Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
File:                     WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json)
Hash identifier:          d9Kamml9jwAeHb4hDE4QDnTM/DDHdg0iNn9ApXBcPyM=
Subject key identifier:   06:26:6F:0A:61:BA:79:86:B1:72:59:66:25:BF:A1:4C:28:09:31:44
Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1
Certificate issuer:       /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
Certificate serial:       019D27729C56E754226B95B6F8FFD7A4604F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
Manifest number:          0DE0
Signing time:             Thu 26 Mar 2026 00:01:55 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:55 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:55 +0000
Files and hashes:         1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=)
                          2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: J7/8C9UdIGs2oFT5emFtbqUsok05REuk7luDGXSNhWc=)
                          3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:9c:56:e7:54:22:6b:95:b6:f8:ff:d7:a4:60:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1
        Validity
            Not Before: Mar 26 00:01:55 2026 GMT
            Not After : Mar 27 00:01:55 2026 GMT
        Subject: CN=06266f0a61ba7986b172596625bfa14c28093144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8f:5a:4d:1d:bd:64:ca:27:62:33:b8:7e:eb:
                    8b:85:0b:c6:e2:c3:8d:82:28:a6:5b:87:e0:c9:2b:
                    b7:b1:77:ec:81:5d:06:a4:d4:7b:25:6c:3e:cd:40:
                    33:2d:8e:58:50:08:d1:a8:2e:70:ba:2e:f2:4c:7b:
                    b2:1b:17:75:76:90:d2:96:4f:41:a3:8a:a3:c2:76:
                    2c:b1:a3:8c:bc:11:fb:61:8e:72:36:26:ae:5a:2a:
                    b0:d0:c5:b0:cd:bc:0c:34:a6:09:47:bc:6c:10:4e:
                    fe:0c:20:a2:f8:d4:9a:55:72:47:32:51:9c:01:49:
                    10:d2:93:bc:bb:54:0e:24:6d:fc:39:26:59:f8:f8:
                    cc:2a:93:70:99:68:c4:6a:6a:5e:c2:a9:09:a7:f1:
                    3e:2b:8c:f6:06:ba:8e:ba:72:b6:a7:13:2a:a5:8b:
                    1b:5c:d0:a0:bf:ed:dc:a4:a3:54:a1:6b:e5:a4:06:
                    6f:32:68:ba:cf:b3:db:32:38:8e:11:20:36:e5:bb:
                    4f:d7:3d:f3:f6:48:72:60:4a:d5:25:03:76:61:7e:
                    43:d4:f5:fb:d1:54:6e:8b:f5:d0:9b:6e:da:24:84:
                    c0:d6:8a:1e:92:a0:04:3a:78:e0:0b:10:05:f4:c8:
                    a8:83:e7:ba:f0:46:e3:c7:db:4c:09:8c:4d:bb:67:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:26:6F:0A:61:BA:79:86:B1:72:59:66:25:BF:A1:4C:28:09:31:44
            X509v3 Authority Key Identifier:
                keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7f:5c:a0:d2:4b:fc:cf:36:df:05:76:40:82:1b:78:0b:8f:
         a9:e9:b5:05:df:60:67:39:12:22:0f:18:d6:1f:63:c5:cd:93:
         36:62:d5:55:86:44:af:82:41:ce:f3:9d:0c:11:4b:9b:0b:8e:
         e7:f5:43:6e:ba:04:40:5a:da:41:ad:3d:a8:4e:b8:f0:9e:67:
         3e:5a:34:ac:e8:13:aa:65:15:ca:5d:bf:f5:27:e2:be:ee:5a:
         54:7a:88:68:4e:cb:88:60:a5:1c:ab:93:2b:12:5f:97:d9:4e:
         cd:ff:f1:51:44:34:83:3d:5f:f4:c0:f6:43:6b:05:7f:fd:9b:
         d9:32:d8:8c:a4:ab:1a:16:72:7f:09:33:03:22:cf:69:dc:d0:
         b3:4a:44:4e:d4:69:f7:e6:10:89:c3:95:5b:b2:55:47:a8:27:
         8a:1d:34:7b:46:39:43:21:d1:0f:5b:59:1c:07:1e:7e:83:78:
         3f:82:0a:6f:32:bd:06:45:4a:b8:0e:57:71:97:8e:1d:4e:f4:
         c2:92:2a:87:9a:ed:08:1a:8d:6e:bf:e6:e2:51:20:0c:1e:f1:
         1b:12:36:bd:b4:84:9f:b2:05:ae:e6:a1:2a:5f:ea:a9:69:a5:
         77:3f:b8:a9:72:52:2c:0e:6a:14:26:b1:5c:0a:c3:bc:eb:b3:
         8e:29:4c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:06 2026 by rpki-client