Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File:                     W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier:          aFszXGXaFO1Taw2JyUs8CBkR7UGJFhV0XOSZXIMazx0=
Subject key identifier:   C5:95:DB:A9:C1:02:FE:8B:47:33:90:B7:D3:6E:1E:13:E3:1B:42:4A
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer:       /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial:       019E1FED2F365FF4A83D97F3F99B6807ECA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number:          0EA9
Signing time:             Wed 13 May 2026 06:01:38 +0000
Manifest this update:     Wed 13 May 2026 06:01:38 +0000
Manifest next update:     Thu 14 May 2026 06:01:38 +0000
Files and hashes:         1: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: 4DzzQCwlmb/q33flJ9qdOwHh/sgMVRXu19zbK613Zqc=)
                          2: XcofZ2zUXbUkXhdjGHo_Ijp3eqY.roa (hash: G155Cwdr7xdTzfgF1ccmtV2g6/W9sVULFwUJkZWAH2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:ed:2f:36:5f:f4:a8:3d:97:f3:f9:9b:68:07:ec:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
        Validity
            Not Before: May 13 06:01:38 2026 GMT
            Not After : May 14 06:01:38 2026 GMT
        Subject: CN=c595dba9c102fe8b473390b7d36e1e13e31b424a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:67:d6:2b:74:81:35:c5:b0:ab:3e:2c:5a:33:
                    8a:e0:a7:81:2f:d1:cc:58:96:1e:e8:a1:ef:3c:da:
                    ca:c4:e5:6a:72:30:e3:fc:da:13:d0:1e:50:38:cf:
                    ff:27:0f:e1:dc:f0:53:94:ae:51:97:42:1b:a6:1e:
                    91:73:36:92:41:4d:34:0e:d5:50:4c:f1:b6:ea:c9:
                    48:8c:fb:9e:25:e3:3d:4c:ef:d8:6c:71:df:e3:03:
                    30:28:83:56:ee:58:e8:11:15:cb:ea:ca:91:4e:bd:
                    79:68:8f:03:3b:c1:1a:2e:1c:52:56:0d:a8:83:b8:
                    5a:95:e6:79:dd:13:31:fe:1f:8b:ca:b5:f0:ab:22:
                    14:1a:c3:f3:b2:ec:c5:c1:d2:c0:37:90:92:c3:06:
                    93:63:91:37:4a:8c:3a:42:53:7a:0f:aa:dd:25:d5:
                    f6:d1:cf:4a:a9:d8:aa:7c:8e:9f:fb:89:fe:9d:3d:
                    7a:3c:2c:f7:65:52:32:38:75:4a:21:35:b9:6e:6b:
                    e2:06:29:37:db:aa:bb:9c:b5:3a:06:49:2d:d6:57:
                    83:3a:60:a8:6a:97:b1:c9:38:96:3e:dd:9a:67:56:
                    d3:d7:1c:d9:33:7a:ac:04:3b:45:d6:cc:3d:e3:c2:
                    fa:dd:53:a4:f2:d1:80:b3:4b:9a:4f:0e:25:d4:e4:
                    3a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:95:DB:A9:C1:02:FE:8B:47:33:90:B7:D3:6E:1E:13:E3:1B:42:4A
            X509v3 Authority Key Identifier:
                keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:5b:40:d1:a0:a2:f9:ad:f4:34:29:27:96:3e:f1:ca:a0:3f:
         92:fa:51:ae:0a:8c:c6:89:cc:8f:9d:13:45:8d:bd:35:24:8c:
         97:26:70:8b:34:12:b6:77:c5:37:a3:1e:28:0a:27:95:31:30:
         92:81:b7:f6:68:9c:9c:0c:84:7e:e5:2a:ce:82:28:f1:fd:db:
         60:b9:e3:19:cc:56:90:39:5f:16:d2:c6:27:4b:19:66:09:2b:
         cb:68:76:da:4c:1b:e9:9c:be:b6:06:6d:06:16:4f:fa:ac:9c:
         fe:84:fd:ca:f8:8c:51:9e:2c:ce:4f:c5:70:e7:a8:b4:1c:7a:
         56:fb:ca:63:ba:41:9f:a0:f0:6c:a8:a6:31:22:f4:99:72:fc:
         ff:a6:49:80:64:0e:1e:83:03:b3:aa:3f:5e:85:14:1f:71:2d:
         7b:d3:a6:0b:6e:04:87:4a:73:ea:6c:71:2d:87:6b:53:1c:07:
         cc:b8:c5:d3:7c:91:41:93:3e:d5:c3:28:d5:f9:78:a1:97:f0:
         f3:d3:66:23:59:67:e6:67:aa:9f:64:aa:cc:50:8a:90:ca:a1:
         fe:c5:76:60:56:cb:d1:68:fd:90:2d:c4:dd:25:85:c3:b1:b6:
         d5:3e:94:2c:32:ce:0e:ce:66:bc:8e:7e:75:e9:92:e0:66:df:
         07:ff:73:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:57:32 2026 by rpki-client