Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
File:                     W5Mah05ojyfJWsrY29Md9pjyEX0.mft (raw, json)
Hash identifier:          1kwBGujyznlaTLKnuxmUPZMKkI4T7x1c1wsxptfgwtY=
Subject key identifier:   08:F5:05:3A:76:B4:D3:C8:DA:CE:21:5B:2C:C7:95:C3:B7:76:F4:C5
Authority key identifier: 5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D
Certificate issuer:       /CN=5b931a874e688f27c95acad8dbd31df698f2117d
Certificate serial:       019D265EE2B9456C9565BFAEEBB154D36D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
Manifest number:          0296
Signing time:             Wed 25 Mar 2026 19:00:45 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:45 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:45 +0000
Files and hashes:         1: 2Ndf1GB--RcVTegC6zPQAxJQe4g.roa (hash: 0L8O9kiu2xZ+X6I/3EY4idZtFO0i4I4ns+3oUeMchLU=)
                          2: W5Mah05ojyfJWsrY29Md9pjyEX0.crl (hash: dETOJYpDSatDeIxYBmD04eVg3vnM7BTpT65rvxXkDqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:e2:b9:45:6c:95:65:bf:ae:eb:b1:54:d3:6d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b931a874e688f27c95acad8dbd31df698f2117d
        Validity
            Not Before: Mar 25 19:00:45 2026 GMT
            Not After : Mar 26 19:00:45 2026 GMT
        Subject: CN=08f5053a76b4d3c8dace215b2cc795c3b776f4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:f3:fb:b3:a7:78:c2:84:e7:d4:4e:59:3a:
                    a3:81:33:d5:db:4f:71:53:87:90:5f:c5:99:ab:eb:
                    30:69:c0:e0:54:90:f3:3b:69:bd:02:d6:05:47:6a:
                    f8:c8:57:6b:67:34:28:47:8b:53:26:ef:14:f7:2a:
                    4f:9e:75:31:c3:80:a8:f8:df:23:01:be:cd:36:58:
                    aa:9a:e1:3d:2b:6d:35:da:4f:97:af:1c:3d:5b:c7:
                    fa:8f:18:0f:8a:df:5b:67:22:cc:d6:5e:0b:0f:80:
                    91:70:a8:de:33:8c:08:fe:5d:df:8a:73:04:06:e4:
                    b7:a0:aa:77:d6:61:0c:43:d6:a3:e3:b0:f0:9f:65:
                    82:06:b2:44:16:24:46:cb:60:94:2f:a6:33:14:9e:
                    dc:7b:46:aa:20:3e:36:49:e4:85:0c:3f:e9:4a:a7:
                    a4:47:a1:95:f6:c1:1b:08:37:dd:cb:d3:45:6c:f7:
                    4d:17:25:12:bb:59:42:c2:4f:85:1f:6a:26:df:d2:
                    6d:a2:00:11:6b:21:22:81:16:5d:c5:72:a5:2c:3f:
                    ca:51:11:13:59:27:ac:cf:91:4c:c7:71:02:95:78:
                    23:92:7c:90:26:60:47:30:48:40:39:e1:54:ff:3c:
                    02:23:71:b4:52:55:8b:09:1a:b3:64:e4:cd:ab:d2:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F5:05:3A:76:B4:D3:C8:DA:CE:21:5B:2C:C7:95:C3:B7:76:F4:C5
            X509v3 Authority Key Identifier:
                keyid:5B:93:1A:87:4E:68:8F:27:C9:5A:CA:D8:DB:D3:1D:F6:98:F2:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5Mah05ojyfJWsrY29Md9pjyEX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ef0ee4-a398-4eec-9529-9ae6a61a361d/1/W5Mah05ojyfJWsrY29Md9pjyEX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:c6:fc:de:69:d7:3c:ee:96:1b:26:a4:19:b9:52:21:23:56:
         7c:56:96:21:06:7f:44:ad:52:dc:d8:47:14:82:13:82:d5:7e:
         35:7b:6f:fa:55:fa:8e:c7:ee:e0:30:a2:1e:91:c7:24:91:39:
         90:f2:4b:f6:ef:bc:c8:1e:b6:0b:3c:e1:72:d2:19:a3:a2:36:
         58:cb:c6:2e:73:67:e8:51:2b:48:82:c9:f4:ae:e9:fe:e3:48:
         0c:14:6e:a7:ef:f6:38:2a:77:49:cd:03:d0:b9:b1:67:9e:43:
         74:d8:b2:58:41:8e:06:6f:bf:94:30:e0:31:fa:95:26:41:e1:
         f3:f6:7d:87:66:8f:93:f4:a5:42:96:5d:c9:80:65:37:b0:75:
         f5:19:cb:6a:44:ff:92:91:56:3e:3f:5e:0a:4f:a9:62:d1:ce:
         55:1f:66:57:d6:31:e8:ec:a4:2a:c5:ab:4e:c0:45:94:4f:b1:
         61:88:56:e9:86:02:4a:45:e3:ab:cf:21:2e:e1:61:48:7d:7e:
         98:8f:fe:c5:d3:de:07:60:66:a5:71:43:e6:49:af:79:ba:e2:
         2c:b3:f4:95:cb:f7:7b:a3:93:86:11:c0:19:1d:db:22:d1:d0:
         5a:b4:5c:60:2e:dd:1d:24:e9:86:4a:7d:c7:05:09:a2:73:20:
         cd:1e:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:35 2026 by rpki-client