Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
File:                     W8RT5LSJH1VHxHeggdzAdCx5114.mft (raw, json)
Hash identifier:          pq26dF9TdEamEHimU9ND9n0hje7quRHCIr9ba5oUt6U=
Subject key identifier:   45:25:29:36:0E:3A:64:B0:11:3F:B8:F2:33:17:01:C0:AF:EA:8E:D3
Authority key identifier: 5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E
Certificate issuer:       /CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
Certificate serial:       01A1DE027F4E50025B3135BDF96BA659BE21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
Manifest number:          02B0
Signing time:             Sun 15 Nov 2026 07:01:07 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:07 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:07 +0000
Files and hashes:         1: W8RT5LSJH1VHxHeggdzAdCx5114.crl (hash: d6V1NzvgvE1gOxcqSeZ/8WQRnK1d0Rn36kisuz8cayc=)
                          2: X_UNUrpWOWm7FmbFIaM-GHcNyS8.roa (hash: PQEesKxkeCAG/ESA4kEKuVjsvf0sY8MFlxfOqDLzV3c=)
                          3: yqtWtEUaxX89PgbuPar-rKJDYu8.roa (hash: W8NPWWhZT4bESWb+Y/iGCFmQoNAAFU7562ycHtHQDvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:7f:4e:50:02:5b:31:35:bd:f9:6b:a6:59:be:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc453e4b4891f5547c477a081dcc0742c79d75e
        Validity
            Not Before: Nov 15 07:01:07 2026 GMT
            Not After : Nov 16 07:01:07 2026 GMT
        Subject: CN=452529360e3a64b0113fb8f2331701c0afea8ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:8d:50:41:bb:80:2e:64:07:b4:1b:b8:48:
                    c9:27:30:ee:88:bd:ea:9b:f7:5f:02:99:dc:18:89:
                    ac:40:6a:09:89:f5:52:e0:5b:0f:2a:d2:bc:9c:ec:
                    78:15:d9:7e:5a:9e:f8:4e:da:99:4a:04:5e:c9:7d:
                    3f:38:52:4e:b0:09:fa:ab:be:07:9f:71:70:c4:d1:
                    c6:ee:61:a7:0c:f5:5c:f9:d7:23:01:80:8a:65:6d:
                    d1:c1:b5:f1:a3:55:30:78:94:8c:14:a5:43:81:07:
                    3a:80:e8:c2:cc:86:de:f5:e6:9e:c3:1c:ee:0c:e2:
                    2a:1f:77:b1:bc:00:26:5a:a8:01:57:11:8a:98:53:
                    42:61:fa:51:f6:7b:60:7b:e7:1a:22:13:f0:b4:fb:
                    11:fa:5b:36:33:e5:5e:3f:0e:b9:09:c2:68:ab:39:
                    ba:38:0a:dd:90:ca:e5:c9:78:70:2a:ab:f0:cc:ec:
                    e4:88:c6:d1:4f:13:df:a1:0e:16:29:d5:ea:1d:c7:
                    8b:66:d6:19:2e:9f:e4:1b:0f:eb:ee:4a:eb:43:c0:
                    47:09:26:4a:db:05:fa:2f:d3:da:c4:9b:bf:c2:2c:
                    88:36:30:05:95:d9:f2:cd:63:da:31:ee:39:9c:2c:
                    2e:d9:8f:68:a1:7d:19:c7:95:98:a6:19:48:30:db:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:25:29:36:0E:3A:64:B0:11:3F:B8:F2:33:17:01:C0:AF:EA:8E:D3
            X509v3 Authority Key Identifier:
                keyid:5B:C4:53:E4:B4:89:1F:55:47:C4:77:A0:81:DC:C0:74:2C:79:D7:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8RT5LSJH1VHxHeggdzAdCx5114.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51ce27-8a27-44f2-bdcf-a8604b95ee09/1/W8RT5LSJH1VHxHeggdzAdCx5114.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bf:c8:4a:c6:12:1e:58:c0:a5:a0:00:74:3b:f5:9d:e1:0a:
         5d:2f:13:bd:44:ae:04:c0:6d:f3:8a:5b:ea:c7:8a:0c:87:b5:
         d0:44:6f:6c:84:18:ab:4a:68:81:5e:ce:39:21:03:99:46:84:
         10:be:3c:96:48:bb:bf:cb:09:22:60:81:5f:08:3f:f4:2f:9d:
         5a:27:51:14:84:2e:e8:16:08:7e:bf:c6:b2:fc:0f:46:fb:ef:
         f7:bf:ae:78:92:d0:cb:1b:f8:ed:50:6b:e8:1d:9e:31:98:04:
         96:f6:ed:16:87:e3:f6:d7:4d:3f:fb:87:6a:f7:f4:cb:ab:a6:
         c5:6b:78:a2:ce:c2:70:ed:5b:11:e0:e8:fc:d1:32:09:a2:d3:
         f6:0e:69:c2:61:2a:0f:d2:3c:a6:f6:34:fe:56:78:79:a6:8c:
         85:1f:44:f8:ac:7d:6e:f8:11:42:5e:41:ad:4f:22:43:c7:81:
         ab:fd:4c:27:16:76:42:e4:de:a1:66:38:45:12:10:9c:a2:ba:
         c6:e4:a9:4d:3c:9e:8d:0e:09:3d:fe:c8:ce:36:48:d0:53:ea:
         2b:dc:b1:00:1e:e3:b2:66:06:14:27:67:fe:8f:86:55:83:2e:
         f3:8c:67:19:ee:0c:a9:de:28:48:ba:08:f5:38:2a:5f:80:ca:
         f6:a2:e5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:50:28 2026 by rpki-client