Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier:          L66YSjMt4f/5U72qcFs2694L5unAD6tOqz1/zS2YzoA=
Subject key identifier:   BE:B1:0F:6C:75:9B:CB:08:3A:E9:1C:7E:07:78:C3:74:28:60:5E:D4
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer:       /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial:       019D2A722F1DC1AEFE436E63EC179EE0691B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number:          038E
Signing time:             Thu 26 Mar 2026 14:00:19 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:19 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:19 +0000
Files and hashes:         1: UUMyTjiCqTOJ9RxzyslUJ28NkGE.roa (hash: LT6KzYJU9uNZJmsZb9G6zfqBp9thSTQ3sJt1lTbYuNo=)
                          2: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: FnfP52EqGIu9CdoV0vchX4B72ShREzxtjavfaKgZN8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:2f:1d:c1:ae:fe:43:6e:63:ec:17:9e:e0:69:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Validity
            Not Before: Mar 26 14:00:19 2026 GMT
            Not After : Mar 27 14:00:19 2026 GMT
        Subject: CN=beb10f6c759bcb083ae91c7e0778c37428605ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fd:4b:a2:d9:92:73:82:87:8a:0d:24:33:84:
                    fe:b9:9d:67:9b:e1:db:81:12:2c:0d:89:a1:02:1d:
                    bc:db:9b:ec:98:09:bc:f1:7a:56:cc:89:8a:fe:58:
                    4c:4a:e3:db:dd:1d:bb:c1:62:ba:38:40:3f:44:84:
                    77:8e:1d:25:38:b5:76:35:35:15:31:ea:31:ac:93:
                    4a:40:c3:b4:62:e1:48:b1:97:38:0b:d3:3f:32:0b:
                    1e:20:a1:e2:fa:b9:9a:4b:ea:bb:b0:44:28:3e:b8:
                    41:9b:e9:b8:bc:ed:6e:24:ce:47:c7:97:62:e6:92:
                    4b:15:b5:39:34:da:69:a0:76:b1:27:a5:5a:73:de:
                    21:6c:96:a3:01:2a:ed:0f:2f:cf:e5:e7:2e:21:fe:
                    4a:77:b0:68:d1:37:a8:53:1f:40:3d:ac:42:ab:86:
                    c9:7b:30:b1:2d:63:28:cc:bc:72:2b:32:66:31:7e:
                    e0:80:7a:76:02:cc:75:c1:f8:65:8c:af:dc:e5:5f:
                    a2:ff:3a:5a:0b:85:ef:1c:c4:b7:b0:2a:c2:fb:7d:
                    35:2c:f2:0b:6c:f5:0e:40:ec:e5:d1:8b:e6:71:68:
                    c0:df:41:c3:cb:1f:97:2b:3e:22:44:93:05:ca:6a:
                    67:fe:10:9f:eb:dd:76:88:15:0c:13:cb:33:a5:f2:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B1:0F:6C:75:9B:CB:08:3A:E9:1C:7E:07:78:C3:74:28:60:5E:D4
            X509v3 Authority Key Identifier:
                keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:70:04:b9:0d:44:79:ed:c5:3c:f0:93:3a:36:d0:d9:de:7b:
         20:55:4e:1c:d4:e4:ee:59:e7:af:e3:4f:2d:b1:58:7f:a6:b9:
         82:54:9d:6a:2c:4b:a0:8f:f0:86:ff:84:00:2f:39:72:c2:25:
         ee:a1:6e:82:d0:10:a5:cd:31:08:87:22:a5:a5:76:c6:eb:bb:
         e5:de:e1:ee:79:5d:f6:98:01:2a:14:a5:15:d8:10:e2:46:67:
         58:fb:87:7c:97:5e:4a:d8:57:6f:8c:6f:f9:a4:ad:81:8f:e5:
         8b:e4:c7:93:fc:16:21:1f:ae:75:1f:9b:3d:45:56:61:61:7e:
         99:e0:b7:cd:8a:70:b5:b1:ae:67:4d:f5:ae:a4:79:ac:2c:ca:
         96:ee:48:d1:56:da:ff:92:70:92:e1:7c:24:4a:51:bb:82:0a:
         c6:58:25:da:c7:1e:a9:b0:35:f6:95:a0:cc:4c:6f:54:0d:5a:
         45:24:2a:67:ad:06:79:82:46:62:65:d2:24:48:02:c2:8b:2c:
         dc:09:4a:f2:13:8d:56:ad:e8:3c:25:bf:4e:a7:5e:64:87:db:
         94:0f:9d:b5:aa:0f:75:e2:fd:26:59:a5:9d:20:0a:1b:f5:38:
         6e:e3:30:f6:be:d0:05:db:9d:d2:5a:91:49:cb:e2:ba:bb:f6:
         01:9a:e6:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qci8dwa7+Q25j7Bee4GkbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMjUyOGRjMDc1ZDUxZTczZWUwZDA5MGUxZDJhMWY1Y2Zh
ZThmZmIwHhcNMjYwMzI2MTQwMDE5WhcNMjYwMzI3MTQwMDE5WjAzMTEwLwYDVQQD
EyhiZWIxMGY2Yzc1OWJjYjA4M2FlOTFjN2UwNzc4YzM3NDI4NjA1ZWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3f1LotmSc4KHig0kM4T+uZ1nm+Hb
gRIsDYmhAh2825vsmAm88XpWzImK/lhMSuPb3R27wWK6OEA/RIR3jh0lOLV2NTUV
MeoxrJNKQMO0YuFIsZc4C9M/MgseIKHi+rmaS+q7sEQoPrhBm+m4vO1uJM5Hx5di
5pJLFbU5NNppoHaxJ6Vac94hbJajASrtDy/P5ecuIf5Kd7Bo0TeoUx9APaxCq4bJ
ezCxLWMozLxyKzJmMX7ggHp2Asx1wfhljK/c5V+i/zpaC4XvHMS3sCrC+301LPIL
bPUOQOzl0YvmcWjA30HDyx+XKz4iRJMFympn/hCf6912iBUME8szpfKnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6xD2x1m8sIOukcfgd4w3QoYF7UMB8GA1UdIwQY
MBaAFFslKNwHXVHnPuDQkOHSofXPro/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYt
YzI5NDEyMTRjYjk2LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYtYzI5NDEyMTRjYjk2
LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwHAEuQ1E
ee3FPPCTOjbQ2d57IFVOHNTk7lnnr+NPLbFYf6a5glSdaixLoI/whv+EAC85csIl
7qFugtAQpc0xCIcipaV2xuu75d7h7nld9pgBKhSlFdgQ4kZnWPuHfJdeSthXb4xv
+aStgY/li+THk/wWIR+udR+bPUVWYWF+meC3zYpwtbGuZ031rqR5rCzKlu5I0Vba
/5JwkuF8JEpRu4IKxlgl2sceqbA19pWgzExvVA1aRSQqZ60GeYJGYmXSJEgCwoss
3AlK8hONVq3oPCW/TqdeZIfblA+dtaoPdeL9JlmlnSAKG/U4buMw9r7QBdud0lqR
Scviurv2AZrmRg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:14 2026 by rpki-client