Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
File:                     WMV8B555WnlrR6ftMvBysFipOm4.mft (raw, json)
Hash identifier:          FAR+BpX/7jW9N4wjBXymRRbSQ39srxUblPv5iin3PDw=
Subject key identifier:   18:23:2D:5D:D1:A6:50:73:B2:7E:C9:71:D9:1D:CC:B4:2F:59:A3:CE
Authority key identifier: 58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E
Certificate issuer:       /CN=58c57c079e795a796b47a7ed32f072b058a93a6e
Certificate serial:       019D26CCF0465A5ACB38D332DCE8825CB965
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
Manifest number:          05A5
Signing time:             Wed 25 Mar 2026 21:00:58 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:58 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:58 +0000
Files and hashes:         1: WMV8B555WnlrR6ftMvBysFipOm4.crl (hash: ZsIK1jzudQsVovTlcCrQ3xGxKFAWdWTv2nh9jD2+9OI=)
                          2: x_UrSzT5bnYolRGENmeVczVCPdU.roa (hash: IOsOmkSdTZ/QstJ06oa7GIebzAwZkncHJ9unnjr0BfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:f0:46:5a:5a:cb:38:d3:32:dc:e8:82:5c:b9:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58c57c079e795a796b47a7ed32f072b058a93a6e
        Validity
            Not Before: Mar 25 21:00:58 2026 GMT
            Not After : Mar 26 21:00:58 2026 GMT
        Subject: CN=18232d5dd1a65073b27ec971d91dccb42f59a3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c8:83:2d:74:c0:9f:54:e6:2d:85:e9:60:ae:
                    e3:16:a5:a1:89:43:8e:73:22:ce:ca:c8:07:84:dd:
                    df:ee:f9:f1:fa:d6:f4:35:3d:0f:b8:20:82:6b:29:
                    82:96:43:dc:ba:c1:4a:ed:c8:ef:ff:b1:14:1b:08:
                    50:35:43:8c:45:09:16:80:97:d8:22:7a:58:8b:29:
                    55:c6:b4:72:40:22:e6:e0:16:7b:49:ee:12:ba:5c:
                    17:0c:c4:a3:1d:f4:0f:6a:bc:62:48:8e:d8:4d:d5:
                    d0:e8:94:1a:62:3f:8c:ca:e2:1e:77:18:5e:df:c4:
                    79:ae:8d:e7:28:b9:68:ea:e3:20:dd:f6:54:5c:79:
                    51:0d:7c:38:ed:7f:9c:f1:08:41:e8:5a:af:d7:e9:
                    fe:dc:63:69:cd:ab:d7:7d:e1:d3:d4:e6:a5:02:7d:
                    73:fb:be:4f:81:ca:cb:1c:cf:89:7f:e3:23:b9:bb:
                    7d:08:49:8e:49:a1:f6:28:91:d0:aa:55:6f:b9:d6:
                    86:52:0b:a9:28:75:d0:c7:6a:06:e2:f0:8d:34:bc:
                    86:77:2e:36:b9:b9:4c:13:46:00:09:f5:09:7f:46:
                    0f:91:49:cc:46:1c:19:29:07:a6:ed:c3:c7:20:70:
                    d1:a7:de:d4:88:df:9c:23:06:6e:8f:f1:79:46:70:
                    85:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:23:2D:5D:D1:A6:50:73:B2:7E:C9:71:D9:1D:CC:B4:2F:59:A3:CE
            X509v3 Authority Key Identifier:
