Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File:                     WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier:          GTYmjek9ktlqQxFKzJoacWOz0Op3/f2R6Pf06vsZ/Fw=
Subject key identifier:   3D:79:5E:55:B8:C6:60:16:02:0D:23:DF:5C:D3:D0:4D:A4:F8:66:87
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer:       /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial:       019D28BB2FD2710AE938E70A0929EF065A6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number:          018C
Signing time:             Thu 26 Mar 2026 06:00:49 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:49 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:49 +0000
Files and hashes:         1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: sqnX+Na8TGBz3iua60+4nuxzKcu1toC3885mce+84kc=)
                          2: pSXCDiBSJhGXaOXef7Y4YTCUUZ4.roa (hash: Q877kwTSoXnFjxRbDVpx+FXDEeiawiNVCD8IEmWvnEU=)
                          3: uYGcHhhFPe7VLGSrKRieQheWk-s.roa (hash: B+/rEvInmdSaETNcMmHgQnukRKOmNnE7CTKIUtJ66/U=)
                          4: wI-ypASrJ7m0N79u1RJq_k57AIc.roa (hash: U4IOvrmrguD6t/ZtF0LoNyn+uQVk4Bj7HsVFQCe+6FI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:2f:d2:71:0a:e9:38:e7:0a:09:29:ef:06:5a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
        Validity
            Not Before: Mar 26 06:00:49 2026 GMT
            Not After : Mar 27 06:00:49 2026 GMT
        Subject: CN=3d795e55b8c66016020d23df5cd3d04da4f86687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:67:7b:5d:57:0f:56:71:53:c4:c1:79:ef:93:
                    af:2b:07:9b:4d:87:39:fd:95:d7:e2:22:eb:67:5e:
                    7c:64:68:c5:44:55:18:72:cf:ea:4a:68:04:7b:e5:
                    10:bb:53:0a:6d:6e:5c:5e:ab:fc:1d:46:ad:c8:f4:
                    15:79:e4:7c:6a:ea:b8:77:16:0a:85:00:ca:fb:38:
                    49:46:d0:cb:f0:03:93:1b:cb:63:bb:39:e7:4c:be:
                    b9:45:92:54:ad:bd:be:64:75:41:8a:cd:6e:12:90:
                    48:0c:ad:34:4e:d9:d7:64:fa:c1:89:0f:44:d6:86:
                    9e:89:10:31:24:ad:c7:4b:cc:19:f2:7f:7f:2c:df:
                    17:79:f3:5f:86:94:16:33:b1:7b:e2:90:10:b7:6b:
                    60:04:f1:f4:85:cc:07:93:cb:a6:28:c1:32:a9:71:
                    04:25:6d:0a:33:4e:f2:93:36:17:da:46:36:b1:e3:
                    44:04:d6:30:cd:6d:a9:51:69:a5:ab:94:e7:e3:0c:
                    29:2c:e0:f0:38:20:73:9b:03:29:97:c7:58:fa:03:
                    aa:1c:c0:69:58:4f:fa:98:67:58:ec:7d:6f:c3:9e:
                    0e:14:aa:9e:2d:d0:c8:91:cc:7d:eb:1e:32:7d:ee:
                    7f:da:2d:a3:9c:66:ea:30:db:d2:93:01:17:17:5f:
                    c8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:79:5E:55:B8:C6:60:16:02:0D:23:DF:5C:D3:D0:4D:A4:F8:66:87
            X509v3 Authority Key Identifier:
                keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:c8:f8:97:ef:a0:2d:51:09:a0:e8:a4:08:89:11:f5:80:
         13:82:b4:89:36:d8:0c:91:31:2b:90:79:46:d7:b6:78:7d:fa:
         92:84:91:98:18:8e:47:bb:f9:79:05:7f:22:56:b4:43:d3:8d:
         e4:09:40:e3:dd:15:5e:b1:71:32:c8:24:bd:06:de:30:1f:d8:
         2b:81:21:40:84:52:a7:f5:45:e4:7e:0c:00:19:01:98:39:c2:
         d4:a0:0f:7d:7a:ad:40:1a:d7:0b:c9:27:7b:dc:5c:ef:0a:63:
         ad:9a:72:a8:3d:0f:13:69:8b:04:aa:5e:48:23:e6:ee:40:fb:
         33:10:a2:e7:63:8c:bf:75:91:5c:3d:77:00:53:df:66:09:20:
         0d:9f:56:bc:ff:9d:ef:c1:f8:d8:38:ab:86:c8:70:fa:56:63:
         ef:cd:ba:e8:a3:b8:d5:8f:52:7b:aa:6f:06:85:f2:5b:3d:1b:
         32:a6:62:23:b3:dc:7e:ba:46:22:dd:fc:5f:76:54:0c:3e:ce:
         9d:b1:28:12:54:3a:ee:59:c8:0e:73:7f:f0:e0:fb:c4:cd:e4:
         5e:2e:7a:b0:88:0f:bd:de:dc:f3:bf:3c:f5:6f:5b:c1:bb:2c:
         25:45:50:a2:5a:62:3b:f8:5d:e5:9d:d3:28:03:c6:e0:7c:e5:
         5b:33:1e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:51:20 2026 by rpki-client