Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
File:                     W5sFqT1fP8xaCwEEwbD20kws0fY.mft (raw, json)
Hash identifier:          e+S0k3GQzYae1XdTQL2b6ylPtGO28Sxf9XdUTk39x9A=
Subject key identifier:   E1:61:F2:3C:53:E5:5B:FD:52:5B:71:4B:54:1E:14:77:A8:63:ED:92
Authority key identifier: 5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
Certificate issuer:       /CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Certificate serial:       019D28BB852F39BD5932F7B2A128D7B1BFB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 06:01:11 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:11 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:11 +0000
Files and hashes:         1: W5sFqT1fP8xaCwEEwbD20kws0fY.crl (hash: 0+iqEIruspEaJf1FjdcUGG2iOyRSS54vvtdkUZMmdj0=)
                          2: dq4DH4ehjd_s30puz5wrDwFkAKs.roa (hash: TMIQQ+KiriAq6Ko2rrLQIsSTmlAljTTcsIRFquuVlnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:85:2f:39:bd:59:32:f7:b2:a1:28:d7:b1:bf:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
        Validity
            Not Before: Mar 26 06:01:11 2026 GMT
            Not After : Mar 27 06:01:11 2026 GMT
        Subject: CN=e161f23c53e55bfd525b714b541e1477a863ed92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:92:3c:65:f8:a6:1d:b3:10:a9:5a:82:0c:f1:
                    a1:35:2b:ed:c9:96:4e:d6:69:4b:4a:e5:19:03:46:
                    5c:3a:94:88:0c:2b:42:85:0b:e6:f4:99:3a:3f:7e:
                    fe:bf:64:db:2f:08:df:b6:dc:19:58:07:9c:3f:68:
                    86:86:d0:2a:ab:11:d8:77:49:c3:e8:89:6a:ce:58:
                    61:a0:f0:1c:06:f9:ea:11:08:3d:1d:59:65:6c:c6:
                    bf:df:0c:57:48:50:26:34:b0:b6:41:c8:13:1c:32:
                    ff:4d:fa:b1:cf:03:6a:96:22:41:57:bc:8d:9e:98:
                    ec:89:21:71:31:d0:96:69:c7:2f:e1:7d:54:64:0c:
                    e8:d9:b6:3f:0c:99:f6:34:2f:82:ee:b0:37:53:55:
                    64:d6:cb:15:e6:b7:79:e6:b9:59:30:61:b9:b4:dc:
                    dd:25:b4:ec:17:a0:be:cf:e1:f4:1b:55:03:18:8c:
                    f0:de:a1:e6:4f:1f:39:14:98:60:6f:44:0f:57:5d:
                    9f:94:d2:2b:e3:2c:b5:05:67:8b:b7:f7:db:c0:f7:
                    09:ae:48:69:97:37:3a:9e:88:cf:f7:66:73:35:d8:
                    5b:7f:e9:0b:64:9e:88:69:4d:f2:19:9f:d2:70:30:
                    6b:6e:82:ec:31:ee:8f:53:f1:12:37:fa:66:75:6d:
                    ae:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:61:F2:3C:53:E5:5B:FD:52:5B:71:4B:54:1E:14:77:A8:63:ED:92
            X509v3 Authority Key Identifier:
                keyid:5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0f:91:2a:5a:b7:4e:e0:5f:08:0e:35:85:ba:c7:1e:4e:62:
         ca:5d:90:18:b0:75:98:44:f3:c9:de:19:b6:40:50:37:38:14:
         48:f7:f8:8e:14:ff:40:f4:7b:ad:33:74:fd:d5:0a:dc:20:11:
         66:b8:53:18:7c:a7:d4:3a:3e:bc:1b:e4:d2:01:75:de:1a:f6:
         c0:92:99:a8:0e:84:af:41:2c:29:82:e0:51:1e:b4:9c:e8:53:
         34:86:c7:8e:19:56:ad:8f:73:c2:cd:d3:c0:cb:a0:3f:14:c3:
         be:7f:7f:39:a3:ed:d5:01:10:d8:36:db:20:d6:7f:44:12:1b:
         fc:7f:ba:f5:9a:1f:d7:ff:f3:1a:98:60:9e:1a:92:8c:d6:31:
         0e:90:fb:0e:9b:b1:0c:38:74:05:ff:84:ac:a4:31:79:65:64:
         c8:d8:96:ab:1d:73:f6:d8:60:e2:9c:67:9d:33:29:91:a8:0b:
         ad:35:33:f5:7f:d6:d5:a0:6b:e2:ae:95:a6:79:2e:44:a2:77:
         c0:f4:ca:12:ae:bd:19:d7:59:3f:8f:00:ef:f6:37:43:e0:39:
         6f:c6:41:8e:1b:81:f1:6e:d5:c3:98:1f:6c:09:fe:32:d5:45:
         a1:32:1e:6c:8d:a7:1a:00:25:3d:be:13:90:e8:1d:da:db:39:
         c2:5a:79:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:45 2026 by rpki-client