Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File:                     W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier:          AZ3DJCoB8njzDCAS1EG0nZt9KStGJLCkV3yV8fMpAYw=
Subject key identifier:   BD:73:51:7D:58:E6:AB:59:52:1D:18:72:71:B7:B0:60:48:B3:BD:90
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer:       /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial:       019D25F1ED5FFB526965B41CE4DF5D37A6F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number:          16D1
Signing time:             Wed 25 Mar 2026 17:01:45 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:45 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:45 +0000
Files and hashes:         1: FrTYd2n1mPMmnQqlw_GA42S0gns.roa (hash: 4LYehQSenwwS3QpKE9QMEjIzFleWyGwk4ZhWD2c4154=)
                          2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: 6TPsCnAfSN39qLC6pk9mOItzzmfxTMgnGWhQZbF5pXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:ed:5f:fb:52:69:65:b4:1c:e4:df:5d:37:a6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
        Validity
            Not Before: Mar 25 17:01:45 2026 GMT
            Not After : Mar 26 17:01:45 2026 GMT
        Subject: CN=bd73517d58e6ab59521d187271b7b06048b3bd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ef:5c:22:9d:71:c0:76:50:07:df:4f:17:fa:
                    14:5c:8c:61:a2:eb:78:1e:19:31:a6:0e:74:ad:89:
                    18:7a:b8:78:65:45:88:76:cd:39:35:d9:fe:e8:1b:
                    c6:aa:6d:14:e8:ae:32:47:50:e3:ac:05:70:cd:60:
                    3f:d7:7c:27:5a:6c:1d:4d:8b:3c:74:94:c4:bf:de:
                    0f:8f:32:f3:8c:10:8c:13:1c:83:06:29:87:63:97:
                    98:ae:0c:20:bf:35:28:da:a0:31:07:bf:f0:d7:8e:
                    03:17:03:08:a0:d7:46:b8:27:b0:31:27:f1:60:f1:
                    8a:30:3f:ed:c6:17:fd:f1:1e:4e:4f:b2:fc:04:f6:
                    da:a1:e2:90:dc:6d:68:70:dc:41:ff:8a:43:50:90:
                    73:5a:b2:fa:5f:bd:57:57:ba:6b:a8:51:23:34:18:
                    e7:b8:06:0c:c7:95:31:a3:a4:5e:b0:8e:08:ec:0e:
                    92:be:96:20:70:35:30:c4:10:35:98:18:61:75:4b:
                    33:ef:98:ca:0d:e0:98:d8:8e:df:e7:e4:4a:5d:2a:
                    3a:38:bb:42:c1:5b:19:ad:f5:49:f0:7e:cf:26:d2:
                    ba:23:4b:f1:41:e4:4e:88:90:f5:22:54:7b:40:98:
                    b0:af:89:db:f3:15:83:d0:69:f5:e8:e5:53:7f:36:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:73:51:7D:58:E6:AB:59:52:1D:18:72:71:B7:B0:60:48:B3:BD:90
            X509v3 Authority Key Identifier:
                keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fb:ab:6e:c9:49:f5:bc:a8:2e:cb:34:dc:5e:a3:2f:db:78:
         ad:09:28:5f:00:95:09:ee:ca:2c:f5:03:5c:11:06:9f:3a:02:
         80:d4:c3:4e:47:11:ed:be:49:cf:50:3f:15:6d:d7:df:33:a1:
         5b:c3:20:76:ac:dc:9d:7c:54:ce:8c:7d:e6:6d:2c:01:d2:9a:
         fd:96:3e:85:1e:3b:78:c8:d4:f8:d5:d6:cd:18:71:79:45:c3:
         b6:27:e7:2b:a8:6a:9e:76:e0:5c:55:65:12:1b:24:2d:60:10:
         e5:dc:15:9c:1d:95:1b:98:63:c5:6d:49:a4:59:35:d0:97:05:
         e4:e4:99:64:f6:86:64:20:15:3b:b1:a0:f7:63:1d:f5:36:d2:
         59:9e:33:98:b2:5d:41:5e:e9:20:b7:8f:23:3b:a7:9b:fe:34:
         66:90:5c:71:0e:b1:4d:ff:5a:ba:bb:f4:ba:8b:23:cf:44:62:
         df:67:89:1a:6f:ca:ef:2f:aa:c5:9c:33:87:50:81:f1:16:c7:
         2d:26:de:48:c4:00:56:e5:3d:46:6a:51:ca:73:7a:a0:4f:ed:
         e7:fe:91:12:27:6c:b4:61:98:90:d2:8b:a7:4c:7d:7f:16:44:
         42:b2:a8:c2:c1:46:5a:c4:7a:e9:22:39:83:f0:5c:bc:bb:be:
         70:88:ea:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:05:10 2026 by rpki-client