Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File:                     L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier:          /880SZgPUMUCJp6U0tCMrWk4ISHyhXNGCt8uJq4xhJk=
Subject key identifier:   79:36:17:7B:25:26:DA:47:4C:44:8F:9A:61:FF:AA:9E:D4:5B:B8:5A
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer:       /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial:       019D2B4E552D6F5EC7891AA2CDB5F6F90685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 18:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:47 +0000
Files and hashes:         1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: PI3RMboH4xeWqCCMvZ7jYaSZ5PN7zzklnb7WyqPwG3Q=)
                          2: W6FjOnvEDK4nIE1NTMn5BVz3fuM.roa (hash: 3HTrKjjRsVy1cVU/H1CFW3GVw/q8a/eXNoo6L1gCpFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:55:2d:6f:5e:c7:89:1a:a2:cd:b5:f6:f9:06:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
        Validity
            Not Before: Mar 26 18:00:47 2026 GMT
            Not After : Mar 27 18:00:47 2026 GMT
        Subject: CN=7936177b2526da474c448f9a61ffaa9ed45bb85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:ab:14:2b:70:d9:0b:d1:0f:6b:9b:59:d2:
                    ad:32:aa:67:f7:f4:12:14:46:a8:ff:0d:c4:d4:11:
                    45:53:cb:01:fc:55:f5:d5:de:95:f5:32:df:19:57:
                    67:02:7d:49:3e:cf:d3:ed:f6:90:dd:13:ef:20:73:
                    20:fd:0e:03:cb:85:2a:1d:1d:a2:06:63:be:76:49:
                    a4:50:6c:e2:d4:8a:14:d9:78:71:92:e2:06:2e:bb:
                    f7:26:b2:dc:98:23:5c:95:2f:ad:45:c5:9e:a3:11:
                    79:06:6c:b9:96:b9:9f:f1:39:64:91:47:94:c4:b9:
                    bd:a9:76:7b:5c:6d:a1:5b:36:20:8b:34:67:f6:df:
                    c6:bb:79:ec:73:eb:b5:fc:53:d4:16:80:01:a3:3b:
                    c0:34:be:94:32:a7:44:ab:16:de:23:05:b7:17:69:
                    28:30:da:83:3b:ac:dd:11:f4:81:f3:c6:6e:f8:ad:
                    72:8c:90:66:08:d8:99:a9:32:d5:7b:be:69:8d:dc:
                    ed:f6:16:f3:44:2a:5c:30:eb:d4:9a:16:07:ad:7f:
                    58:4f:19:b7:5a:32:17:e2:30:03:4d:24:16:48:6f:
                    3a:eb:82:cf:52:0e:c5:0e:b2:f9:21:49:ba:b5:fa:
                    e9:72:c5:9f:67:91:e0:bd:f7:06:40:c1:17:66:97:
                    7a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:36:17:7B:25:26:DA:47:4C:44:8F:9A:61:FF:AA:9E:D4:5B:B8:5A
            X509v3 Authority Key Identifier:
                keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c0:d4:eb:21:fe:00:60:26:fd:86:5c:0c:45:d9:05:97:88:
         e1:aa:a0:4f:8c:80:4a:7a:8a:40:76:f7:08:e3:69:77:b9:09:
         19:00:e5:31:4d:b2:94:de:1f:c6:b9:cb:a6:39:9f:09:89:4a:
         d8:48:f7:7f:b0:a4:80:3a:2c:ee:a0:8c:07:be:61:58:df:e3:
         a4:ff:ce:d8:31:04:67:8b:2e:dc:91:4b:57:bd:70:7f:3a:9d:
         66:f1:25:b3:ea:74:c2:b8:8b:b9:ea:b4:df:f0:84:28:fb:98:
         07:76:67:39:1a:82:88:07:73:a4:13:39:d5:16:e6:b7:9d:20:
         07:04:66:14:ed:2f:3d:ae:e1:08:e5:e1:f2:5e:f7:4e:95:ae:
         27:dc:9a:a8:05:35:36:bf:09:96:e9:6b:8a:ab:4f:8a:82:eb:
         72:1a:ea:18:21:4b:5b:db:6a:2c:6a:2b:96:3e:04:dc:50:6b:
         a2:28:13:cb:0c:29:a4:d7:68:9f:d6:9e:ae:7a:37:10:f8:bd:
         de:db:b8:8e:19:f0:b8:32:e8:90:74:df:06:6b:2d:6b:10:a3:
         07:1f:88:c9:a6:64:61:94:0a:1e:99:ed:cb:50:55:ab:f1:d0:
         07:6c:af:06:69:12:5f:4d:df:3a:e2:38:a0:7d:3c:0d:85:2e:
         5a:a9:1e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:22:50 2026 by rpki-client