Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
File:                     W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft (raw, json)
Hash identifier:          XIlzof8ZQizy1s+V1W4jMiCFPtH31Zc/N0i2oCNwXP0=
Subject key identifier:   B4:C8:73:BB:FD:BE:0F:BE:2E:9D:BB:08:E4:C7:17:51:9A:5C:2B:29
Authority key identifier: 5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78
Certificate issuer:       /CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
Certificate serial:       019D273AAEABEB0F1DDFF297557BEA6E5919
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
Manifest number:          0631
Signing time:             Wed 25 Mar 2026 23:00:50 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:50 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:50 +0000
Files and hashes:         1: 39VInJLJ3qnhvx5iqjcKdFwEBpE.roa (hash: 6TDRzvB/lwrBZbsPGcbo4Dm9ksXI0q4yNjFzox4eAaA=)
                          2: W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl (hash: ztlnOP/bTfYKyJ5kdUfEd6QsZJbfGHz4LAh6fq98vlw=)
                          3: ub5Gbn-YsJ-NB5WNKq2Bt_YSsCA.roa (hash: 1K2JkD0zvoEdDQMkDBZtkD/kPzcmNeVAmBs9rlyU3HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:ae:ab:eb:0f:1d:df:f2:97:55:7b:ea:6e:59:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf5bda583652e0587fef84166b41f6cda8f1f78
        Validity
            Not Before: Mar 25 23:00:50 2026 GMT
            Not After : Mar 26 23:00:50 2026 GMT
        Subject: CN=b4c873bbfdbe0fbe2e9dbb08e4c717519a5c2b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:3d:94:dd:93:f4:82:3f:71:d1:b9:bb:e0:
                    fd:db:0a:7e:9e:68:8c:f4:b4:24:71:79:23:aa:68:
                    0d:87:44:39:eb:32:77:7c:f3:6e:2e:c8:b7:40:c1:
                    c9:32:09:3c:ec:75:59:af:ab:16:7b:d5:4b:e8:d2:
                    34:44:40:7c:3b:35:08:a5:20:68:15:8e:0b:4e:cd:
                    4c:c3:66:8a:94:8e:66:6e:43:36:70:3c:67:84:70:
                    1b:d6:22:70:d5:99:45:7c:97:d5:7f:8e:9c:25:03:
                    09:a6:71:c7:51:17:f4:96:75:7f:27:ff:23:32:cb:
                    6b:1f:e6:62:3e:59:53:68:0a:66:22:4b:5f:52:c3:
                    f2:dc:e4:68:c5:06:fb:fb:80:86:53:79:ad:5d:04:
                    f8:c4:11:de:47:27:4a:43:48:83:b5:48:33:d1:6f:
                    ce:fe:8c:74:25:32:b6:61:5c:32:23:00:4b:e5:c6:
                    c1:e9:c9:32:cc:65:ea:12:40:8f:06:4e:01:11:c7:
                    98:0a:a8:2b:f8:b6:3c:16:b6:81:f8:dd:5c:a8:0d:
                    94:28:dd:d5:b3:3a:71:4d:67:6b:c7:cc:a8:3f:fe:
                    a8:b5:df:4b:63:fa:98:d7:ef:a3:9b:09:ff:17:26:
                    f5:58:16:36:05:96:c1:b5:a8:55:1e:73:b6:3b:3b:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C8:73:BB:FD:BE:0F:BE:2E:9D:BB:08:E4:C7:17:51:9A:5C:2B:29
