Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File:                     WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier:          ZW72bvjHyiDKo6wJObiB0Qi2la1whXwBiGa88oRu2Lo=
Subject key identifier:   7A:C8:2E:A0:34:42:65:DF:96:80:4A:94:7D:6B:89:EA:EA:B5:C9:5F
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer:       /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial:       019D28BBBC80B7D01C111CD5687F9EA26F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 06:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:25 +0000
Files and hashes:         1: OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa (hash: iXyMvC2zcRw1kQk9NMVDBWBfZ7cLWCvnkd2tBslhHyk=)
                          2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: A9b80/QzfLF0Gd6XnV2A/9jiCK4EiyNJ2ZPFZs/leV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:bc:80:b7:d0:1c:11:1c:d5:68:7f:9e:a2:6f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
        Validity
            Not Before: Mar 26 06:01:25 2026 GMT
            Not After : Mar 27 06:01:25 2026 GMT
        Subject: CN=7ac82ea0344265df96804a947d6b89eaeab5c95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7f:26:4d:78:25:08:8c:c7:a2:3f:dd:60:45:
                    24:c3:e5:45:d4:0c:26:de:c0:5b:c7:45:8b:70:51:
                    85:fd:34:d1:f9:7d:20:8c:a9:97:c9:eb:6b:3a:b5:
                    73:f2:59:de:64:39:99:58:13:87:8e:97:75:ef:8a:
                    c9:48:24:49:09:52:31:f9:63:4c:5b:76:27:e8:58:
                    c5:fb:dd:06:c1:32:ee:29:e4:fa:a7:32:d5:3c:1f:
                    b8:ff:b3:13:2f:b8:af:b0:78:cb:7d:c0:a5:a8:a9:
                    19:2c:86:9c:f8:71:bf:f8:82:97:09:da:c1:98:b8:
                    de:66:45:93:f2:48:5b:c4:ce:84:9f:d0:db:50:e6:
                    a6:43:ab:dd:38:ca:1b:b6:3f:2c:89:50:19:0b:69:
                    ff:9f:73:30:a9:46:09:4c:3b:08:58:e1:fe:f4:16:
                    30:82:da:20:3f:e3:6d:50:f3:a5:63:3d:1e:6b:c3:
                    69:9a:7d:95:d2:9f:6f:5c:4c:33:65:52:12:78:08:
                    22:22:b8:8c:3c:91:4a:94:48:ed:ae:a4:7a:13:e3:
                    64:95:5d:39:17:9b:7c:82:16:54:65:38:87:26:8d:
                    2a:b4:73:21:eb:c2:9f:49:a0:ea:e8:58:20:79:8d:
                    03:77:e5:a4:87:5b:40:27:cc:6d:bc:07:4d:a7:44:
                    ac:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C8:2E:A0:34:42:65:DF:96:80:4A:94:7D:6B:89:EA:EA:B5:C9:5F
            X509v3 Authority Key Identifier:
                keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:92:00:83:dc:c5:25:44:e0:53:01:fe:69:fe:bb:8a:cb:f2:
         be:b0:e5:5e:8c:13:fd:b6:35:54:bb:27:a5:a9:f6:d6:2a:7a:
         ea:d9:97:a4:3c:df:d9:09:97:a8:56:5f:81:ab:4d:2b:85:6f:
         28:d8:9c:3e:93:e2:7a:91:21:e9:8e:d9:61:71:10:5f:1b:b0:
         ca:8b:41:33:58:bf:db:ce:ce:ea:ac:a0:e1:b4:6e:2d:4a:4d:
         e7:40:8c:a8:e9:d4:4d:8b:04:1e:c8:71:c5:e9:25:1d:17:6d:
         3f:68:bc:53:8e:35:58:c7:ce:38:ad:0a:2b:3d:1a:a0:cb:50:
         19:ae:9a:31:7c:4f:76:a8:3b:7a:7c:e7:3b:69:8e:07:5b:fd:
         ea:21:7f:df:8e:28:dc:46:6a:db:71:fb:0f:58:61:f0:1c:4d:
         0a:c6:b4:ad:14:68:64:ba:e0:a8:4f:bd:89:23:81:32:90:74:
         ec:85:e4:59:32:92:3b:c3:fa:b2:db:b6:ef:de:2f:8b:b6:2e:
         db:ad:01:00:36:e4:d1:d4:ea:69:fb:f3:8e:31:b3:82:1d:ed:
         8f:44:d7:8e:70:54:b4:38:52:8c:6d:a3:6d:00:d5:0e:9a:02:
         20:cd:68:ab:74:e1:41:62:e5:db:b0:c4:87:67:69:a7:f5:c8:
         38:65:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:25 2026 by rpki-client