Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File:                     Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier:          FK2OP2m7f7Q1O37GPksPm0c9IqYvQDwY2fsbNYX+WSg=
Subject key identifier:   B4:2A:66:99:AC:E4:BD:3A:BF:35:52:C3:9B:44:12:AB:DD:29:44:62
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer:       /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial:       019D284E59BAB0E53D88500EA761B7D7C09D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number:          05FC
Signing time:             Thu 26 Mar 2026 04:01:56 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:56 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:56 +0000
Files and hashes:         1: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: 9ya0K6wPkLSeW03jXVFIiIgkOInxLiWrtdGF279KnRQ=)
                          2: m0yOtQ4zzaWwbkLA2mct7O9eAl8.roa (hash: TTt4vBq0ts1GuSUcOF2cVVxmQbeDaFKzFBYDNYxTze8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:59:ba:b0:e5:3d:88:50:0e:a7:61:b7:d7:c0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
        Validity
            Not Before: Mar 26 04:01:56 2026 GMT
            Not After : Mar 27 04:01:56 2026 GMT
        Subject: CN=b42a6699ace4bd3abf3552c39b4412abdd294462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6e:79:2d:9a:0f:b8:ae:84:3d:b6:03:cd:17:
                    63:d3:10:5c:75:a9:b0:87:81:bd:7a:11:1f:0f:6f:
                    07:8b:9e:8b:86:da:fe:19:51:04:6d:16:ba:ab:85:
                    a4:05:b6:f7:de:8f:ed:1b:ed:aa:ba:dc:1f:92:d5:
                    aa:c8:af:2d:7f:e0:86:b2:0c:ef:2a:a5:ca:1a:01:
                    73:c6:bb:45:b8:7c:77:a2:35:27:0b:81:7b:2b:5a:
                    73:16:13:21:c1:85:79:cf:94:58:34:7a:b2:08:eb:
                    64:c2:b4:58:e1:af:9f:78:1b:1f:b8:79:66:66:5f:
                    57:f3:f9:df:0e:f1:e6:0a:17:2f:07:97:f2:9f:c2:
                    b7:e6:e1:cc:14:07:2a:bc:bb:e8:ed:20:9c:fe:eb:
                    c7:13:b4:28:ad:47:2d:1d:b4:88:f8:af:6d:0d:62:
                    40:7c:16:6d:f9:da:31:ba:d8:76:bd:37:23:da:5a:
                    ca:56:8e:10:17:bb:0b:20:40:93:0d:9e:d1:42:c6:
                    0c:e5:f1:7c:8a:2b:4b:b9:7e:46:6b:67:95:5c:4e:
                    17:96:96:e0:8d:2c:ec:b5:bf:9a:b3:b9:ad:4a:7a:
                    15:e4:f8:74:95:9b:fe:f7:5a:be:08:63:e1:6d:5f:
                    ce:2a:3d:df:7c:bd:df:df:fd:43:74:e2:0d:d1:06:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:2A:66:99:AC:E4:BD:3A:BF:35:52:C3:9B:44:12:AB:DD:29:44:62
            X509v3 Authority Key Identifier:
                keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:2e:a6:4d:be:6e:6b:f8:b4:9c:d5:c2:40:df:c4:26:f9:54:
         fc:bf:c4:b3:d3:38:12:97:cb:12:25:9b:91:f1:59:82:e9:d8:
         ec:ff:34:a3:1b:95:5c:89:68:93:79:98:5d:a2:08:47:04:52:
         16:8e:67:a5:63:1e:e6:44:9f:54:44:4c:25:8d:e1:cc:66:71:
         9d:0d:55:f9:b2:66:2c:10:61:f8:f4:bb:2a:39:71:a9:69:d7:
         87:68:65:e0:ef:e3:12:ca:bc:f4:8e:b4:26:f1:ea:4d:64:95:
         88:50:51:ad:52:78:e1:a1:45:aa:24:e3:f9:bd:36:8a:5f:eb:
         eb:b5:36:a5:fe:e1:24:a0:90:9e:e9:34:99:fc:41:85:23:d8:
         58:8e:89:1f:b4:14:13:16:5b:8a:8a:57:b9:eb:15:5d:34:42:
         fb:91:b6:bc:1b:eb:81:62:52:37:2d:33:6e:20:8b:cf:41:44:
         b8:b8:a4:67:d9:00:de:cf:94:ea:64:89:3f:93:c6:03:e8:7a:
         91:f6:55:e6:61:de:b0:d5:0d:8a:8c:28:94:0f:e7:8c:81:82:
         0b:3f:62:f4:2c:ed:31:1b:5d:12:ac:72:1e:85:57:7c:71:0e:
         51:d3:f6:e4:5b:e9:84:e7:e8:9a:c2:a0:f7:51:7f:4a:08:50:
         2f:da:82:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:28 2026 by rpki-client