                keyid:58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:4a:5d:43:42:0d:3c:55:9d:d5:19:10:a6:84:9b:f2:12:
         fd:82:d1:b6:fb:4d:51:1b:f7:00:5f:c6:0e:f9:5b:e1:c1:57:
         d6:05:f8:7f:99:95:9e:88:c6:6a:35:60:3a:c2:66:21:5b:e9:
         ad:a1:3a:fe:72:64:e3:ff:40:65:b9:c2:7d:2a:14:95:91:96:
         c3:d9:5b:e0:5c:0d:bc:f7:81:86:fa:66:d3:19:c6:c2:d1:f3:
         d6:81:f1:75:6a:f2:9e:94:63:1c:f3:41:de:ba:f1:73:de:97:
         47:b1:fd:9b:99:7a:aa:e6:20:26:e8:65:4e:c4:df:4b:22:54:
         da:7b:2a:6e:21:75:c0:1b:3b:76:7f:a9:b1:b8:30:0b:e4:06:
         d6:c6:2a:4f:38:d2:c4:56:6f:25:5b:6b:55:ea:4a:c1:3e:e8:
         59:88:f9:90:2b:21:9e:93:21:4d:04:6f:f4:71:f7:80:a8:61:
         73:07:b1:e6:58:31:40:2b:ea:1c:b7:e8:7b:04:8e:3d:f4:5e:
         62:82:18:c4:78:2a:12:35:3a:9e:cd:13:dc:01:73:eb:6c:cc:
         e2:77:36:12:bf:81:a2:b5:69:74:14:69:bd:93:09:b9:33:73:
         2c:7a:6a:87:a1:95:5e:b5:50:52:78:a8:1e:91:aa:25:1f:fd:
         33:11:90:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPBGWlrLONMy3OiCXLllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YzU3YzA3OWU3OTVhNzk2YjQ3YTdlZDMyZjA3MmIwNThh
OTNhNmUwHhcNMjYwMzI1MjEwMDU4WhcNMjYwMzI2MjEwMDU4WjAzMTEwLwYDVQQD
EygxODIzMmQ1ZGQxYTY1MDczYjI3ZWM5NzFkOTFkY2NiNDJmNTlhM2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8iDLXTAn1TmLYXpYK7jFqWhiUOO
cyLOysgHhN3f7vnx+tb0NT0PuCCCaymClkPcusFK7cjv/7EUGwhQNUOMRQkWgJfY
InpYiylVxrRyQCLm4BZ7Se4SulwXDMSjHfQParxiSI7YTdXQ6JQaYj+MyuIedxhe
38R5ro3nKLlo6uMg3fZUXHlRDXw47X+c8QhB6Fqv1+n+3GNpzavXfeHT1OalAn1z
+75PgcrLHM+Jf+Mjubt9CEmOSaH2KJHQqlVvudaGUgupKHXQx2oG4vCNNLyGdy42
ublME0YACfUJf0YPkUnMRhwZKQem7cPHIHDRp97UiN+cIwZuj/F5RnCFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgjLV3RplBzsn7JcdkdzLQvWaPOMB8GA1UdIwQY
MBaAFFjFfAeeeVp5a0en7TLwcrBYqTpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV01WOEI1NTVXbmxyUjZmdE12QnlzRmlwT200LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMzU3NDYtOGU0Mi00ZDgwLWI3NmQt
NTc1MjkyYmMzOTQxLzEvV01WOEI1NTVXbmxyUjZmdE12QnlzRmlwT200Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9iMzU3NDYtOGU0Mi00ZDgwLWI3NmQtNTc1MjkyYmMzOTQx
LzEvV01WOEI1NTVXbmxyUjZmdE12QnlzRmlwT200LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIBKXUNC
DTxVndUZEKaEm/IS/YLRtvtNURv3AF/GDvlb4cFX1gX4f5mVnojGajVgOsJmIVvp
raE6/nJk4/9AZbnCfSoUlZGWw9lb4FwNvPeBhvpm0xnGwtHz1oHxdWrynpRjHPNB
3rrxc96XR7H9m5l6quYgJuhlTsTfSyJU2nsqbiF1wBs7dn+psbgwC+QG1sYqTzjS
xFZvJVtrVepKwT7oWYj5kCshnpMhTQRv9HH3gKhhcwex5lgxQCvqHLfoewSOPfRe
YoIYxHgqEjU6ns0T3AFz62zM4nc2Er+BorVpdBRpvZMJuTNzLHpqh6GVXrVQUnio
HpGqJR/9MxGQ9w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:18 2026 by rpki-client