Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File:                     WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier:          lnXkQp6p/jug/h26g414oXjzN2D9xNWh1mmb5iD+Ma4=
Subject key identifier:   39:90:0C:22:1C:F8:3A:12:30:D0:BB:9C:A3:FC:81:FC:27:EA:9D:A4
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer:       /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial:       019D2B4F13A9E75579866CE64C034FBD8683
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number:          0E31
Signing time:             Thu 26 Mar 2026 18:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:35 +0000
Files and hashes:         1: 0J1Bc7T3_t7yJTtYF6gyqQOIoEY.roa (hash: 3ugWvtC3e0ymV2WWg87hGLJ6EMMogW9erVq2BTyhB5Y=)
                          2: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: wa/UkfuayYcB/WQIKdfJTrJPUHNjHCHZHvNqIwBJz1Q=)
                          3: YI0pCgu2ykn3yzVOtlSfyJA849I.roa (hash: EahNolpQ9StYuOrtKhWwzZ1bxJLzeXPdTxQKSkepaik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4f:13:a9:e7:55:79:86:6c:e6:4c:03:4f:bd:86:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
        Validity
            Not Before: Mar 26 18:01:35 2026 GMT
            Not After : Mar 27 18:01:35 2026 GMT
        Subject: CN=39900c221cf83a1230d0bb9ca3fc81fc27ea9da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:30:ff:18:26:38:9a:21:d4:be:c3:69:34:12:
                    d5:0c:43:90:2a:50:9c:a3:39:42:92:7b:75:92:e3:
                    aa:ce:3e:0d:1a:16:32:ec:b9:4e:08:cd:b6:f8:e5:
                    fe:59:1a:96:19:58:2b:1e:55:6d:ac:82:e7:bb:16:
                    c6:1d:80:5c:04:87:ba:af:77:5f:2c:aa:01:bb:93:
                    83:d0:65:8f:0b:bd:35:d4:43:b5:40:0f:f6:3e:78:
                    cf:29:e2:f7:8d:84:d2:73:22:19:92:f1:27:95:c5:
                    0b:a2:1a:b6:71:7d:0e:86:e6:86:94:ad:95:4b:4b:
                    77:f0:24:15:86:fa:93:ae:66:39:df:8e:06:c8:b5:
                    4c:76:d7:8f:0b:0e:c2:c2:b9:13:3a:33:89:71:75:
                    3f:bb:7e:d9:68:9e:5f:0d:32:ef:e1:73:c2:d7:a9:
                    a6:8f:ad:4c:be:b4:33:58:b1:fc:82:e9:c7:e0:c3:
                    94:63:40:d2:62:0f:cf:88:bf:7c:fb:76:e8:95:88:
                    fa:55:4c:80:6d:19:d8:8b:b3:e0:86:a2:40:6b:95:
                    20:ed:9a:b2:f6:d0:a4:fa:b2:ff:5d:9a:06:67:1d:
                    6b:36:49:c0:99:e8:7c:0c:18:6d:5f:86:a1:c3:a6:
                    7e:1f:d4:18:fb:70:10:bd:7a:c7:8d:91:65:76:e4:
                    fc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:90:0C:22:1C:F8:3A:12:30:D0:BB:9C:A3:FC:81:FC:27:EA:9D:A4
            X509v3 Authority Key Identifier:
                keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:66:3e:49:de:58:06:1b:8e:a7:1c:b0:3e:77:0b:90:5f:6e:
         f6:08:11:d5:93:86:16:2d:cf:a9:f9:18:c3:8e:74:86:b0:80:
         3f:b1:d9:d2:84:93:28:6f:67:a8:a1:b9:86:23:cb:98:5b:6f:
         cf:3e:b1:5b:78:25:a2:d4:f5:2b:d5:95:40:46:c6:51:79:ea:
         04:a9:38:57:93:a6:a0:0a:d7:3a:15:18:01:23:74:8e:60:5a:
         5b:4e:90:20:cd:dd:3b:b8:b6:70:50:29:ac:dc:72:4f:d9:50:
         c7:ab:85:91:7a:b9:93:d9:2f:a1:b8:a9:ce:49:73:19:1c:1f:
         19:07:24:e0:50:4c:dd:f5:ae:f1:5c:dd:1b:2b:6c:99:4a:d1:
         53:15:86:1c:34:ee:17:ae:b3:7f:9b:59:ce:68:15:1a:8a:f6:
         ab:f7:f7:d4:5c:7e:a7:ae:48:fd:25:43:63:35:f7:41:ed:b2:
         84:70:9e:27:60:6f:4e:ff:9c:0c:10:d1:cf:3c:42:3b:61:10:
         e3:be:45:89:07:37:f8:67:52:ba:a7:0a:25:1e:19:7f:2c:51:
         64:d0:b4:df:9a:fb:32:44:2c:4f:7d:d5:0b:32:e7:33:6c:58:
         e0:15:de:77:d6:7c:68:73:f9:97:2b:a1:bd:d0:03:99:63:82:
         1c:a3:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:31 2026 by rpki-client