Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
File:                     WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft (raw, json)
Hash identifier:          AZtiNn4GSOiNqU2vMtYq9G+S2TL1IXDUi6GBEbCBVjU=
Subject key identifier:   DA:25:08:4A:A8:3B:5E:81:67:03:CD:41:F1:BF:B6:94:38:69:DA:D5
Authority key identifier: 59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66
Certificate issuer:       /CN=5990c1553762ac9af57df9b58d9dc50af409c566
Certificate serial:       019D25163A2FD23DA2CC09C435074EF83118
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
Manifest number:          1602
Signing time:             Wed 25 Mar 2026 13:01:46 +0000
Manifest this update:     Wed 25 Mar 2026 13:01:46 +0000
Manifest next update:     Thu 26 Mar 2026 13:01:46 +0000
Files and hashes:         1: La1bk9hiAsFAmxgmoYU8D36An4I.roa (hash: prW1lY9yf0rsG8vbap4UWXcYjyAnNaggPXP/OIdFgHM=)
                          2: S7RcXMyiVxlze6GVvWUy2ASQtA4.roa (hash: 9nQ7JQOoqPESGeYG/+m0xunoEX7zzRQueykeebjY92Q=)
                          3: WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl (hash: rikjFlQhK8t8T3ZQsln4tgjP/9x04Y9fbO8vzD7/VLY=)
                          4: ynVcVwsHLfDFnsZwDl6plOq4G_c.asa (hash: cpIueJ5pxymMp/hEEdjgT4jgKR7NJsmIJ7TAdOE+ZcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 13:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:16:3a:2f:d2:3d:a2:cc:09:c4:35:07:4e:f8:31:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5990c1553762ac9af57df9b58d9dc50af409c566
        Validity
            Not Before: Mar 25 13:01:46 2026 GMT
            Not After : Mar 26 13:01:46 2026 GMT
        Subject: CN=da25084aa83b5e816703cd41f1bfb6943869dad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:42:8f:67:3e:81:60:54:20:46:21:56:04:bb:
                    45:8a:0c:fd:8b:a8:af:32:2d:2c:a3:19:74:9d:9b:
                    80:a8:2b:92:f8:57:bc:ff:1c:67:16:5e:f7:8a:35:
                    36:84:a7:e2:c9:05:ef:89:3e:08:09:4c:67:e8:38:
                    bc:49:42:4b:4e:54:5b:c7:86:1d:4b:00:d3:25:73:
                    2d:0f:10:3a:aa:08:9b:b0:5f:30:73:d4:39:00:b5:
                    89:2e:a2:12:dc:17:56:8e:94:c8:c5:c4:68:53:32:
                    b9:32:4d:18:41:60:a7:8d:50:09:66:4a:d1:14:73:
                    d2:ef:f8:59:e4:ad:62:f0:01:ae:45:ef:e7:5b:85:
                    4d:f6:1d:49:89:59:03:be:19:47:93:73:02:dd:00:
                    8f:10:f3:07:e2:4e:2d:ca:3d:df:87:70:cd:62:bd:
                    03:6e:55:41:5e:6e:b9:dd:16:12:27:59:cc:dd:6f:
                    dd:18:c5:52:70:29:20:85:ec:fe:51:ae:b8:d5:b3:
                    79:7a:9b:34:7d:b6:c0:70:f9:75:94:5f:49:53:2a:
                    b6:1d:44:42:73:06:79:8d:e6:cb:0e:7c:ce:99:15:
                    1d:25:52:19:07:88:f1:bb:54:6f:c4:20:ad:66:ad:
                    76:bb:37:80:52:9a:9b:c9:f4:f9:d0:34:94:84:ed:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:25:08:4A:A8:3B:5E:81:67:03:CD:41:F1:BF:B6:94:38:69:DA:D5
            X509v3 Authority Key Identifier:
                keyid:59:90:C1:55:37:62:AC:9A:F5:7D:F9:B5:8D:9D:C5:0A:F4:09:C5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZDBVTdirJr1ffm1jZ3FCvQJxWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a8f8e1-dce2-47ef-824e-bef1034edbe5/1/WZDBVTdirJr1ffm1jZ3FCvQJxWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:25:71:13:5c:77:88:74:3c:86:a7:eb:7b:a0:58:04:e2:
         2c:ac:f8:5d:7d:07:57:a4:2e:11:ca:e7:55:b3:de:f9:a2:b6:
         83:89:7f:2c:7a:b4:97:ec:70:37:75:83:0b:bf:56:cf:82:a1:
         bf:59:bb:bd:a0:b9:79:c0:63:54:fa:db:55:b9:22:d4:18:30:
         84:98:ef:16:b8:68:9f:91:a3:0a:34:c6:05:15:37:c9:36:8b:
         a7:30:78:08:ee:37:e8:19:e1:fb:1c:8a:b3:3d:ff:78:53:31:
         1f:ca:17:02:9f:42:92:11:7b:70:ca:48:15:40:c8:6a:e1:7a:
         d7:c8:c8:e8:df:cb:c5:b6:ed:bf:e1:a5:74:ca:a7:ee:e9:a8:
         5e:5d:c9:69:82:9c:64:cd:f0:b8:b5:05:ec:e8:3a:50:4b:79:
         b7:7c:ae:d3:92:64:fb:6e:2b:91:d0:36:b9:bc:64:1b:25:af:
         69:b3:7e:2e:9c:b2:d5:6c:95:a2:d8:16:98:4b:4f:79:da:8c:
         bc:ed:be:ef:92:97:3c:6f:fb:c7:3c:58:c1:25:c9:a5:07:6f:
         4b:24:73:50:d6:d5:02:e0:70:63:59:e3:11:97:32:62:9e:15:
         9c:ec:95:0c:78:9a:c8:74:67:6d:d4:77:98:e6:9e:a7:9f:e6:
         2d:74:96:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:24:31 2026 by rpki-client