Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File:                     W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier:          ySTrrd9ZZzUqLJSoezwasFV4OhK3ypKegGxPqOVlgZg=
Subject key identifier:   62:D2:22:1F:02:4D:03:58:4A:F6:D3:22:FE:72:9B:47:97:14:30:35
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer:       /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial:       019E1E3576D574A9F3445383637010B90167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number:          BF
Signing time:             Tue 12 May 2026 22:01:20 +0000
Manifest this update:     Tue 12 May 2026 22:01:20 +0000
Manifest next update:     Wed 13 May 2026 22:01:20 +0000
Files and hashes:         1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: 8iNjaPImVMOP76zf+v1rKxEyQXlQxLayCVbC1zL/p04=)
                          2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
                          3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:76:d5:74:a9:f3:44:53:83:63:70:10:b9:01:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
        Validity
            Not Before: May 12 22:01:20 2026 GMT
            Not After : May 13 22:01:20 2026 GMT
        Subject: CN=62d2221f024d03584af6d322fe729b4797143035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2b:d0:22:91:e8:d5:69:ec:8a:8d:0b:ce:c8:
                    91:7b:24:cb:d8:bd:ec:bd:c8:55:41:d6:6a:a2:d8:
                    40:71:80:70:d4:76:d9:0b:8f:c2:85:82:6e:e2:d9:
                    86:d9:a2:32:89:96:9f:4f:e6:08:93:8e:3f:d4:0d:
                    98:30:51:0a:14:7a:49:3b:d1:ae:f2:3b:d5:3d:f2:
                    b0:6a:da:c2:a3:1a:84:69:7d:f3:a4:dd:97:9a:98:
                    8f:85:34:f5:d7:cc:5b:72:52:51:1a:8c:c4:72:59:
                    45:74:4e:66:a3:43:90:04:41:37:c1:36:1f:f7:8f:
                    f1:fa:22:88:07:ee:2a:e1:f8:59:fc:06:05:19:3b:
                    64:bf:79:b6:05:15:f0:19:ae:b1:0a:f2:59:fb:da:
                    35:fe:b4:68:e3:05:d7:7b:60:01:ba:da:50:8c:30:
                    18:dc:86:78:0e:f3:aa:8f:2a:18:78:04:1f:68:a5:
                    0e:2b:ad:f4:91:d9:25:bf:1b:be:75:d4:8e:d6:9c:
                    72:d3:93:ad:4b:8e:45:94:e8:5d:96:5b:52:fe:90:
                    34:b2:3c:ef:28:8d:95:90:21:db:3a:7e:14:70:5c:
                    98:e4:bc:e1:09:b1:24:9d:c1:f6:41:9f:eb:5a:1d:
                    72:fa:86:7e:f4:7e:1e:11:76:7e:09:58:53:bd:f2:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D2:22:1F:02:4D:03:58:4A:F6:D3:22:FE:72:9B:47:97:14:30:35
            X509v3 Authority Key Identifier:
                keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4d:52:e6:ae:a4:5d:65:22:34:08:e9:2e:8f:5d:d8:06:82:
         9d:86:26:01:8f:d1:1c:ab:ed:cc:83:2e:7d:48:f7:cf:c3:57:
         78:b6:23:82:7d:67:c6:56:f6:8e:c0:2c:91:bd:3f:04:e7:ca:
         b1:dc:b7:d2:8e:d9:1c:d4:6d:57:06:ef:cd:66:04:3b:f6:de:
         2e:5c:e3:56:f5:4f:c8:5a:eb:fc:8f:57:cd:06:f8:12:90:d9:
         78:b9:d7:30:18:17:93:27:35:93:68:35:f1:19:d9:01:fe:89:
         32:54:15:53:41:6b:49:64:15:cc:bf:f2:90:65:9d:b2:7f:76:
         f8:5a:6f:fb:de:01:28:54:e9:08:25:fe:ae:0a:a9:d9:bc:4b:
         21:30:b7:f9:fd:8c:df:58:41:62:c4:71:aa:88:7b:ac:5c:5c:
         2a:25:7c:e0:33:82:1e:70:c2:18:65:0e:f4:9b:c1:ed:ec:57:
         cf:fb:76:f4:a1:8f:cb:d5:12:49:ea:ba:9d:a4:b5:03:a7:63:
         7a:cd:c2:18:f7:8c:5c:84:30:e6:ac:5b:e9:61:86:03:a8:ca:
         54:20:87:11:89:e6:6a:29:48:28:73:44:90:a9:b2:98:56:e0:
         7c:5c:90:52:fa:ed:1e:2c:e0:7e:fc:cd:68:0f:a5:66:89:d7:
         8d:e1:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:40 2026 by rpki-client