Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File:                     WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier:          nZLlwKThAs8U3UWDqweN0oIDFj4gZnQ42qUDuJxuOPM=
Subject key identifier:   F8:E9:57:11:97:F7:52:7C:13:71:C5:76:18:59:26:E3:85:77:E9:46
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       019CABD9A08C8996779753C81E1BA3CC1A20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number:          157D
Signing time:             Mon 02 Mar 2026 00:01:32 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:32 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:32 +0000
Files and hashes:         1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
                          2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
                          3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
                          4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
                          5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
                          6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
                          7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
                          8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: 7RpK2kyxwsHjdy15Pdt8nuhYhm14jnolTvlyh1Irpsc=)
                          9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
                          10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
                          11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
                          12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
                          13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:a0:8c:89:96:77:97:53:c8:1e:1b:a3:cc:1a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Mar  2 00:01:32 2026 GMT
            Not After : Mar  3 00:01:32 2026 GMT
        Subject: CN=f8e9571197f7527c1371c576185926e38577e946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a2:33:22:1e:69:47:9f:55:7b:d7:85:6e:62:
                    1f:a9:0f:f0:89:5d:69:d6:27:59:a3:29:1e:29:41:
                    e8:94:6d:c8:f2:0b:c4:bf:40:1d:6a:db:d9:d0:f1:
                    ea:f4:c8:b2:24:a4:0c:fc:35:94:fa:3e:7a:8a:5b:
                    9a:c5:07:5a:be:1c:f4:6a:fd:ca:4e:3b:ce:6c:e7:
                    9a:21:d8:69:27:0f:6f:40:fe:22:92:73:ef:aa:11:
                    59:7e:44:a4:22:dd:91:33:4f:51:b9:db:09:b3:e2:
                    64:36:9c:57:17:d2:bf:c9:cc:96:ec:d4:48:be:75:
                    ef:6f:8c:90:9c:22:5b:71:44:46:ab:a1:94:ae:5a:
                    39:77:4c:20:b2:92:79:5c:f0:31:4b:d4:df:07:77:
                    91:7f:1c:90:6b:f4:21:22:da:04:cf:56:00:82:ea:
                    97:4a:12:64:64:4a:b2:6e:f5:ef:a0:a1:ba:aa:15:
                    27:46:b2:9c:f3:69:3d:a5:82:3e:79:8e:95:51:5f:
                    63:ea:52:ea:52:00:c3:c4:a6:99:3d:99:8f:6d:71:
                    c0:17:6b:50:df:34:5a:4b:cc:50:09:a5:ab:4a:48:
                    d1:7c:14:6f:04:f2:d6:41:8a:cf:c3:98:8f:40:46:
                    ff:45:d0:ff:88:6a:ba:2e:a9:a5:b1:2e:00:35:b7:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E9:57:11:97:F7:52:7C:13:71:C5:76:18:59:26:E3:85:77:E9:46
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:73:d5:c6:7b:d0:8b:b6:d5:4c:00:be:81:b7:0d:19:c9:31:
         fe:07:c5:9c:3c:d6:2b:71:5f:2b:c7:b0:fe:88:91:ab:b8:ec:
         1c:2d:d0:0f:72:ee:42:e8:04:07:f9:3e:54:70:60:36:a3:6b:
         e8:f4:91:60:73:ed:04:98:6a:8b:87:79:04:ab:92:f0:9b:71:
         e5:20:9f:8e:0b:96:61:6e:46:f5:a1:58:67:6a:da:45:9b:7e:
         5e:69:62:98:33:09:1e:75:ed:11:79:18:81:38:4a:2b:00:4e:
         64:9a:f2:1f:09:19:45:fc:dc:47:44:60:fb:c0:74:de:6f:03:
         a6:e0:e7:c3:90:82:c1:64:e5:9f:37:6d:4e:f5:0b:59:e9:9f:
         2f:9c:39:9d:53:40:97:42:ea:80:63:eb:f5:04:f8:63:97:e8:
         7f:6c:5f:0b:6d:a1:f4:31:19:31:40:be:92:6f:5e:53:c0:8a:
         81:ca:65:b5:8d:57:0f:db:2c:16:06:d3:dc:dd:e9:66:85:69:
         af:e7:c7:5f:03:08:29:03:77:de:1a:7b:9f:ab:d2:61:31:62:
         65:3a:e2:52:07:00:50:35:59:f3:5e:db:41:ff:9b:40:84:0b:
         52:ce:c2:49:39:a4:92:b7:20:e6:ba:47:4c:5c:08:d4:4d:6a:
         cd:2c:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:31 2026 by rpki-client