Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
File:                     W5YiHahfbIqAcDV2aDrSw5PyO8w.mft (raw, json)
Hash identifier:          ldwMtla2Ncn6qsU5xzfOA4+XjmfRUWs9ki5aebhwSbA=
Subject key identifier:   1E:00:6C:EE:FC:E0:46:4B:FC:A4:1C:3A:E9:A3:28:38:A7:7B:49:97
Authority key identifier: 5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC
Certificate issuer:       /CN=5b96221da85f6c8a80703576683ad2c393f23bcc
Certificate serial:       019D273B390FF11700FBEEDB991642D76EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
Manifest number:          0831
Signing time:             Wed 25 Mar 2026 23:01:25 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:25 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:25 +0000
Files and hashes:         1: VAZohNpvO9_o7KjFilOTjZZYLIs.roa (hash: rwnYRxIBD/e1mgHLvJoCajFd/31HX2F77fRGUhaXShQ=)
                          2: W5YiHahfbIqAcDV2aDrSw5PyO8w.crl (hash: 30w8ZEVwLwIWWHIYIWQC4tSw+0Hx7XZ6zGVJS3mcs+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3b:39:0f:f1:17:00:fb:ee:db:99:16:42:d7:6e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b96221da85f6c8a80703576683ad2c393f23bcc
        Validity
            Not Before: Mar 25 23:01:25 2026 GMT
            Not After : Mar 26 23:01:25 2026 GMT
        Subject: CN=1e006ceefce0464bfca41c3ae9a32838a77b4997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4c:95:76:93:f5:7c:5a:3c:a8:10:88:f2:76:
                    fe:d7:af:23:04:be:9a:71:a0:4b:66:1c:12:69:c4:
                    86:0e:1a:6b:c4:be:37:6f:e1:4a:d2:ca:af:30:ca:
                    37:f4:f4:28:82:2f:23:b2:c5:b7:a3:e4:ea:23:ba:
                    ea:c0:7d:0f:c2:25:90:65:da:8a:de:13:79:3d:35:
                    c5:7a:44:22:27:b2:30:94:a1:c6:d4:6f:b1:b2:bc:
                    03:49:c9:1f:18:7e:0a:3b:a2:4f:0d:cd:d5:d7:a0:
                    99:8b:d4:02:1d:86:29:3b:9e:9c:6d:2a:ff:7c:7b:
                    ac:d3:e1:05:e4:39:5b:5e:4c:ae:6b:c2:17:05:96:
                    79:89:da:e7:79:7c:97:06:17:5f:95:9b:fc:80:41:
                    a8:cb:db:0e:02:47:49:c2:a3:75:45:40:57:bd:ca:
                    7e:d6:36:18:fd:b6:25:7e:39:ea:32:e1:1b:84:8e:
                    96:12:e1:71:15:75:cb:d9:9f:0e:1e:2b:5d:ff:f5:
                    83:2c:c3:ff:c8:65:00:48:cf:5c:07:ef:1b:81:88:
                    07:78:93:5d:df:d6:ff:ce:07:9d:6d:20:97:02:55:
                    e6:6b:2e:b4:57:70:b6:b8:b5:4b:69:c8:b1:75:3c:
                    c5:a2:b4:b5:ef:28:6a:0c:b0:22:ca:36:24:7a:19:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:00:6C:EE:FC:E0:46:4B:FC:A4:1C:3A:E9:A3:28:38:A7:7B:49:97
            X509v3 Authority Key Identifier:
                keyid:5B:96:22:1D:A8:5F:6C:8A:80:70:35:76:68:3A:D2:C3:93:F2:3B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5YiHahfbIqAcDV2aDrSw5PyO8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/2603bd-815c-4fb0-9b9c-553458c90899/1/W5YiHahfbIqAcDV2aDrSw5PyO8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:12:e2:45:0d:a8:40:ed:ff:b8:73:dd:38:90:46:71:ad:41:
         86:d8:79:1f:ee:82:3a:ec:98:08:0a:29:50:c3:6f:2f:4c:84:
         60:7d:29:49:c1:a6:ce:3f:c3:41:cb:c9:ea:3c:9e:7b:ff:1c:
         f4:b0:cd:4e:23:72:99:96:dd:2a:b3:be:0d:f1:26:f5:b8:96:
         29:9e:6b:ea:56:93:1a:6f:3f:b4:f4:eb:33:1e:57:00:59:7c:
         29:bb:90:0b:4e:63:9b:0d:dd:13:fd:83:95:13:9f:98:49:d3:
         7e:74:11:79:32:fb:57:6c:31:c6:f2:e1:98:39:6a:63:47:c4:
         bf:8c:0d:19:14:1d:1e:7e:a9:78:84:1e:1a:8b:69:23:c5:2f:
         78:da:28:6f:21:aa:7a:78:92:05:10:78:e6:3a:93:b8:62:ee:
         7d:95:57:ae:a0:1a:e2:53:fa:e4:93:25:97:23:c4:ac:9a:b2:
         17:6c:19:73:85:50:fd:91:2d:a6:f2:7a:a4:9c:91:83:5c:5b:
         60:a8:d3:87:60:7d:7a:03:0e:7b:7f:19:ef:fe:ab:53:31:72:
         7a:59:19:5d:ab:91:5f:5d:ae:00:4a:49:87:a3:39:ec:e0:68:
         4c:d4:88:e0:b3:e7:7f:cd:a9:9f:48:4e:21:80:f5:9c:0a:74:
         42:67:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:56:01 2026 by rpki-client