Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
File:                     W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json)
Hash identifier:          T5nDmGn1xzLwyP7wnxmZJe3sbwvE2uB8ZO1DPHwHexY=
Subject key identifier:   15:A5:F2:1B:23:51:75:E0:02:F0:6C:C7:01:9F:AB:80:A5:64:1E:DE
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Certificate issuer:       /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial:       019D2695F8401F3FDDAD051DE6483DE84B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
Manifest number:          0E36
Signing time:             Wed 25 Mar 2026 20:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:55 +0000
Files and hashes:         1: EPkMocEIf6YHtVveQVCBv3QN0fQ.roa (hash: P29zKbxU8CX1RFik6k8KtMo4X8xEhL7qfYBrdaaVZmo=)
                          2: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: hOM3YmhwFC5o8pUawLId3tCKUAqw0E62lsyf54uILI8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:f8:40:1f:3f:dd:ad:05:1d:e6:48:3d:e8:4b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
        Validity
            Not Before: Mar 25 20:00:55 2026 GMT
            Not After : Mar 26 20:00:55 2026 GMT
        Subject: CN=15a5f21b235175e002f06cc7019fab80a5641ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:31:ea:2e:be:ea:cf:dc:4e:76:1d:6c:56:49:
                    27:36:36:3a:57:4e:05:6a:54:fa:70:a6:50:50:84:
                    c3:12:ec:0f:77:7c:91:32:13:d3:66:d8:b9:f6:5a:
                    59:33:73:44:7f:58:e3:0d:9d:bd:71:1a:0c:97:3d:
                    fe:5c:83:70:63:79:06:39:eb:11:57:80:48:4f:83:
                    f6:c7:ef:f4:dd:dd:41:6b:19:58:d1:03:b5:d0:9e:
                    ec:b6:c9:3a:8c:03:89:ca:56:12:81:00:90:8e:b4:
                    0b:d9:43:1c:d8:f7:26:a4:cf:60:96:0f:7d:3f:1e:
                    93:d7:73:9c:44:39:9e:56:80:f5:d4:32:a9:5e:b5:
                    61:77:b1:25:58:f6:58:8c:44:eb:72:a3:6a:50:ae:
                    19:ee:90:91:dd:34:4c:97:d3:3a:79:e6:5d:ec:44:
                    f0:f8:db:43:a9:dd:eb:5b:39:a9:02:9c:40:c8:4e:
                    d5:77:77:af:af:f6:65:46:f9:38:5e:b8:54:90:66:
                    6b:eb:87:18:c6:8a:97:2e:ce:e7:e3:c7:6a:83:c8:
                    28:b6:38:37:d2:77:e1:14:c6:be:86:c8:02:35:28:
                    c5:d8:72:4c:43:e0:c2:73:ef:c4:6c:f4:cb:da:4d:
                    61:a9:12:f9:de:32:62:91:56:67:51:4f:28:84:e8:
                    70:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A5:F2:1B:23:51:75:E0:02:F0:6C:C7:01:9F:AB:80:A5:64:1E:DE
            X509v3 Authority Key Identifier:
                keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:9b:7f:65:d6:5f:cc:91:4a:c4:a8:f0:e1:7b:d0:a5:80:66:
         a2:64:56:03:9c:66:44:8a:35:a5:57:b3:2a:16:4f:09:3f:8a:
         3b:68:0b:91:05:a9:24:2c:e0:82:e9:5f:98:f1:90:43:79:32:
         dc:c4:50:36:4b:0d:a0:1f:19:e6:ed:ea:8d:45:1f:b3:5a:c2:
         a7:ee:66:bc:a3:93:9b:7f:4d:94:37:55:00:eb:b7:b9:8f:6e:
         59:2b:38:0d:93:b3:7a:28:bd:93:2b:e6:43:18:32:20:d8:11:
         c3:d7:89:92:88:ac:78:2c:27:d5:5c:34:19:8e:b0:b8:90:3b:
         d5:33:a9:2b:78:5d:f5:97:e1:2d:76:b0:1e:be:c5:13:55:22:
         60:1a:19:49:e7:ac:a5:21:04:94:10:d9:bf:6d:ac:ad:7f:3d:
         57:de:cd:e8:b7:a1:1c:8a:68:1d:9e:a7:f7:86:9f:f9:0d:26:
         82:0f:23:2a:d7:fe:f2:5f:8d:a6:49:5e:cf:76:1b:fa:db:f9:
         65:bc:98:d5:5e:52:f1:d1:cc:8d:47:6b:e7:cb:8c:ed:20:28:
         2a:50:ec:a0:a5:f5:ff:57:f2:74:19:8f:94:24:00:f4:cc:8a:
         21:4c:b7:44:2d:b9:11:ab:ce:bd:6e:6d:37:23:87:f6:59:46:
         f8:55:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:37 2026 by rpki-client