Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File:                     WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier:          Fy4tXQ01zJxo1l6LKNoqpCNuqQ4iNeJKgOIKuIJsHJU=
Subject key identifier:   4A:13:B6:B9:D0:D2:D8:11:4F:83:27:26:97:40:E3:CC:D7:1B:F2:31
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer:       /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial:       019D2772317B486157D36BDDBF3A7908C248
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number:          186B
Signing time:             Thu 26 Mar 2026 00:01:28 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:28 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:28 +0000
Files and hashes:         1: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: KbdLKzm5ru0+TBy8BosOzLX3L6ykrV+s65UYHKy1mI0=)
                          2: l9mA3z170h7NFmy1kMczeUJigtI.roa (hash: iEhZXgkwmF/z7dDAn9Yg/lz7ECP46ZwjmUW2jhExu+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:31:7b:48:61:57:d3:6b:dd:bf:3a:79:08:c2:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
        Validity
            Not Before: Mar 26 00:01:28 2026 GMT
            Not After : Mar 27 00:01:28 2026 GMT
        Subject: CN=4a13b6b9d0d2d8114f8327269740e3ccd71bf231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e2:00:f3:12:e1:45:3c:3a:f7:38:68:27:bf:
                    65:4a:2f:6f:85:38:ba:22:81:02:a4:84:6a:61:7b:
                    7b:ae:2b:c9:df:7f:d9:2b:90:43:08:ca:89:0f:ca:
                    3f:d8:a2:ae:bd:d0:ef:e5:61:ba:44:2f:8e:da:70:
                    fd:c2:b2:53:27:69:52:38:0e:9f:c7:29:87:e0:c3:
                    48:ef:3c:b3:39:82:7c:d8:a4:21:26:05:2b:14:e1:
                    36:14:7c:aa:e9:71:5f:8d:41:bd:2f:ff:81:7a:ba:
                    26:77:5e:1e:e7:d2:08:d4:44:2d:2a:4f:f2:cc:0b:
                    0b:7a:9d:e4:8f:c5:43:75:0c:73:e9:bb:63:15:6e:
                    fb:05:fa:6b:7b:29:b6:74:97:9e:e1:c4:72:0d:cc:
                    6e:f9:c2:52:14:a2:b6:3c:0f:03:57:e1:e2:a9:77:
                    ec:3d:7f:5a:bf:bd:3c:e7:8e:e8:38:5c:17:4f:1a:
                    9c:db:f2:ee:74:58:7a:eb:30:16:91:b1:dc:29:42:
                    3c:5d:1e:5f:0c:72:be:98:ca:d7:66:19:c4:84:53:
                    6c:c5:1a:d3:f9:65:d1:3a:0c:df:68:da:a2:c9:9b:
                    9e:18:a5:c4:6f:45:94:26:45:3d:76:70:52:01:a4:
                    87:7a:b4:eb:4f:7b:7d:2d:15:49:1d:7d:63:25:eb:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:13:B6:B9:D0:D2:D8:11:4F:83:27:26:97:40:E3:CC:D7:1B:F2:31
            X509v3 Authority Key Identifier:
                keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:0a:d3:7a:b3:96:a6:5d:29:44:ce:05:0c:24:5b:58:d4:ab:
         68:a7:7e:8b:5d:da:66:57:2f:61:e9:03:d0:6c:1b:fd:35:d7:
         0a:d7:93:b4:9c:98:da:62:7a:6a:37:65:9d:77:cc:a6:b4:c6:
         1b:10:46:f8:53:7c:d5:b9:f1:82:3a:07:15:7f:96:ad:7b:79:
         fd:69:fe:71:1c:9f:35:d9:71:e1:6d:d2:ac:e2:61:16:63:e3:
         3b:3d:ec:c3:0c:6b:01:95:59:25:df:32:1b:7e:f0:6a:8a:fd:
         52:75:72:93:7c:99:5a:83:44:1f:e3:d1:e5:27:02:cc:ca:f6:
         82:6e:d1:27:d5:a2:3e:8c:ba:f7:2e:75:e6:f1:06:c2:84:da:
         49:c8:f9:e8:94:9b:0c:c1:2e:db:1d:3c:51:2a:b9:32:d6:16:
         49:b3:bf:e7:aa:ed:a3:6f:f7:be:60:6d:e9:dc:82:12:94:1c:
         c2:28:66:54:d7:dc:b6:e6:00:1f:4e:78:1b:35:b8:ee:42:aa:
         c8:49:f8:15:d6:e4:bc:33:2b:00:d2:f4:43:c0:23:10:9f:d4:
         49:0f:49:fa:bb:3b:5f:09:96:84:17:58:90:ed:5c:7b:87:e6:
         e3:97:87:e5:18:94:3c:3e:8d:26:b1:87:ea:12:20:2c:9e:0b:
         d4:8f:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:44:10 2026 by rpki-client