Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File:                     WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier:          6UQjxZErg9eUy/0iKC1mz9kTWhORK9qLS7L9pPvRAMA=
Subject key identifier:   09:AB:F6:66:09:9B:C4:3B:7E:9D:CD:12:23:CE:D9:87:4C:08:2D:0B
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer:       /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial:       019D32D0D6BEFC0B7742FEC5B05BDF052DC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number:          1742
Signing time:             Sat 28 Mar 2026 05:00:40 +0000
Manifest this update:     Sat 28 Mar 2026 05:00:40 +0000
Manifest next update:     Sun 29 Mar 2026 05:00:40 +0000
Files and hashes:         1: JvdKR8w378wRcIgnyCDN8YQt0NY.roa (hash: yPYUw3ORIF3GkrD9VXNJ088VEVXOizVNl2vWPpByN18=)
                          2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: AQbGM8PQqPxlPOEuGB26exQ8mQIkTzLgDK8tlrtpSM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:d0:d6:be:fc:0b:77:42:fe:c5:b0:5b:df:05:2d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
        Validity
            Not Before: Mar 28 05:00:40 2026 GMT
            Not After : Mar 29 05:00:40 2026 GMT
        Subject: CN=09abf666099bc43b7e9dcd1223ced9874c082d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:7b:a9:ce:17:f2:4e:c1:bd:91:45:8c:54:
                    d5:64:c0:ff:8c:47:5c:41:6e:d0:e9:05:0d:ff:79:
                    d6:9b:f1:1b:1e:e9:65:fa:34:b0:33:00:51:8b:5c:
                    74:dc:b1:02:39:34:50:ff:d7:e4:f4:63:20:f4:11:
                    9e:52:6a:79:45:1f:a3:56:ca:7c:a4:a1:1e:83:eb:
                    ba:16:a2:5a:c4:7d:ca:b8:a1:65:3e:67:62:87:a6:
                    5e:83:17:8f:a0:be:24:8c:91:f3:80:19:5a:19:bb:
                    05:93:2f:ae:fd:91:d5:27:e7:c3:4a:c5:18:6d:27:
                    cf:b0:f8:41:f0:a8:2c:71:6d:29:a9:a4:6a:64:02:
                    b6:88:7d:eb:d4:a9:f9:7f:a2:7f:a2:2e:ab:db:7c:
                    3d:5c:27:3a:45:29:c8:b2:6d:23:91:3f:0f:9c:48:
                    c8:e1:e7:d9:aa:45:1c:ac:9d:2d:a3:81:8a:06:31:
                    e2:6c:15:e8:7d:1e:d8:37:fd:08:19:5b:7e:a9:82:
                    0b:63:22:85:81:c0:fe:f1:2f:bb:7a:fb:d1:ed:0a:
                    d8:ad:dd:6b:cc:da:d8:77:d6:41:eb:87:02:3b:13:
                    69:90:14:59:b9:83:52:99:cd:a7:f4:ab:88:da:ba:
                    d9:05:b5:af:2b:5f:fb:62:3b:76:21:b4:af:f9:c9:
                    02:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AB:F6:66:09:9B:C4:3B:7E:9D:CD:12:23:CE:D9:87:4C:08:2D:0B
            X509v3 Authority Key Identifier:
                keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:dd:4d:9c:2c:c0:bf:0c:2e:4a:43:7e:1c:5a:38:f7:e9:c4:
         83:b8:cf:40:01:4c:2b:86:84:17:ec:22:63:01:ea:80:9c:51:
         9f:37:5d:87:bf:d2:61:e0:af:b5:0e:df:d6:61:c2:38:53:bd:
         01:fa:8b:ec:1d:3b:ac:36:84:ca:41:9a:2f:77:7c:7c:42:71:
         c0:e6:e3:ab:4a:00:7a:5b:3a:f6:49:69:81:f9:c3:45:c4:fe:
         02:3f:b0:2a:0d:3e:96:09:ce:b8:c3:51:34:92:83:c6:46:d9:
         8e:10:b3:23:40:a1:19:4b:f9:a3:0d:a7:2e:f8:27:e5:7d:06:
         fe:c0:f7:db:3c:99:b6:eb:da:87:37:7d:75:b0:ab:6c:b1:2c:
         ee:90:82:18:60:3e:f4:9e:f4:9e:87:6f:d2:fa:9b:50:2c:3f:
         33:0f:78:c3:89:0d:7b:f5:42:d5:1f:82:2c:7f:51:43:3f:84:
         c0:11:19:60:7b:44:8e:29:92:5c:39:76:02:31:8b:00:56:e7:
         a7:93:51:76:23:e5:37:02:17:46:7e:c0:84:0c:49:48:29:46:
         73:49:88:18:a5:78:e8:c8:5c:c6:e0:cd:d5:eb:54:af:c6:4b:
         d7:eb:5b:b7:c4:e5:95:b8:7d:2b:7f:cf:71:a4:2b:f6:50:09:
         da:85:d9:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:15 2026 by rpki-client