Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File:                     WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier:          M/p+n6jFo7HgipG90DBYsqoG4Llv2F7FIONQ34IzsCE=
Subject key identifier:   9F:4B:44:19:80:F5:9A:11:B9:DC:47:57:84:4F:9C:3A:C1:58:67:A1
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer:       /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial:       019D97E1FA5E3C14277951EE263808D2298B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number:          0D39
Signing time:             Thu 16 Apr 2026 20:01:02 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:02 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:02 +0000
Files and hashes:         1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: sE5QszAWg6hM4epz/uzHJhgUWg73NyBwfsUaEypknzk=)
                          2: el19n5VFJI2Td0uzZZckW_YpTo0.roa (hash: DpjOrLRCltZRLAqBNQKYh5WLON/qWjFe342eyMeNeHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e1:fa:5e:3c:14:27:79:51:ee:26:38:08:d2:29:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
        Validity
            Not Before: Apr 16 20:01:02 2026 GMT
            Not After : Apr 17 20:01:02 2026 GMT
        Subject: CN=9f4b441980f59a11b9dc4757844f9c3ac15867a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b4:b1:27:e1:ee:9c:27:4d:67:2b:57:d9:4b:
                    81:0d:97:05:a8:de:b3:53:9d:cc:c4:84:95:b8:c3:
                    5a:97:95:67:bc:1b:41:c5:1c:fb:03:aa:bc:ec:ea:
                    91:4b:ca:12:42:83:2f:a0:d0:ef:df:46:e0:e5:72:
                    0f:fa:1c:e6:38:9e:76:87:91:87:2e:67:3a:a4:4e:
                    36:46:7c:f0:f3:4e:6e:a2:66:65:bd:6b:22:d7:79:
                    51:27:8b:29:b4:21:0c:f5:f1:78:04:0e:3a:58:ed:
                    3f:74:1c:bb:99:ef:9a:b4:8c:fb:4c:a6:2a:d8:76:
                    97:83:e5:44:23:53:8e:00:32:81:bc:d1:69:77:80:
                    af:69:9e:03:b5:c6:0f:38:08:f4:6f:b1:e3:02:a2:
                    2d:23:bb:98:c0:9e:50:f3:1d:d0:02:36:0c:f0:61:
                    33:7e:0a:85:de:98:d7:9a:cc:6a:a5:3b:97:89:2c:
                    da:97:17:d0:ef:6d:f9:93:c5:83:b7:c9:db:c0:71:
                    ee:70:0d:57:84:46:af:b5:72:8f:cb:ce:e8:d1:cd:
                    7b:0a:95:18:9d:00:69:e9:d5:7b:13:98:26:2a:16:
                    d6:af:19:1a:57:1c:35:b2:4a:56:25:06:36:c8:ba:
                    db:a3:5e:4c:54:a8:12:97:ee:74:e4:b4:b3:b8:71:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:4B:44:19:80:F5:9A:11:B9:DC:47:57:84:4F:9C:3A:C1:58:67:A1
            X509v3 Authority Key Identifier:
                keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:31:2b:29:ea:bd:b3:7b:85:df:06:b4:bc:ba:9e:19:08:93:
         79:76:b2:6f:17:a9:8e:70:93:30:f3:b9:d0:07:43:b3:94:0b:
         23:9c:41:99:96:30:86:06:5f:c0:d9:9f:59:47:ca:3a:3b:b7:
         9f:81:44:33:3b:36:97:98:20:40:3d:a2:c7:58:5d:af:b5:e8:
         a1:d6:ae:41:34:a5:27:98:a6:b3:5d:b0:50:82:da:52:e5:4a:
         c2:58:92:02:bc:43:b9:2e:ca:47:5e:52:18:cb:4e:ee:f1:a3:
         ad:76:8d:d8:89:9b:ad:f1:a0:d9:ea:78:ff:28:b9:db:e5:be:
         97:e4:9d:3d:0e:86:ea:68:bd:15:09:2e:9a:79:8a:22:85:94:
         36:f9:3d:e6:26:fe:da:28:88:7e:68:90:61:4d:26:c1:d9:de:
         49:bc:73:b2:e7:a6:f2:9c:25:33:85:3b:98:3b:d6:28:da:39:
         71:ca:fd:4c:4a:65:ba:5e:42:7e:1d:9c:96:a1:35:6c:70:66:
         6b:6c:58:3f:5f:a7:69:71:ac:8a:71:1f:f2:c4:e1:e5:b3:b7:
         4f:9f:98:e3:e9:57:25:f2:5e:8f:c5:8a:81:8e:97:9a:26:df:
         1d:6d:63:de:2d:a7:1f:e6:1e:8b:1f:82:87:79:50:50:88:94:
         cb:73:9d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:22 2026 by rpki-client