Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
File:                     W81A0QtW87Uy-g39AdgX75PaGjQ.mft (raw, json)
Hash identifier:          GkOImV+nwCtgET4DHE4Uf0FMDTEhaCSyFsk9iIheKyk=
Subject key identifier:   8B:19:2E:A3:43:EB:FA:09:D5:47:5C:7B:25:0E:09:48:14:94:00:B8
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Certificate issuer:       /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial:       019D25F19398A2971ECE420FE63F809787C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 17:01:22 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:22 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:22 +0000
Files and hashes:         1: B-ipl06RCWSyO8XBJ-hwnFvouQw.roa (hash: EFSXhuwpta/o/xO0QXVlB1N99rMSOx3Z+qLKerNeRok=)
                          2: H7G_7bTeqdvtcXVR3yqogaf3lfQ.roa (hash: RgEJccL4YxP+zy0/GbaL0v6Pn2wFJVH4GOhtxU+cMZc=)
                          3: W1cAPJ3_hsin5sg3SFN-I-fRi7Y.roa (hash: erx02c52Q0mpo1XHedFTyVKhLZoX/L7oImNg9iLQdyM=)
                          4: W81A0QtW87Uy-g39AdgX75PaGjQ.crl (hash: MXKsLEtMsy+PYloq5lX2wBBtQc1ravaSMY2ZBFsHsjg=)
                          5: pMQXxEOhNC3L03-8jdBql4cTmpo.roa (hash: L9l8VW8pVLnWaC4+KRR231nu9MmbKspDVI+1+UNnt7E=)
                          6: pnnIhpP38neAWfse9VRoQKiOKmY.roa (hash: 0a6BLWSRUU/g3QRVLjCg3wl3FgGiERJdF4i+BbucZF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:93:98:a2:97:1e:ce:42:0f:e6:3f:80:97:87:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
        Validity
            Not Before: Mar 25 17:01:22 2026 GMT
            Not After : Mar 26 17:01:22 2026 GMT
        Subject: CN=8b192ea343ebfa09d5475c7b250e0948149400b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e6:40:0c:86:08:91:49:14:27:70:3f:97:e8:
                    fd:9c:6b:87:3f:9a:67:a8:63:a6:05:41:1f:84:45:
                    82:2b:14:67:82:f2:72:72:a4:03:99:0e:11:7c:50:
                    32:aa:d3:bb:62:2a:eb:42:6c:d3:59:b2:d4:10:3f:
                    76:7e:d8:20:17:13:2c:1c:18:26:e6:dd:38:15:02:
                    e0:a1:aa:87:98:9a:ef:2c:dd:25:13:05:56:11:4e:
                    86:64:f5:1e:a2:e9:88:1a:bb:94:40:36:e8:8a:14:
                    f4:af:ea:fe:8c:ae:15:9a:47:f0:b7:65:f1:54:4e:
                    f9:7a:ba:a3:96:f5:cc:4d:c0:1a:23:df:00:76:83:
                    fd:9c:52:b6:a4:3b:4c:08:ae:7a:cc:c7:17:d7:6a:
                    28:ec:82:82:07:c4:a6:bd:18:86:9c:36:c0:60:ce:
                    9e:18:4f:09:4e:a8:b6:77:da:75:92:e7:f3:86:cc:
                    a6:1a:42:64:c1:6c:5d:cd:93:f8:3d:97:a7:b4:65:
                    ea:41:8d:85:7d:d1:dc:1c:6b:ec:b0:07:8e:5c:12:
                    dc:87:19:63:3e:1c:79:62:14:e0:c3:95:ea:a1:3e:
                    bb:ce:9a:9d:ab:ba:f4:64:b7:21:80:9f:13:68:5d:
                    74:80:dc:4c:e4:29:fc:ab:60:16:a0:b9:1e:63:46:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:19:2E:A3:43:EB:FA:09:D5:47:5C:7B:25:0E:09:48:14:94:00:B8
            X509v3 Authority Key Identifier:
                keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:94:72:46:2c:7b:30:77:23:71:a4:48:2c:9a:f7:00:01:
         73:ed:63:75:48:9b:aa:02:a3:f5:1f:9b:fb:7f:66:f3:9c:8e:
         9a:0a:31:3b:67:4d:dd:ed:93:94:cf:92:15:30:bb:57:55:ff:
         e2:7f:f7:57:b4:d7:0d:3e:fc:9e:54:03:9f:97:a7:8d:c1:78:
         b9:69:a1:cd:3f:0f:8c:4f:9b:7f:bc:41:6d:14:85:99:78:5a:
         75:e4:03:3d:15:6d:b5:36:6f:e1:f3:6e:73:8c:36:21:ae:e0:
         be:a1:0b:f7:ab:e2:2c:55:5f:06:bb:3f:1e:14:d8:47:37:af:
         78:7c:4e:85:bc:01:68:0b:dc:20:c2:1d:41:ef:2c:96:7c:6b:
         58:20:e1:1c:de:9f:7c:3c:b2:f6:c6:7e:e6:87:04:a0:44:de:
         ad:c1:a6:62:ca:0c:49:a3:d9:93:9f:46:5e:d6:65:35:95:d2:
         1c:66:e1:be:9b:06:e4:9e:b5:93:dd:bb:51:40:9e:11:79:70:
         5d:39:15:88:54:1c:e8:19:fc:f9:93:8c:a6:60:02:23:f4:9f:
         4d:ef:63:52:8f:cc:d3:8f:b5:09:f0:50:47:90:cc:ea:55:c0:
         38:6c:2f:22:a9:d2:6b:4e:d5:6c:5a:f5:17:3f:7a:a7:37:77:
         5f:a1:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:35 2026 by rpki-client