Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
File:                     WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json)
Hash identifier:          65g/nAQPc7Ej9NFM8Zu3wTcizQMTR4nojACsBQxPXhk=
Subject key identifier:   DB:A6:96:66:56:37:C2:0C:C7:B4:2A:12:A8:74:17:E6:84:A6:0A:5A
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Certificate issuer:       /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial:       019D27A8E50EACB827C1DE4E80F9928967EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 01:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:13 +0000
Files and hashes:         1: HbYZTtGMJhum7wVah1TSuSIfi6E.roa (hash: guI90kmsxTQKYCpZeNJdycDZFfRWof/q9BI7u0wU7lg=)
                          2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: RbcfuWPhw/qaxFnSil7MkbRIARzygf3CTX/sfcfqZ3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:e5:0e:ac:b8:27:c1:de:4e:80:f9:92:89:67:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
        Validity
            Not Before: Mar 26 01:01:13 2026 GMT
            Not After : Mar 27 01:01:13 2026 GMT
        Subject: CN=dba696665637c20cc7b42a12a87417e684a60a5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:08:3d:fb:6f:69:35:e1:54:5e:b5:07:a3:58:
                    69:3d:ea:52:e0:e1:a3:7f:31:0a:96:98:56:3c:a8:
                    46:69:f8:71:bf:51:e9:b7:02:36:16:d6:33:f1:83:
                    21:ab:44:c7:2a:55:2b:72:35:15:de:88:9f:1e:37:
                    77:86:f8:79:59:99:b3:a9:86:f2:37:ce:ea:2a:48:
                    ec:60:67:23:9f:7c:1c:ab:b7:9a:c0:c3:6d:d6:21:
                    ed:c4:83:eb:6c:53:f6:34:15:7e:ef:cd:f4:34:20:
                    fc:6a:20:40:48:0e:53:bf:24:d5:53:59:43:71:95:
                    0b:31:e1:69:f6:54:15:b4:fd:3f:c2:ad:b5:0b:28:
                    37:18:fc:71:19:81:b6:bf:c1:e5:c3:8c:e2:ae:72:
                    73:9b:d3:36:2f:74:f0:46:4d:c7:ce:33:09:0a:78:
                    86:e6:dc:d0:c8:84:50:bc:c1:93:84:7c:bc:2e:66:
                    47:43:2b:b4:ae:f3:15:2f:c7:02:d0:3b:0e:fe:8c:
                    41:5e:01:5f:99:1a:9b:a6:f8:db:ac:c0:16:16:06:
                    0b:8d:13:0d:20:84:a9:33:04:4d:16:a9:a3:18:a7:
                    a8:03:a4:08:4f:37:20:c0:84:9c:9a:b3:ea:67:e9:
                    7c:9b:0e:b1:18:17:a9:83:b2:90:e6:1d:97:3d:80:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:96:66:56:37:C2:0C:C7:B4:2A:12:A8:74:17:E6:84:A6:0A:5A
            X509v3 Authority Key Identifier:
                keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0a:de:1a:8d:da:ee:97:91:fc:37:69:3e:6c:e6:97:7e:0b:
         a8:cf:80:4d:7f:b7:1a:f3:7a:48:d2:84:f2:8d:de:0e:b0:8d:
         ca:be:49:1b:4d:45:74:d6:b4:e4:63:b0:94:4f:73:c8:07:08:
         18:5e:53:a6:a3:99:66:b4:b6:83:b5:8c:3b:07:17:c5:c6:18:
         45:d5:56:52:43:3c:73:89:44:aa:fa:aa:d8:3e:13:24:d4:aa:
         9d:5c:4b:64:6d:2f:69:67:f2:24:c0:b0:1e:25:9b:50:68:49:
         24:35:fa:16:8f:12:01:d2:68:e9:c1:a9:97:ca:55:e1:0a:eb:
         8e:a0:99:34:d0:50:0c:a2:96:24:4d:c8:dd:a1:4a:2b:e5:ff:
         81:ff:46:3c:2d:5f:85:a8:2d:ff:6f:9e:24:cd:13:06:fb:e3:
         89:55:43:44:a9:3f:04:59:ef:d0:90:07:a5:73:b8:ea:e4:ca:
         04:cd:ea:1f:0d:23:13:9b:fb:a5:60:7f:a1:7c:f7:9f:9c:ab:
         2c:2a:aa:d2:2d:e9:cb:ec:25:5e:c9:1b:02:07:ea:ac:5e:7d:
         70:6c:a2:1f:7e:f4:2a:f5:51:da:52:75:e5:17:7d:fc:9d:b5:
         e7:61:ed:2f:56:d7:e7:ee:83:b2:dc:27:38:ad:a3:c3:5e:d8:
         7d:38:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:56 2026 by rpki-client