Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
File:                     WbWUsQer_jKkbE0dvge7tOa7Fjo.mft (raw, json)
Hash identifier:          KH/zMd4a25EevWba3mG0kJA2fo+L8R5RT35XldnCySA=
Subject key identifier:   AC:5A:FB:DA:75:61:D8:6C:FB:0E:C7:E6:14:68:F7:2E:9F:7B:B5:B3
Authority key identifier: 59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A
Certificate issuer:       /CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
Certificate serial:       019CAB6B21D06164F79622EDAF2893578B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
Manifest number:          0CD9
Signing time:             Sun 01 Mar 2026 22:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:50 +0000
Files and hashes:         1: JhQxSoi2iumg0lFCDyE9tVAHyro.roa (hash: kFCWDQuRpVX6RQjX0F/ydaMYuJeOh1OJyMfx401HTi4=)
                          2: WbWUsQer_jKkbE0dvge7tOa7Fjo.crl (hash: JrFkJYubmGAk0Vs7G6qcYpq65KhnYRNAZCqDS0DQFL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:21:d0:61:64:f7:96:22:ed:af:28:93:57:8b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
        Validity
            Not Before: Mar  1 22:00:50 2026 GMT
            Not After : Mar  2 22:00:50 2026 GMT
        Subject: CN=ac5afbda7561d86cfb0ec7e61468f72e9f7bb5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:54:f0:dc:cb:82:c8:90:30:ae:ed:28:b3:4e:
                    d4:27:29:25:15:4d:26:de:a6:c2:be:44:ca:2b:2c:
                    73:ad:7b:0c:38:2d:d4:93:51:c1:e2:33:9f:aa:6a:
                    d5:4e:58:ca:a1:35:03:1d:68:8a:1f:21:f3:76:61:
                    17:01:06:a9:42:92:5f:5a:74:70:74:39:a2:ba:73:
                    02:6c:34:61:49:f7:b6:6a:0a:46:b0:d2:e0:e9:cb:
                    48:86:3f:c8:eb:90:0d:22:94:da:bc:7a:c6:81:5c:
                    17:fb:83:2a:9c:e9:67:08:07:93:c6:09:49:d8:81:
                    ef:e2:4e:a8:cc:01:42:1f:5d:70:e5:12:fd:d4:12:
                    a2:ba:34:1f:64:b8:78:b4:75:c2:1d:08:75:45:12:
                    97:a1:18:1d:e7:c0:8c:82:49:02:0e:f5:1b:d6:ac:
                    00:85:d7:7a:ee:d6:2c:03:76:d4:bf:5b:c7:ba:ea:
                    5f:2c:58:13:df:ac:6d:05:e3:6f:92:4a:fc:df:f9:
                    55:bf:2c:ce:91:a9:da:ff:f3:5a:7f:4f:2c:89:fa:
                    7b:8c:9e:88:84:ad:0e:3b:a8:e0:55:70:5e:58:b7:
                    d9:fd:ed:f4:0c:cd:c1:d1:77:66:bb:cf:ff:29:f7:
                    88:ab:d3:20:8d:63:b2:16:76:dc:21:c4:65:04:3b:
                    5b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5A:FB:DA:75:61:D8:6C:FB:0E:C7:E6:14:68:F7:2E:9F:7B:B5:B3
            X509v3 Authority Key Identifier:
                keyid:59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b6:61:55:55:e9:8e:52:be:de:e5:51:6e:08:c8:88:10:d6:
         6d:cd:4d:f3:9a:bc:12:36:33:ff:81:76:17:b6:5b:9c:74:55:
         37:7b:55:d2:3a:de:18:36:92:19:5b:b6:63:8c:40:3e:aa:9f:
         01:26:4a:20:ab:a2:33:05:42:57:64:ac:54:df:a8:fc:e2:5d:
         41:71:98:46:e1:2d:db:70:ab:3c:63:4b:f4:20:a4:2e:04:c5:
         ea:e6:85:7d:a0:5b:4d:8f:8b:27:01:a5:f8:c0:fc:5c:88:c3:
         1c:f1:38:8b:61:21:51:63:8d:8c:c1:1c:6e:b7:28:d4:27:5b:
         a6:73:42:8e:4c:8d:9c:ec:6b:9c:0c:9f:cb:fb:c9:2c:22:e2:
         96:46:be:b4:49:9d:49:79:ac:e8:24:77:1a:02:8e:ce:4d:ab:
         d4:f2:fa:2a:24:22:d6:cb:dd:2b:83:71:35:f7:17:d0:e5:28:
         d4:1b:45:16:b3:1d:b4:f3:f9:51:00:df:87:02:d8:40:0d:86:
         a5:b7:3c:44:fb:eb:46:4f:b5:95:13:e7:8d:5f:26:4a:d9:8c:
         d2:fb:4c:43:3e:d0:9d:06:b5:8a:30:84:2e:62:66:7d:87:1e:
         fb:68:8b:75:d1:ec:3e:2f:2a:cc:f9:fe:dc:bd:26:7e:63:fc:
         f0:c3:3d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:25 2026 by rpki-client