Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
File:                     WDMpShzcE1ivxDnApyczsGWob4s.mft (raw, json)
Hash identifier:          83lABRh1gd2uhSfD59zhaulzqaU0MxSL8QKu6Ygh5Xw=
Subject key identifier:   DD:19:51:E1:95:C5:06:53:F8:27:CD:5C:7F:2B:0A:F3:28:B2:3C:CB
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Certificate issuer:       /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial:       019CAA8F8CBC25594846A61EB869BE3C50B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
Manifest number:          15AB
Signing time:             Sun 01 Mar 2026 18:01:00 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:00 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:00 +0000
Files and hashes:         1: LE-mWIFEaw_P2vdW__MBRwtK_Dk.roa (hash: Vzf9BsyT6wUuoymZACJaMGemmUDOWotnRVOQ6nohqtk=)
                          2: WDMpShzcE1ivxDnApyczsGWob4s.crl (hash: KFh1YH8QxivEDjHi+n/FUMBIocw7BERCqMNQVoU5tmA=)
                          3: WjTFV_vkw2RluZfzr_tOVqRjj-w.roa (hash: YJ6SM71rDrIoVYHl9P05G0LuNuKEMPjdz3ZQbSRBc0o=)
                          4: aAMBxABuNWLMiDFEaZfaORcJfCc.roa (hash: OsAfZ4nItSdNeg7Pa91VVHU6gTtzsTtVrhEZpgCzWwc=)
                          5: ejwbFPhATqylSwO48MC87csxibE.roa (hash: RaSUYk9rFkC5b/EdXmZf9la1zC9aeBsb5R7RgPQgXfo=)
                          6: xzWZwX5dFxrjNrqyC87RwCdeYwI.roa (hash: 6Pa9VX5amyqk8NFVQLYL7l7qsZQa9+9iDgCKM+czywk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:8f:8c:bc:25:59:48:46:a6:1e:b8:69:be:3c:50:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
        Validity
            Not Before: Mar  1 18:01:00 2026 GMT
            Not After : Mar  2 18:01:00 2026 GMT
        Subject: CN=dd1951e195c50653f827cd5c7f2b0af328b23ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:37:66:1b:88:79:dd:ac:6f:6e:ff:89:fb:
                    5b:14:f2:28:0e:ba:4c:56:ef:c0:e2:03:b3:a0:17:
                    60:bb:12:06:0d:e0:4f:47:e7:a3:ca:b4:c4:35:52:
                    44:6a:b4:c0:31:fe:bb:05:2a:d4:92:31:3d:ea:e8:
                    30:0f:6b:e1:72:84:ae:51:f3:9d:00:47:c6:db:ea:
                    a0:e6:a1:4f:ae:d8:27:ed:bb:ab:ab:30:62:88:67:
                    89:70:5a:f6:72:59:4f:00:4b:15:90:c8:4a:8a:e8:
                    40:ce:68:07:28:94:ca:87:c0:b5:42:28:12:f3:1f:
                    68:59:7f:b1:bd:33:ef:37:b9:f8:b9:93:3d:1d:0c:
                    6d:4b:32:86:23:02:30:ff:eb:80:fd:d3:5d:a9:1a:
                    c1:18:91:a8:99:85:cd:60:db:d0:c7:e7:1c:fd:9c:
                    17:ad:21:c2:64:87:5d:65:3e:5d:d0:e7:9c:96:d5:
                    9d:a5:d4:1d:0c:fb:87:a4:df:03:ca:91:e4:70:4f:
                    7d:58:17:e5:5a:ee:de:f2:bc:23:3c:88:cb:fa:1b:
                    dd:4c:1c:37:15:e2:9a:b1:99:a2:97:65:65:bf:4f:
                    74:e1:c8:2f:af:c9:d7:82:2b:0b:72:b5:cf:b3:72:
                    1c:63:c8:7f:53:a4:7e:86:d0:9a:23:ec:81:cb:c0:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:19:51:E1:95:C5:06:53:F8:27:CD:5C:7F:2B:0A:F3:28:B2:3C:CB
            X509v3 Authority Key Identifier:
                keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:69:3c:12:1a:96:9c:c6:25:45:7a:28:fd:eb:11:85:11:a6:
         d6:22:3d:34:9c:ab:a1:b0:73:0e:4a:96:68:d7:28:20:cd:3a:
         18:68:74:37:45:b3:75:d1:bb:fd:be:cc:fb:a3:06:a4:60:94:
         fb:0d:40:c9:9b:b4:1f:02:4c:0a:55:4b:c6:6d:89:31:de:64:
         4d:25:7c:10:c2:d3:83:01:f0:a2:d6:08:68:d0:00:ee:84:8a:
         ea:c3:32:ff:0b:2e:01:a5:f0:13:49:07:c9:be:6e:3e:93:93:
         30:35:a9:15:b5:27:22:9d:55:d9:f3:5c:d5:ac:bf:e0:0d:bc:
         13:e3:96:76:f2:f3:67:22:27:3b:ea:bf:70:dd:7f:e7:08:ee:
         c1:98:be:d6:a9:0d:ae:35:0f:fe:9d:55:dc:e0:8a:69:91:b4:
         cd:89:16:dc:d8:e7:6c:28:fc:03:f2:e4:4e:0d:e1:ff:51:a4:
         be:0d:07:e9:78:04:c5:2e:5c:f6:77:92:9c:19:83:e5:84:d3:
         2b:9e:39:b9:f7:71:12:2f:a6:95:19:6b:b0:94:41:c0:fd:c4:
         4f:54:79:34:d7:f4:ce:13:5b:16:10:40:37:15:6c:13:13:25:
         89:59:a0:c5:00:c8:68:77:ad:7d:8b:cc:23:b4:c2:fc:42:3a:
         9c:4a:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:01 2026 by rpki-client