Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File:                     WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier:          rI3D9iYblSBYQpZMU4VQYZSxsSwHfUplYCSSR8EDTKg=
Subject key identifier:   21:83:8F:15:FB:6F:F1:E8:B6:B5:B9:8E:2F:23:D1:A6:DE:27:95:91
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer:       /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial:       019D33760F33A529A59AE9D0F6A2B7DBC494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number:          111B
Signing time:             Sat 28 Mar 2026 08:01:08 +0000
Manifest this update:     Sat 28 Mar 2026 08:01:08 +0000
Manifest next update:     Sun 29 Mar 2026 08:01:08 +0000
Files and hashes:         1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: /s4lzxvmNOY1t3rWs6lFz53KkENkhG9vLXwVQn+mXAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 08:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:76:0f:33:a5:29:a5:9a:e9:d0:f6:a2:b7:db:c4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
        Validity
            Not Before: Mar 28 08:01:08 2026 GMT
            Not After : Mar 29 08:01:08 2026 GMT
        Subject: CN=21838f15fb6ff1e8b6b5b98e2f23d1a6de279591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:05:1d:9d:91:4a:d9:11:da:7c:36:ff:8f:
                    82:c5:76:c7:92:8b:b1:6c:09:4b:a2:fc:19:50:35:
                    ae:3d:21:06:04:9e:07:5b:5d:ac:b8:53:97:37:a9:
                    16:5d:af:29:58:ab:74:d7:20:3c:00:a8:6e:af:de:
                    68:f1:34:84:b0:a9:c6:a9:f4:84:1e:90:59:44:9c:
                    47:fd:ab:1a:b4:45:60:4e:16:6d:dc:0f:6f:0a:f2:
                    74:9b:9d:88:d8:dd:e7:8c:8f:ae:46:0d:38:14:ef:
                    18:8c:07:eb:c6:c6:f7:a2:44:9b:4c:44:8f:9f:93:
                    0a:ec:21:45:8a:0e:25:3a:66:f1:d5:51:0a:6e:fa:
                    53:fa:b5:8c:3e:8f:36:b5:e5:0c:6a:59:83:a9:73:
                    9b:39:50:86:fe:f6:93:a2:31:a7:5d:12:f7:fd:c3:
                    56:5e:9d:77:75:0f:d3:48:19:d8:24:b2:e6:b7:12:
                    dd:4f:34:f4:8a:7a:83:6a:56:cb:a3:ae:b0:f9:60:
                    3a:94:83:a6:f6:72:b7:ae:23:27:66:3e:56:ef:73:
                    de:da:1f:97:52:8a:c6:95:3b:45:c3:ad:71:4e:a7:
                    5e:4d:54:cc:23:36:7f:7f:62:e1:9c:3b:b5:e5:33:
                    b3:87:ab:7f:79:04:2a:ad:b4:87:6b:ae:1a:a9:e8:
                    fd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:83:8F:15:FB:6F:F1:E8:B6:B5:B9:8E:2F:23:D1:A6:DE:27:95:91
            X509v3 Authority Key Identifier:
                keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:e4:ea:e0:d5:16:12:ad:65:c3:c0:7f:c2:74:06:8d:06:
         f1:59:0b:4f:e9:90:c8:7b:bb:a4:ba:41:70:e4:a5:c0:95:1a:
         49:25:72:8d:b4:26:68:39:a3:95:9a:77:9c:97:8e:ea:35:15:
         f0:15:cf:18:73:26:9e:66:39:00:30:98:c0:99:8c:48:0c:04:
         68:25:fe:18:4e:2b:a2:dd:a7:ff:07:81:9d:a9:60:c8:88:e7:
         62:84:ba:02:72:e5:46:99:e8:c8:d9:52:2f:32:b7:31:4f:ee:
         07:2b:06:96:69:d8:0d:76:ff:de:0e:b0:94:a8:6d:a3:e5:ad:
         4e:4f:45:23:e9:f5:71:58:7d:46:a6:42:2c:37:47:11:c1:8a:
         3f:54:e0:54:28:d5:89:9b:84:dc:1b:6b:8f:37:a7:67:e1:38:
         9f:9a:4a:fb:de:26:5d:9f:a4:54:a2:77:b8:da:bc:00:56:c6:
         10:a7:e0:e6:35:eb:22:dc:bc:b9:9f:14:ec:72:ec:38:5b:d6:
         46:2a:6d:b0:03:d0:91:ee:11:7d:38:46:2b:61:43:9f:99:93:
         85:39:a9:31:e9:7b:3d:e1:f4:8b:13:3b:e1:e2:20:74:23:1c:
         c8:cd:b0:2a:65:90:3e:29:87:e3:4f:54:15:85:a6:5d:f1:ab:
         80:f3:ed:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----