Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File:                     WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier:          9iJ1Pjdxz4+pk0KmA8DIToecuRLUUkfuVhzs29urEnE=
Subject key identifier:   93:DD:EC:CC:22:3E:2B:3D:58:01:DB:EB:46:9B:82:70:8F:01:EB:12
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer:       /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial:       019D26CD566DE7BA18D135BCC7A8A9BFB6DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number:          0B57
Signing time:             Wed 25 Mar 2026 21:01:24 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:24 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:24 +0000
Files and hashes:         1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: cm8NifHMMXIuJrsWR+/uaD1mcxMFW/GdX1smi0ZoDk8=)
                          2: rzSZWBGG1mILDZWq_ejHiNaagug.roa (hash: E4TzWT1DdcBtP+Tvjygnl6VcTwVaPGsD2eWFKuV7qQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:56:6d:e7:ba:18:d1:35:bc:c7:a8:a9:bf:b6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
        Validity
            Not Before: Mar 25 21:01:24 2026 GMT
            Not After : Mar 26 21:01:24 2026 GMT
        Subject: CN=93ddeccc223e2b3d5801dbeb469b82708f01eb12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:85:ef:30:c4:7b:01:0c:1b:03:c9:38:3a:
                    b6:b8:e8:3f:32:4b:5d:48:bd:bd:59:87:cf:24:40:
                    7b:78:4a:07:22:ba:fc:7b:ab:27:f8:6d:71:ce:44:
                    2c:12:2a:13:60:d6:39:49:b3:d3:93:a4:36:43:ed:
                    19:e7:fd:ff:03:c0:3a:2f:0b:89:51:61:9d:f4:8c:
                    89:3e:97:b9:35:dc:ef:e3:00:c5:93:cd:0b:cd:8a:
                    83:09:da:2a:97:c5:16:0b:01:b9:9c:cf:09:8f:ea:
                    a3:6d:b1:4d:9e:5f:72:d4:9c:1a:9c:43:9f:87:ca:
                    c0:71:12:bb:58:db:a0:2a:5b:3f:dd:fe:76:da:60:
                    d8:40:75:ba:b4:fa:19:ca:63:c7:6d:1b:1d:f0:cf:
                    d0:f1:2d:aa:21:03:7f:3e:c7:08:9b:00:ca:dc:a0:
                    10:26:85:d4:56:76:bd:ab:0c:66:83:72:4e:f5:fb:
                    4a:24:c2:91:49:4b:8a:ac:e8:e0:2b:65:b0:98:37:
                    fd:26:cc:f3:70:07:c6:3a:0d:f2:bc:14:25:28:74:
                    56:77:0a:69:c0:a5:eb:19:c2:4e:01:9c:3a:25:a8:
                    cb:4f:62:06:9b:a3:1c:01:2e:39:6c:bd:71:10:18:
                    ed:43:f7:68:c2:2c:15:35:e2:6a:70:aa:0b:06:36:
                    6f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DD:EC:CC:22:3E:2B:3D:58:01:DB:EB:46:9B:82:70:8F:01:EB:12
            X509v3 Authority Key Identifier:
                keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:46:7b:dc:cb:8f:6f:5d:92:69:76:9e:15:20:f0:86:c7:0a:
         aa:90:d9:ee:4c:fe:b9:17:fa:8e:4f:c2:3c:df:e8:85:28:81:
         61:b0:7f:6d:60:75:69:d6:45:e5:b1:65:5f:95:22:2c:4e:66:
         5e:8b:e1:5f:b4:54:11:c0:37:f4:91:42:e8:a4:80:cf:8f:95:
         87:37:fd:b2:8e:63:e6:8f:01:86:70:b6:5e:c8:a5:f4:37:d1:
         96:ed:9e:44:0f:b9:a8:7f:8a:7a:f8:76:fd:2c:86:88:ed:18:
         c8:c3:3a:1c:fc:f7:ba:71:04:03:8f:2a:f9:6c:1c:f6:c0:99:
         06:1a:5a:8c:99:f6:2d:ef:6f:fd:c5:18:a3:a6:0e:7d:27:fb:
         70:f3:da:22:02:79:e8:6d:98:63:ff:fd:1a:d9:b7:7c:90:cd:
         26:15:c9:1b:4c:71:e3:18:87:62:f9:26:c6:5f:e2:40:3e:c1:
         8b:e9:2f:35:f7:f9:c3:38:b9:b3:86:56:be:d5:32:0f:d0:f2:
         41:54:c2:d8:84:f3:3f:b0:f5:c6:11:3f:f2:2a:6c:39:9e:dd:
         88:75:8f:5f:d3:76:b9:a7:b3:d6:92:50:1c:11:be:b7:69:8d:
         a7:2c:6d:ea:94:68:6a:45:bc:95:a3:1e:61:44:03:33:3c:6b:
         6e:49:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:52 2026 by rpki-client