Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
File:                     RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft (raw, json)
Hash identifier:          gAheEWVgkzUv5StA7TnfJSalVOiTJ5VVNrtEfnPLJVI=
Subject key identifier:   58:52:1D:78:D3:2D:73:09:CD:C0:8A:FF:C1:B8:09:A2:16:11:42:C3
Authority key identifier: 45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A
Certificate issuer:       /CN=4568d0a7204560b6356d837bbf1510d9636df63a
Certificate serial:       019D27A8B16BF68F66EEC94E1C2394A53D12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
Manifest number:          06EB
Signing time:             Thu 26 Mar 2026 01:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:59 +0000
Files and hashes:         1: RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl (hash: Sl4hMaAcaF1Chvz1kwBmUKFaZhAuEyu932NFxTEb0E0=)
                          2: dksbh_tx3bU5Ok0WztbuReiYrpU.roa (hash: NSSCxFWQG/xHAi2bn2Rv8MYwRip8Bj4kZ82RJfLw3As=)
                          3: gRmXeW_g4XWlJoD-3VX4J1-7IpU.roa (hash: D7tJT81Ih/7yE0Ex5L+2xy+fHBPkeGvPOLXrDK+WOqg=)
                          4: miAb-8PhHCi43bUCI_hLnwDESQM.roa (hash: R+HHUuhd28D1d5kF4bYGuzan7r+ujmUekbJUkPeHQ9U=)
                          5: vrN1ckiG11RIjmLBs3NUdn3vLXw.roa (hash: r1+gve8otRlqQvYmhKMUDpHufcQSUz4Vi42HDaDr78E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:b1:6b:f6:8f:66:ee:c9:4e:1c:23:94:a5:3d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4568d0a7204560b6356d837bbf1510d9636df63a
        Validity
            Not Before: Mar 26 01:00:59 2026 GMT
            Not After : Mar 27 01:00:59 2026 GMT
        Subject: CN=58521d78d32d7309cdc08affc1b809a2161142c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:c4:f2:ff:e0:27:ed:01:09:75:43:f0:77:
                    f5:bc:97:5c:04:10:87:75:73:03:50:91:0f:0c:46:
                    dc:d2:44:91:6b:9f:a3:e3:a5:5a:9f:df:b4:e4:3c:
                    e6:ae:22:a6:f3:ab:09:ab:44:1f:da:b6:ad:d5:4d:
                    8d:ac:a6:e5:84:a4:e6:99:95:e2:f0:8f:9f:64:4f:
                    3a:32:86:d6:c8:95:e6:8a:8b:08:dc:b5:57:ca:0d:
                    4e:4b:31:fe:74:1d:36:ed:2f:4a:f1:a2:03:c8:23:
                    ba:09:28:23:02:6b:2b:fa:89:1a:1d:7e:98:28:c9:
                    b4:28:e3:29:91:51:19:d1:37:39:cb:0a:1c:b5:2e:
                    3f:d9:b3:c7:4b:6a:af:7a:66:68:1f:9f:20:dd:3e:
                    d8:a3:7e:49:ca:a3:eb:0d:90:a7:26:f0:74:3e:d6:
                    1b:67:1f:8d:a4:12:da:3b:24:87:59:9e:c0:11:7a:
                    1e:6b:cf:fb:8a:ec:fe:4a:b8:dc:49:39:82:bd:38:
                    c1:87:e3:2d:4e:ed:60:6a:af:94:3f:91:d6:8b:5f:
                    c2:5f:a8:9f:1a:74:a3:0d:df:2d:f4:a5:8a:61:aa:
                    d8:0f:8f:62:02:7d:46:a1:e9:e3:69:ef:40:97:c5:
                    76:6c:e0:c7:6e:43:ea:bd:03:b5:68:13:36:d6:e8:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:52:1D:78:D3:2D:73:09:CD:C0:8A:FF:C1:B8:09:A2:16:11:42:C3
            X509v3 Authority Key Identifier:
                keyid:45:68:D0:A7:20:45:60:B6:35:6D:83:7B:BF:15:10:D9:63:6D:F6:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b0fb0b-b96a-4390-86a8-6fe35ae54a5b/1/RWjQpyBFYLY1bYN7vxUQ2WNt9jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:e7:bb:55:37:e4:c5:55:ad:5b:97:29:da:86:79:be:06:58:
         20:7c:3c:da:a9:22:24:19:f1:90:44:46:59:6d:19:4f:be:86:
         8c:98:39:cb:48:55:47:18:02:3e:8f:48:71:08:56:e8:0e:6d:
         2a:96:87:4f:2f:d0:a7:c3:be:2c:14:14:cb:4a:23:95:c9:6a:
         8b:34:0c:6d:77:38:5c:66:cf:39:f9:ce:27:cd:0a:68:95:45:
         95:07:c3:fb:66:7e:e7:0b:40:a3:52:32:99:a9:bd:c7:a7:a8:
         f4:f9:7f:14:73:ac:40:04:2b:bf:b2:9f:68:24:5a:f0:48:09:
         58:22:62:62:2e:29:e9:58:40:41:ab:a0:93:3b:88:c3:0e:eb:
         49:c4:8d:77:14:f0:e5:61:1d:06:03:a7:56:57:7e:1d:32:85:
         6a:11:0f:f8:12:1a:71:05:a6:87:74:a2:af:bb:1d:bb:a0:98:
         2b:76:16:a2:45:e5:cd:9f:bf:25:ef:eb:b2:77:2c:8c:a3:24:
         ba:2e:b2:f7:11:c1:de:66:04:a8:4b:ab:27:e7:94:b0:2b:48:
         df:2e:6c:c0:5c:d4:57:af:76:94:3d:ff:02:4c:dc:c3:4a:20:
         64:35:bb:c0:5b:b2:e0:20:61:58:7f:54:a3:0a:6e:41:9d:a0:
         e0:6d:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:39 2026 by rpki-client