Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
File:                     wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json)
Hash identifier:          hl73VdFP9LoM45E5NORJ0P+jraXNm8kwaOtmAjdo6gM=
Subject key identifier:   05:E6:62:EF:46:9F:22:DF:D9:EA:CB:C0:EA:86:FD:A2:C2:E3:31:2A
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Certificate issuer:       /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial:       019D262818D7D3C18B76EB65D1D2CB5594C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
Manifest number:          0F5F
Signing time:             Wed 25 Mar 2026 18:00:55 +0000
Manifest this update:     Wed 25 Mar 2026 18:00:55 +0000
Manifest next update:     Thu 26 Mar 2026 18:00:55 +0000
Files and hashes:         1: 5WdAfePuazyKOqDBol6a24O3XpY.roa (hash: mhrHbQmeUkZKLJUs5FqRvkUEbMJKmKPn0IXdQCttlDY=)
                          2: 9NEEsIaoOSxV4C68oWD-8q01-s4.roa (hash: Yeh595qgzPBaen9pZBMaBJZ2g7PUtXo9qE04VFTndRI=)
                          3: owXJBHpnE_pu52wzEvYbFXAGAAM.roa (hash: wFpSi4A2S+i91fC051hXq5mn24CHrss9+Y9bNRQMfGc=)
                          4: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: C3vd3i5+jjophIlzViUgZujvoTlAJCprie9vHGM6PxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:18:d7:d3:c1:8b:76:eb:65:d1:d2:cb:55:94:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
        Validity
            Not Before: Mar 25 18:00:55 2026 GMT
            Not After : Mar 26 18:00:55 2026 GMT
        Subject: CN=05e662ef469f22dfd9eacbc0ea86fda2c2e3312a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:42:93:3c:c7:eb:7f:3b:30:08:01:fb:76:
                    79:7b:cb:e8:a6:7f:07:a2:2e:c3:31:a2:94:3a:18:
                    87:c2:88:3c:29:8d:ca:e5:92:46:89:0f:15:62:7a:
                    5a:48:fe:68:0e:16:ce:98:5d:ee:d9:de:f7:43:29:
                    bb:41:c7:4b:f5:26:61:d6:1d:5c:7d:4d:23:29:4f:
                    09:36:d8:60:f8:a2:88:ed:b7:28:db:66:f6:40:cb:
                    13:3b:c6:f2:79:ea:a0:8e:83:82:62:8c:6b:0d:66:
                    1b:ce:66:8d:8a:bc:32:93:79:a2:1c:bc:ea:fd:8e:
                    b2:83:f5:11:a1:10:09:d0:0a:bb:fe:00:46:92:ff:
                    64:13:10:e3:e0:4e:d7:75:c7:6d:b4:d6:d1:7e:fa:
                    a9:93:cc:da:f4:a1:22:04:28:0c:e0:2a:89:15:c3:
                    2b:8e:a3:c7:93:73:f3:88:fe:75:b6:8a:6e:97:f5:
                    4e:60:52:2d:a4:45:35:14:64:33:1c:39:7d:26:42:
                    c0:01:ef:10:06:eb:2a:6f:81:d6:bd:60:a7:4c:bb:
                    5d:02:30:a1:bc:19:5a:7e:80:92:96:2d:56:d6:6a:
                    4d:f9:66:77:34:e3:91:1d:66:91:51:b8:43:83:4a:
                    4c:b5:57:e8:52:f0:59:34:b2:ca:85:3b:e0:6c:8e:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E6:62:EF:46:9F:22:DF:D9:EA:CB:C0:EA:86:FD:A2:C2:E3:31:2A
            X509v3 Authority Key Identifier:
                keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:04:22:21:81:7a:cf:99:96:df:04:d6:28:ea:66:9e:75:a4:
         18:c1:66:3b:a7:7f:ef:f2:0a:4a:20:d5:78:bc:e3:b1:70:e7:
         0a:1d:9d:88:81:e3:37:fb:74:c4:52:83:4a:c6:1c:bb:a0:f0:
         b8:09:7a:81:29:32:42:83:11:0f:cc:33:fe:49:80:c5:29:51:
         a5:ac:93:18:86:da:cb:2e:ba:af:bb:f8:3a:f6:3a:78:83:1a:
         a8:08:03:cc:13:7a:10:08:3d:c5:35:73:07:84:35:61:35:1a:
         55:35:c6:82:0b:59:0e:16:7c:bf:b3:4a:82:4e:86:bd:e6:34:
         59:96:08:84:95:26:9d:5d:3c:f1:3d:91:7b:c7:02:b7:ef:ac:
         88:c1:ab:6d:01:fa:b7:2d:47:84:16:b2:de:a9:13:31:b4:2e:
         27:bc:16:af:af:fd:8c:07:3c:ef:b9:ad:b1:b7:cf:cf:34:e8:
         99:dc:a6:77:4c:35:af:32:b1:7b:41:f4:e2:8a:49:40:15:89:
         3e:82:34:af:63:1f:1d:c1:74:a4:05:67:59:4d:62:0e:d6:83:
         45:4f:6d:86:78:fc:8f:04:aa:6b:a6:13:01:ac:b6:a8:ca:54:
         16:50:5e:ef:e1:85:d9:27:3b:ae:4f:a6:3e:7b:49:36:d6:0e:
         b7:57:7c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:21:59 2026 by rpki-client