Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File:                     WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier:          klrd2DD91/Qey93k8qC+H+sVH5pg2Y56Du7AAuQTgZs=
Subject key identifier:   C0:8D:21:77:6D:88:68:44:BC:9C:F7:6B:5B:8C:BA:09:03:E7:84:58
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       019D2771D061887F5046BCECA48AD3DD0DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number:          15BD
Signing time:             Thu 26 Mar 2026 00:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:03 +0000
Files and hashes:         1: 3wUGAUyz1DeLwdPPyYEFDfRHGKE.roa (hash: Ps7kDJqtUtMVk+txzusu+REbzqUZZVNNkH7s/aWePGw=)
                          2: BtUA2-QGGIyBXkmFJIe0B4eXMlU.roa (hash: tTSYTotdr59pRvOsLoZT5KBfp7cm9a+uAAcxr/IgYbo=)
                          3: BtURCAmIgtDu64QigBUBa6gylG4.roa (hash: EZlHSwaxDQsHx/M77NPKc6ECDdAHIX3bdhXQYLBYcek=)
                          4: D7D_loV99KzoBrA79hPAtRanPvk.roa (hash: O6QCYb3KNoLWisMlEhgzHwO6cpGleN+OsVoAzaeYAvk=)
                          5: QPAwFxKhLOr2EBOg8RMCPgRX1JI.roa (hash: 4jaZ2Xw/f7AOu8MDDRl82FNESKf2rbMsQNvg3ZzXbGE=)
                          6: QwGBspDsi-qrPiNF2EDb3iI_pek.roa (hash: 6Z3sQwhkjCN46fJrGzzk3Wow4eW2/hmelPF5s8l9o4U=)
                          7: RHLFI0WIkcoxPB1kgL13NUw9Uhg.roa (hash: wG3CzCC6NTqC8LK8AAHM8aeSYhL3RSu1rtkFhvs3qUE=)
                          8: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: hKBw3WzGDnbodMLNfDp2e2iNdebtAwHyJsZzJ/cGTBk=)
                          9: WrRssx1T7W4FbMdccsG8zhPbvH0.roa (hash: soZuFyq441oI7pIn/lzNh4/678kQBCzmWyVNMg7qyfs=)
                          10: j2N6XHOuJrcF9YKszFUeO9utvU8.roa (hash: CnNuflG+4w3FSr1FwKhAAykLHeCSavmEwXUoJB0QPSY=)
                          11: knbZTkeQonjHgAjkDQ5BiABLPk0.roa (hash: 6z0JXF2+Tz6UX2zmjqr0hILFhd91GxoHq3PFQZKWs5E=)
                          12: t8_eAr8m1XQ9EztDOpyeXpfZBPU.roa (hash: 0uzPzAl2BTt7yUaKYAhuSXCA7BbVVQEBGvtYZp9iO+0=)
                          13: z8IV8jvVZ1vjvDfMDMPriKkCrQY.roa (hash: hWBFg4xHF5lQKrKNCM53lJJPmzmnxClUeWhPU/kjmE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:d0:61:88:7f:50:46:bc:ec:a4:8a:d3:dd:0d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Mar 26 00:01:03 2026 GMT
            Not After : Mar 27 00:01:03 2026 GMT
        Subject: CN=c08d21776d886844bc9cf76b5b8cba0903e78458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:bd:5c:e7:a9:c2:ed:6f:43:4a:92:f2:5f:
                    e5:fe:e9:71:e9:f3:68:49:76:ea:68:9e:6f:60:81:
                    05:5d:0f:e9:ae:ed:dc:93:2a:fc:a5:de:2c:52:c6:
                    d6:1e:77:2c:7a:33:b5:b3:1d:11:6a:c0:c7:45:8e:
                    72:5b:e7:b5:93:44:55:23:7e:0f:9d:e9:9c:bc:5d:
                    2a:e0:d9:53:f6:11:0c:1a:b4:b8:39:7b:0f:82:e6:
                    db:ee:ab:f1:2d:2d:5a:9c:d1:59:62:69:03:26:11:
                    bc:d4:a2:54:fa:f6:da:79:99:a7:1b:41:02:8b:2e:
                    a6:ac:e6:46:8f:79:5d:21:00:94:19:bd:40:16:23:
