
                    fa:03:25:87:cf:86:6c:f2:5a:25:0e:04:5b:02:75:
                    7e:bf:20:04:a9:93:8a:57:bc:e5:59:be:07:56:de:
                    ce:2d:38:72:9e:44:31:b4:53:f9:bd:6a:12:7b:29:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:63:2B:6A:2F:BE:12:64:97:B0:64:93:A8:9A:B7:F6:FF:CD:D0:5C
            X509v3 Authority Key Identifier:
                keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f5:d4:0b:38:6e:e3:ee:56:f9:fb:7f:a7:40:68:e4:25:eb:
         73:41:bb:d5:bf:17:92:b3:06:3e:ca:ac:94:55:19:5b:4b:70:
         25:78:6b:19:f3:6f:5d:ef:20:56:df:b2:c2:a5:b6:0b:c2:3b:
         ed:c9:78:29:06:6f:d7:de:f7:af:60:f3:db:f7:f1:b5:18:f2:
         c3:f8:ae:bb:3a:49:2f:75:f3:98:b7:17:5f:ba:a3:8f:eb:58:
         bc:42:52:93:ed:5b:98:c4:b2:00:46:5e:1e:30:99:7a:1a:d0:
         b3:76:eb:3d:6a:43:25:5e:4b:11:6e:42:88:45:52:fa:ba:ac:
         ff:48:89:e4:c7:b6:55:21:6c:95:6d:24:90:6c:90:05:46:d8:
         19:6e:29:ab:0d:1e:71:b4:54:29:4b:a3:28:79:d1:71:f0:52:
         44:c6:fc:73:48:56:1f:eb:fa:31:04:ec:f4:66:19:f1:ab:97:
         a2:b7:d3:5f:85:e4:c0:7a:2e:1e:f1:60:16:2a:c1:8a:d7:3d:
         42:ef:e8:e7:b9:d5:f3:a6:e5:8e:80:9a:15:e0:07:42:9e:27:
         b1:2c:56:d3:df:c2:18:0e:47:0d:e0:29:9a:f7:5b:48:2e:53:
         35:99:5d:25:86:b6:2c:ff:be:74:b0:e5:18:5c:a3:a7:2a:9e:
         20:d8:a4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:55:54 2026 by rpki-client