Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File:                     WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier:          juGdDUI55SAU6EbgpmZHJDOs3ta29tIt1VKPMKOgQiM=
Subject key identifier:   4D:D3:FC:84:FE:3A:B7:FE:D5:D4:C4:7B:76:F1:9F:57:6D:B7:BC:EA
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer:       /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial:       019CABA201D5D93730321745EB802A0970B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number:          16FC
Signing time:             Sun 01 Mar 2026 23:00:46 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:46 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:46 +0000
Files and hashes:         1: JvdKR8w378wRcIgnyCDN8YQt0NY.roa (hash: yPYUw3ORIF3GkrD9VXNJ088VEVXOizVNl2vWPpByN18=)
                          2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: Q/xVi2Yvzv0qvC0gFOWCC1gIFDuJRjvqe6wH2okdWGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:01:d5:d9:37:30:32:17:45:eb:80:2a:09:70:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
        Validity
            Not Before: Mar  1 23:00:46 2026 GMT
            Not After : Mar  2 23:00:46 2026 GMT
        Subject: CN=4dd3fc84fe3ab7fed5d4c47b76f19f576db7bcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:75:42:8c:61:03:6f:8e:5d:2f:c2:8f:39:
                    dc:2c:c4:ef:34:f1:d3:18:6e:f3:94:e0:10:28:fb:
                    e8:31:43:0b:90:08:27:de:3c:40:5b:ba:86:69:a8:
                    b7:e8:14:45:48:8d:35:c2:07:b7:38:c3:22:1f:f6:
                    7d:5d:6e:8a:8f:51:69:9c:6d:3f:15:71:cb:78:8e:
                    b0:a9:b4:19:37:75:35:c8:a0:72:8b:ac:7e:82:ff:
                    ca:e6:cf:92:21:4c:43:79:d8:a2:43:0b:b3:29:0e:
                    63:72:f6:cc:8f:01:f3:df:c1:be:bb:80:22:56:c2:
                    e2:18:1e:55:74:b5:94:79:4f:54:c6:8e:09:fd:87:
                    84:29:d1:bc:a9:56:c7:60:50:9b:87:53:f3:70:68:
                    99:3b:ed:af:f3:6e:a0:df:7c:c8:44:82:3d:43:9e:
                    ac:95:c1:db:0c:76:26:16:77:e3:fd:e7:df:85:12:
                    9f:f7:37:3f:c5:19:46:b7:eb:71:d0:c0:95:c1:26:
                    fc:57:75:e7:c6:5e:26:aa:7c:a1:87:58:73:36:82:
                    7d:db:7e:56:a8:f2:a6:2b:16:8c:b2:97:46:93:1a:
                    36:3d:cd:d5:ea:10:f1:b7:db:5e:f4:92:d8:b2:48:
                    84:c3:21:3b:85:d2:96:74:aa:56:21:36:44:3c:11:
                    f6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:FC:84:FE:3A:B7:FE:D5:D4:C4:7B:76:F1:9F:57:6D:B7:BC:EA
            X509v3 Authority Key Identifier:
                keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:57:56:65:72:54:d3:32:2d:3e:38:00:f4:7b:bb:67:ff:d4:
         bd:0c:8c:98:2f:77:8e:2e:91:d6:89:b1:fd:a4:00:78:e7:81:
         f0:c8:da:93:8d:3d:a5:95:86:aa:17:af:e6:84:c7:7a:39:86:
         67:04:72:d1:14:0c:94:7b:d3:68:51:0d:c6:e9:cc:b0:ac:eb:
         21:af:54:93:2b:e4:b3:c9:6a:10:59:f5:c5:df:ae:db:c0:16:
         c5:0a:89:ae:10:73:00:84:bd:7e:18:53:c1:7a:00:1c:eb:94:
         12:a9:de:a8:5b:b6:37:4d:0e:01:79:72:da:6f:48:41:34:16:
         7c:37:75:ce:4c:a4:0c:70:c7:f3:32:46:54:da:98:c3:fa:16:
         1e:c6:56:1a:c6:49:21:0d:96:b3:73:e3:e1:e9:a6:c7:72:7f:
         e8:3e:b9:75:72:8b:7a:86:8b:f5:22:60:06:4d:f6:1a:26:92:
         d4:e1:7d:b7:12:1d:14:91:2e:3d:20:69:78:43:a7:9c:90:8e:
         0f:14:b4:43:72:a4:06:18:ae:78:a7:f5:0b:2f:0b:5d:ea:34:
         2c:07:a7:46:33:27:08:24:c7:1d:2c:8c:e9:8c:98:94:83:fa:
         79:00:26:6c:8b:1a:0a:4b:6e:22:85:f9:5e:af:d5:f7:ec:44:
         68:a6:3f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:44:09 2026 by rpki-client