                    cf:9a:d5:40:86:63:a7:3a:5c:72:c6:fc:94:ab:19:
                    2f:b6:75:bb:1e:97:c1:b7:15:a5:b9:4d:8f:98:c8:
                    60:9a:b1:f4:d9:2e:6c:63:ad:e8:1b:5a:f4:94:63:
                    3b:6b:f7:41:4e:51:3f:1b:28:ee:df:46:4f:68:1e:
                    5e:60:a7:a1:0f:13:e8:70:a9:5e:ab:d6:fc:e8:5a:
                    88:dd:a3:3c:f8:9a:6c:a0:8a:3a:db:9d:4c:0f:56:
                    04:7a:39:68:16:a2:99:14:cf:0c:60:63:39:45:c3:
                    15:6f:e1:99:73:f7:1a:ce:9f:8a:c9:a2:7a:ce:b3:
                    9f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8D:21:77:6D:88:68:44:BC:9C:F7:6B:5B:8C:BA:09:03:E7:84:58
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fc:3d:4a:e9:54:f3:53:33:93:00:d3:98:a3:5c:78:5e:14:
         ca:c3:64:f6:97:a2:8a:98:aa:f4:15:23:51:5f:a9:0c:4c:df:
         d0:ab:af:68:e8:28:e8:fd:f4:f4:ee:63:b0:19:24:09:77:49:
         9e:d5:46:92:45:8b:1a:64:ef:76:cb:9b:1e:5b:ab:e4:d0:3b:
         36:a5:ac:89:07:9c:53:94:6d:b7:f0:dc:57:df:a0:68:50:59:
         fe:34:73:e8:eb:fb:c5:41:6b:57:3d:88:7f:26:bc:a4:27:c5:
         c7:b2:68:f5:bc:d0:e5:09:39:56:98:aa:e4:74:84:e7:d6:c3:
         25:04:b8:e2:61:17:ac:b5:e1:cd:28:cf:b8:a1:d0:df:3b:32:
         9d:bb:27:08:79:c5:4e:0d:e9:97:0f:a0:23:bd:a7:f4:cb:c8:
         40:a6:6a:17:35:94:0d:d3:04:7d:ad:ee:fa:b9:dc:5b:d3:ed:
         45:3b:2d:d0:e7:49:69:32:5c:ca:e1:81:a2:19:1f:5d:c9:c0:
         a7:6c:e6:c4:b6:b8:05:86:7b:74:4f:42:e1:50:54:c2:56:cb:
         da:3a:f4:7c:17:0a:a4:80:83:d9:3a:b2:28:74:a2:1a:76:79:
         ee:6f:aa:a5:25:1e:4e:89:b9:20:2b:1e:2a:1c:a5:79:e4:22:
         ed:bf:e0:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ncdBhiH9QRrzspIrT3Q3GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl
ZGQ2YWEwHhcNMjYwMzI2MDAwMTAzWhcNMjYwMzI3MDAwMTAzWjAzMTEwLwYDVQQD
EyhjMDhkMjE3NzZkODg2ODQ0YmM5Y2Y3NmI1YjhjYmEwOTAzZTc4NDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuui9XOepwu1vQ0qS8l/l/ulx6fNo
SXbqaJ5vYIEFXQ/pru3ckyr8pd4sUsbWHncsejO1sx0RasDHRY5yW+e1k0RVI34P
nemcvF0q4NlT9hEMGrS4OXsPgubb7qvxLS1anNFZYmkDJhG81KJU+vbaeZmnG0EC
iy6mrOZGj3ldIQCUGb1AFiPPmtVAhmOnOlxyxvyUqxkvtnW7HpfBtxWluU2PmMhg
mrH02S5sY63oG1r0lGM7a/dBTlE/Gyju30ZPaB5eYKehDxPocKleq9b86FqI3aM8
+JpsoIo6251MD1YEejloFqKZFM8MYGM5RcMVb+GZc/cazp+KyaJ6zrOffwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCNIXdtiGhEvJz3a1uMugkD54RYMB8GA1UdIwQY
MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt
Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm
LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/w9SulU
81MzkwDTmKNceF4UysNk9peiipiq9BUjUV+pDEzf0KuvaOgo6P309O5jsBkkCXdJ
ntVGkkWLGmTvdsubHlur5NA7NqWsiQecU5Rtt/DcV9+gaFBZ/jRz6Ov7xUFrVz2I
fya8pCfFx7Jo9bzQ5Qk5Vpiq5HSE59bDJQS44mEXrLXhzSjPuKHQ3zsynbsnCHnF
Tg3plw+gI72n9MvIQKZqFzWUDdMEfa3u+rncW9PtRTst0OdJaTJcyuGBohkfXcnA
p2zmxLa4BYZ7dE9C4VBUwlbL2jr0fBcKpICD2TqyKHSiGnZ57m+qpSUeTom5ICse
KhyleeQi7b/gGA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:22 2026 by rpki-client