Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
File:                     WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft (raw, json)
Hash identifier:          HztFkcmFnIpY1s4YrjufIDFlI2szColZs6sZfBVYAJI=
Subject key identifier:   FE:C2:60:79:17:30:52:DF:7C:83:80:3E:40:14:C9:EB:35:1B:96:1E
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Certificate issuer:       /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial:       019D292970C4A49F1EED8E87B016858B3B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
Manifest number:          188C
Signing time:             Thu 26 Mar 2026 08:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:14 +0000
Files and hashes:         1: WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl (hash: p6KVGjCNA4m3bTL52udVmRp9pQW8FY76PQ7EWbNJxr8=)
                          2: aM3jDyUSBlPTCNMfpXY5YwnPsA8.roa (hash: jUnTNL0+v3OE/gFOXVeP3LxsqBN3nJHAQLUeEsSvDk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:70:c4:a4:9f:1e:ed:8e:87:b0:16:85:8b:3b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
        Validity
            Not Before: Mar 26 08:01:14 2026 GMT
            Not After : Mar 27 08:01:14 2026 GMT
        Subject: CN=fec26079173052df7c83803e4014c9eb351b961e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c8:f1:13:b8:9d:6b:3f:40:8d:ec:95:39:b6:
                    d3:23:da:10:c2:96:86:d7:06:f6:87:bc:46:f3:4d:
                    a1:65:fc:31:6b:f5:b1:fe:8a:a0:1c:4b:d9:76:7a:
                    2f:de:c4:18:d7:8c:ae:5e:e6:cf:c5:92:c3:c5:dd:
                    b5:0e:d3:c8:f4:a0:4a:b9:b5:83:7f:0f:34:57:e5:
                    89:8c:13:43:dc:26:9c:70:b7:99:17:d0:be:ee:95:
                    0b:c7:f2:9c:25:55:16:9c:a3:1d:4b:11:46:af:67:
                    8c:0d:37:a8:be:78:e5:bc:fa:69:c8:80:6a:7b:a9:
                    29:c3:f4:35:82:7f:63:26:25:70:d9:0e:e2:91:5d:
                    af:da:04:b1:cd:18:77:ea:70:fa:fe:0c:0a:78:06:
                    bb:43:72:16:8b:c4:71:27:81:3d:52:7d:4c:c4:e9:
                    7e:e5:9f:8d:0d:3b:0c:49:dd:da:d9:6c:65:50:91:
                    4d:22:6d:b8:97:9c:aa:45:86:b1:64:3d:94:a9:0b:
                    69:bb:61:87:19:1f:31:9f:5f:4f:87:a8:a4:87:e3:
                    64:23:75:9c:a4:a0:fc:f7:1f:2d:e0:8b:b9:a0:87:
                    8a:80:24:0a:d0:a1:97:52:0f:1b:39:fd:e8:5d:7e:
                    bd:3a:be:d5:99:99:0a:92:d1:69:c3:50:50:ea:3e:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C2:60:79:17:30:52:DF:7C:83:80:3E:40:14:C9:EB:35:1B:96:1E
            X509v3 Authority Key Identifier:
                keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:af:24:c4:36:58:e3:52:14:a3:20:51:98:71:ec:6d:f2:a5:
         21:3c:c8:d3:a0:9f:10:8d:83:1c:de:7c:45:41:5d:e3:3c:d6:
         6d:97:0a:eb:63:f8:09:f1:28:8c:e3:5e:a9:aa:95:00:79:20:
         ad:ca:7c:f3:86:f1:93:e4:9a:62:ad:7c:37:62:88:4c:28:79:
         7f:d1:58:87:f9:6f:0b:d1:85:41:1c:54:dd:37:b0:85:8e:52:
         82:6c:b9:a0:cb:74:f3:00:63:09:ba:cd:4d:72:d4:f1:f1:fd:
         7c:d0:34:22:18:67:53:51:e8:28:ee:1a:7c:3b:0e:f7:6a:58:
         80:64:27:bf:8f:14:26:3b:19:89:60:2d:27:78:a7:e1:2a:11:
         0e:99:a8:75:51:17:74:0f:65:0c:06:9d:58:81:a0:22:b2:05:
         70:51:23:0e:c5:38:5f:7e:7f:98:96:ae:55:25:fe:a8:76:05:
         c5:80:6e:14:1e:fc:ba:1e:12:9a:ec:02:de:3b:d5:ec:ce:d5:
         62:0c:a2:b2:93:32:35:66:55:a5:fa:ed:9f:0a:f7:8a:88:3c:
         33:df:65:3d:53:43:40:38:b3:b3:a2:51:76:f6:b4:b9:2f:b3:
         13:67:d5:60:70:0c:c4:68:c6:54:3a:dc:95:3b:e2:b1:bd:54:
         18:38:23:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:54 2026 by rpki-client