            X509v3 Authority Key Identifier:
                keyid:5B:F5:BD:A5:83:65:2E:05:87:FE:F8:41:66:B4:1F:6C:DA:8F:1F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_W9pYNlLgWH_vhBZrQfbNqPH3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c7b7dd-1f70-4bae-9d6c-2a79e5d22ae1/1/W_W9pYNlLgWH_vhBZrQfbNqPH3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:12:bb:52:02:63:f6:4f:8e:47:9e:14:15:01:88:15:3b:
         09:98:4e:cf:e6:1e:88:04:9d:61:25:47:53:8f:78:f0:98:90:
         52:02:e0:3a:ee:1a:c5:92:76:2d:4d:c7:42:3a:6a:af:1a:4f:
         ab:02:1c:e2:06:ef:2d:b3:9c:bf:76:de:b4:ba:6b:a9:3d:6b:
         c7:ab:ab:f6:47:5d:4f:38:f9:d3:3d:23:41:33:ba:d5:63:46:
         f5:ad:b8:fc:44:85:4c:66:e7:70:10:1d:dc:07:ed:ff:16:65:
         dc:cd:5f:c7:1a:0d:2c:07:cb:34:af:dc:24:88:0b:67:7e:da:
         19:7e:67:38:bb:96:6a:61:a9:fd:30:7d:33:83:9f:0b:0e:51:
         4e:80:b0:fe:6d:55:63:ef:77:e5:fe:89:5b:75:8e:1d:cb:e1:
         67:78:45:28:93:80:24:07:25:30:af:fe:d7:91:ed:18:fa:24:
         55:af:ac:08:f1:0e:ba:db:fd:65:b1:df:a2:2d:19:28:10:ca:
         7e:70:17:f1:a6:96:4c:1d:0e:78:88:9e:d2:aa:5e:7c:38:35:
         b3:8f:b7:ff:cb:72:96:3d:8c:ba:19:70:9e:80:e5:52:48:74:
         20:b3:3c:97:54:b3:c8:3d:cc:79:36:9c:54:a0:f7:91:45:5c:
         6d:5e:d7:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOq6r6w8d3/KXVXvqblkZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZjViZGE1ODM2NTJlMDU4N2ZlZjg0MTY2YjQxZjZjZGE4
ZjFmNzgwHhcNMjYwMzI1MjMwMDUwWhcNMjYwMzI2MjMwMDUwWjAzMTEwLwYDVQQD
EyhiNGM4NzNiYmZkYmUwZmJlMmU5ZGJiMDhlNGM3MTc1MTlhNWMyYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRg9lN2T9II/cdG5u+D92wp+nmiM
9LQkcXkjqmgNh0Q56zJ3fPNuLsi3QMHJMgk87HVZr6sWe9VL6NI0REB8OzUIpSBo
FY4LTs1Mw2aKlI5mbkM2cDxnhHAb1iJw1ZlFfJfVf46cJQMJpnHHURf0lnV/J/8j
MstrH+ZiPllTaApmIktfUsPy3ORoxQb7+4CGU3mtXQT4xBHeRydKQ0iDtUgz0W/O
/ox0JTK2YVwyIwBL5cbB6ckyzGXqEkCPBk4BEceYCqgr+LY8FraB+N1cqA2UKN3V
szpxTWdrx8yoP/6otd9LY/qY1++jmwn/Fyb1WBY2BZbBtahVHnO2OzvuMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLTIc7v9vg++Lp27COTHF1GaXCspMB8GA1UdIwQY
MBaAFFv1vaWDZS4Fh/74QWa0H2zajx94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMt
MmE3OWU1ZDIyYWUxLzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9jN2I3ZGQtMWY3MC00YmFlLTlkNmMtMmE3OWU1ZDIyYWUx
LzEvV19XOXBZTmxMZ1dIX3ZoQlpyUWZiTnFQSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyoSu1IC
Y/ZPjkeeFBUBiBU7CZhOz+YeiASdYSVHU4948JiQUgLgOu4axZJ2LU3HQjpqrxpP
qwIc4gbvLbOcv3betLprqT1rx6ur9kddTzj50z0jQTO61WNG9a24/ESFTGbncBAd
3Aft/xZl3M1fxxoNLAfLNK/cJIgLZ37aGX5nOLuWamGp/TB9M4OfCw5RToCw/m1V
Y+935f6JW3WOHcvhZ3hFKJOAJAclMK/+15HtGPokVa+sCPEOutv9ZbHfoi0ZKBDK
fnAX8aaWTB0OeIie0qpefDg1s4+3/8tylj2MuhlwnoDlUkh0ILM8l1SzyD3MeTac
VKD3kUVcbV7Xog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:54 2026 by rpki-client