Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File:                     W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier:          Arip/elacpuuzXRtfEfDMaBnT6Ee6RNHN9iljOlKo1o=
Subject key identifier:   DC:3D:A5:19:92:1A:78:A7:1C:9C:DC:B0:D8:97:A6:D5:37:21:9A:35
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer:       /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial:       019CAA58AA2A6C45C892C9B3BBDC038A7020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number:          0E8D
Signing time:             Sun 01 Mar 2026 17:01:03 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:03 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:03 +0000
Files and hashes:         1: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: QbYo92expT+H4v8/zAKmg2SiE4i2FD/cIylEvEWZfz0=)
                          2: ew4ZARbjdwXdrbDoqVd1qEolX-0.roa (hash: sQsSV+rzZKH9rDG5YPbrMoDEZndllCXJsFtPwY4l5I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:aa:2a:6c:45:c8:92:c9:b3:bb:dc:03:8a:70:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
        Validity
            Not Before: Mar  1 17:01:03 2026 GMT
            Not After : Mar  2 17:01:03 2026 GMT
        Subject: CN=dc3da519921a78a71c9cdcb0d897a6d537219a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a7:c3:bb:cd:9b:29:fa:87:6c:c4:53:26:bf:
                    2d:40:85:74:1d:41:90:d2:c1:ec:7b:f6:07:67:35:
                    db:7d:e4:3f:75:91:19:de:79:99:49:4d:33:93:5e:
                    e9:a0:86:2b:b6:c2:da:76:e8:f7:5c:c8:cc:67:4b:
                    61:9a:89:1e:7e:6f:69:9d:bd:89:c5:d6:11:14:e9:
                    dd:b6:d9:35:e6:6f:59:d3:b3:af:32:23:13:55:8b:
                    8f:e4:8c:f2:da:8a:f6:3d:4c:c1:71:dc:8b:17:e2:
                    bb:20:ab:b5:34:b8:ee:8f:b5:6d:f2:3b:6f:e4:2b:
                    d1:d3:55:9c:45:f4:e6:8f:2d:e4:80:30:4f:75:ae:
                    08:07:ea:66:00:f9:cc:48:09:a0:60:d7:cb:85:0a:
                    9a:f5:f4:5d:8b:15:53:38:60:ed:d4:2f:24:59:86:
                    20:2d:98:b9:97:6d:f4:aa:f2:17:cd:4f:88:77:a2:
                    7f:ad:ba:8d:fc:d9:5e:f2:2b:cc:1b:45:f5:f1:af:
                    2c:4a:f5:26:6b:81:bb:f2:14:3b:21:24:dc:f0:79:
                    ae:11:9d:9d:4e:e1:eb:78:11:a9:5e:58:0c:1c:58:
                    20:c5:14:7e:56:d0:7d:a5:c1:ba:bb:88:b1:82:7b:
                    65:46:a1:0c:b6:44:d7:5b:b1:a2:95:a9:b2:41:25:
                    00:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3D:A5:19:92:1A:78:A7:1C:9C:DC:B0:D8:97:A6:D5:37:21:9A:35
            X509v3 Authority Key Identifier:
                keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:20:e5:00:a8:6d:ce:f2:f1:94:1a:94:68:60:14:9a:4d:7a:
         9c:e2:32:94:d9:ce:ba:e8:4c:0d:bd:1b:36:64:5a:1d:c8:fb:
         f7:f9:d3:64:c3:9c:0a:3f:f8:4c:1b:5f:e3:63:a2:82:61:0e:
         b6:66:0a:37:1f:ac:64:82:49:7c:9c:e4:6e:5b:44:7e:9c:aa:
         52:14:1c:45:87:85:41:08:30:53:b9:d9:9a:38:6e:28:c2:c0:
         9e:d7:1a:f2:33:a4:a2:e2:e6:18:5c:af:0f:e2:1e:fa:4a:a4:
         2f:56:44:6e:21:2c:5a:ba:e1:53:8e:51:19:52:16:1f:52:81:
         26:ef:bb:c2:9d:ea:67:96:ee:a1:13:eb:1e:8b:f2:b9:b9:62:
         3f:8d:52:d7:b0:7e:ec:ed:b8:29:8c:08:75:05:21:04:a9:47:
         04:5c:b1:0f:4b:95:c4:34:13:05:f4:2c:28:2c:92:36:53:d5:
         72:02:e6:f8:88:0b:3e:ca:6f:a1:4a:d2:5f:dc:19:a4:f7:39:
         9c:4d:ab:04:c3:32:79:7d:96:8f:c3:ff:d1:fa:c5:b1:2e:90:
         af:1f:aa:7c:6b:37:16:ef:92:bf:a8:e4:ce:43:24:e9:52:dd:
         5a:da:a9:11:82:5a:5c:0d:d3:67:50:ee:4e:9e:2d:cb:78:1f:
         ad:76:ee:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:35 2026 by rpki-client