Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File:                     WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier:          TvNo8CTD2stksPlDgNwLuLPVNenEnaGMbWOcVRsjbQs=
Subject key identifier:   B9:C9:40:34:BE:F9:29:48:B7:F0:BD:B1:5C:50:88:51:EC:97:41:C6
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer:       /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial:       019D2772D9C150BBAFC6E3683A960E33181B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number:          0AE5
Signing time:             Thu 26 Mar 2026 00:02:11 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:11 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:11 +0000
Files and hashes:         1: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: h4GmxdxMiGMuPUE/ei8SrFuM8XGz1fWLyLSwepuKv7U=)
                          2: _UtoV7e9xovL4Yza5XO1BJ-otaI.roa (hash: pIOeMdxwhh897iB8QkqYsFeOjgGBViVJMD2fd5tAswU=)
                          3: gQ9zxL655PUdBXaMJDbJpICNJxQ.roa (hash: 2lr1Ng0AF8Hz/bk+2ootSc8PFmQwTz37O9UurvJBhGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:d9:c1:50:bb:af:c6:e3:68:3a:96:0e:33:18:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
        Validity
            Not Before: Mar 26 00:02:11 2026 GMT
            Not After : Mar 27 00:02:11 2026 GMT
        Subject: CN=b9c94034bef92948b7f0bdb15c508851ec9741c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b9:ad:5d:f4:1f:0c:92:92:61:21:91:4d:58:
                    80:66:e9:80:a5:43:e0:f5:af:e4:8b:4d:97:dd:57:
                    70:cc:ac:81:96:79:8a:17:2d:b8:00:14:bd:e4:44:
                    db:9f:c4:b4:1b:2f:5d:85:4d:f2:77:af:5d:93:6c:
                    f7:4f:1d:2a:60:d3:74:d8:18:ba:e0:ed:6a:9a:c2:
                    9d:e2:58:1e:50:09:e2:89:1f:7d:ba:41:51:2f:06:
                    d4:e4:c9:0c:af:8b:97:b6:2d:69:c0:28:41:c1:55:
                    1a:f9:32:71:9e:50:44:3a:be:b3:f5:97:a5:1d:78:
                    91:b5:ae:65:84:b1:f1:27:6c:66:a5:f6:a5:63:c4:
                    c3:7b:ff:72:29:20:07:56:97:47:29:33:e0:a7:6f:
                    83:8d:6a:f7:69:2d:f1:87:8d:70:e3:0b:56:76:51:
                    82:cc:41:cb:27:ee:08:6e:3a:9a:1d:b5:c5:1b:73:
                    c0:40:bb:3f:83:f8:a4:5a:3d:04:e7:f2:9e:98:39:
                    2a:97:21:d6:0c:50:dc:15:5b:8f:31:3b:a9:ce:94:
                    37:da:e7:ad:a1:ca:73:e8:d8:da:fa:b2:d5:f5:fe:
                    76:dd:26:c6:28:6d:73:4d:d2:9c:ad:5f:d8:77:8e:
                    69:25:22:35:f8:d5:2c:6b:ba:88:15:40:25:96:49:
                    21:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C9:40:34:BE:F9:29:48:B7:F0:BD:B1:5C:50:88:51:EC:97:41:C6
            X509v3 Authority Key Identifier:
                keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:af:c3:a0:5a:32:d8:00:6a:67:79:d7:c0:3f:c8:20:d5:ff:
         d2:68:76:54:bb:50:44:b3:04:c6:ef:ec:bf:4d:f6:e3:39:9a:
         64:85:02:d6:42:90:ea:de:05:09:c6:fe:fa:46:f5:17:13:d3:
         df:b7:d3:e7:88:82:29:0e:3b:05:e2:52:58:29:b9:10:94:ee:
         e8:59:81:5b:25:aa:ba:c7:66:3f:bb:a7:9d:0d:d0:6c:43:18:
         97:02:64:4f:f9:b7:ab:f4:13:1a:e2:56:57:7f:51:55:f0:8d:
         c5:7a:52:c6:60:45:e9:d6:dc:45:77:2a:4f:2d:db:4f:aa:16:
         61:f4:3f:34:a4:9a:f3:23:2d:60:61:b9:67:01:37:30:3f:43:
         18:99:f4:fe:81:eb:a1:92:80:86:52:55:5f:f0:8c:30:68:2a:
         22:f5:e0:66:9e:26:1f:83:b1:82:8d:fc:a9:e3:83:1c:87:3d:
         db:d5:0f:1e:65:af:08:4c:63:ca:6a:3f:46:d4:61:1c:22:23:
         79:8c:fa:4b:14:e4:63:63:e1:9e:75:3d:14:5c:e3:b6:0d:85:
         52:d4:98:6a:d7:94:ac:47:40:e0:ee:64:42:6f:ce:7e:fa:43:
         69:e3:5f:f6:5d:d6:c2:7a:98:79:ec:8f:f1:b7:68:c7:7e:d4:
         10:03:d6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:22 2026 by rpki-client