Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          vA40Ja9AcWixvXpgAEJi0eDz3nuWpkL/cR0SIpTdCck=
Subject key identifier:   10:22:8A:32:B6:0E:C4:90:E2:08:62:B7:2E:12:18:66:72:F5:3C:A5
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       019D27A915B9C674F71C7054F4FCD744604C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          0A74
Signing time:             Thu 26 Mar 2026 01:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:25 +0000
Files and hashes:         1: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
                          2: 8kKGHHFNawB4dRM2-SmTp26Z850.roa (hash: DtU+tMPVUSJrUgMssFbpzi8i/xL96ylYzBa5s1qKCCE=)
                          3: CcI5yTI_dMEGVlqYsI16XhOMmpE.roa (hash: /IA2iecWNx3ne5Gi3nuqxex1BMuFaK37QZN1zjIT96E=)
                          4: E4fqwQgygB5jeBrUBUav7SoAD_0.roa (hash: GfGnCldzviVm1ei4u1oKbkQDjzke8wRck58TsD7DFsA=)
                          5: L-RSq6IUGYToiYDM4n67WQx8VOg.roa (hash: u8ekJ9cjVtYNkxSCsY2smL67ORogBBulUQlW9I6fLOk=)
                          6: L55PmI1ZwuVHZV5rEFCMSx-UH0I.roa (hash: ei+lXL7zHDyqioDmtKobrd7etumhhT8ybyaaw4DRriM=)
                          7: LklkcbKeeRjgnYl8QMUsh6eC6H8.roa (hash: Rj4JA3Ed9Y18Ixhx1D++r0UgnehlTyOLkB3CSGJr78g=)
                          8: P5MlC7ef7YqWLyZB4P63xXWWczA.roa (hash: YwSxUzfIzLnQRQ1NogyLoxfPkli1iH7MjtsmBNTgc98=)
                          9: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
                          10: UEMbnQSg-CqPCCOUzMzNhJH12lA.roa (hash: Zoo54h/jLJxtqfZ2SMs//OnOjukQq18e+WiJr5qy/5U=)
                          11: UfvcmzB9ufveZXNq6a3lzW1eP7E.roa (hash: nK8nCgu5Jrf1isVMQJjHmLaet1ZMEXT1NgArVFrZdB4=)
                          12: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=)
                          13: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: J3tSydlRnY0Tuw/cCK7g+PFcHDCXy7ynDwYJieVsQng=)
                          14: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
                          15: e8ZDJ1fax4t9UjI64PmmPhyJeK8.roa (hash: 1eap+O4XCZ32AEnqgQo1B+jjs4fX0OXWHddxUvN/r+4=)
                          16: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
                          17: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
                          18: kpSiPpji_XM2PozIBQUWPh5cY4o.roa (hash: WnXefqGoi4GyRsRnd+q+/KXg1B0VOhqlPfpXLydjnDY=)
                          19: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
                          20: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
                          21: x9kqyHnmkJ25CQE1N5384OaUk1I.roa (hash: YL8POHupulVHn075fwE7OWeKnx0mBQBMzJcWNAFq2jE=)
                          22: xmtjwxeBLOAWcHZqUbjEPq2TVyA.roa (hash: 6LvCGqyMBfudMs9Yh6sSAhcgOZ+ICy/M8PUt4CxnzIg=)
                          23: yeaSVOY_2RKwqxHlxekdt46XnfA.roa (hash: IUmDaJ+QQrXKsNeMI6OsxvyPlW0V65tj0hhIVHsFQrs=)
                          24: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:15:b9:c6:74:f7:1c:70:54:f4:fc:d7:44:60:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Mar 26 01:01:25 2026 GMT
            Not After : Mar 27 01:01:25 2026 GMT
        Subject: CN=10228a32b60ec490e20862b72e12186672f53ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:49:51:6c:37:06:70:cc:d0:bb:2a:08:c5:4b:
                    11:4d:52:01:77:4f:42:f6:7f:ba:7a:1f:b4:19:fb:
                    5c:8b:0f:88:64:24:80:77:88:55:3a:92:3b:70:b2:
                    42:35:ff:ff:ef:d7:89:5b:48:b1:4a:45:fd:0e:9b:
                    ab:c4:15:70:cf:6a:10:72:8c:dc:73:48:42:8c:9f:
                    cb:47:cb:c1:b5:be:74:05:dd:82:cb:84:77:e1:ca:
                    4c:4f:c9:ce:9d:ce:7e:fe:cc:a2:91:32:49:f2:67:
                    74:59:9d:94:51:50:17:f0:96:4b:44:c3:94:f6:59:
                    d1:1d:b1:87:3e:1d:e6:e7:a7:50:30:c9:8f:20:70:
                    4a:54:ef:c2:a9:0a:77:b7:56:0c:e4:9f:f5:d7:c6:
                    3d:8f:3e:4e:33:93:67:d6:85:fb:e0:24:6c:26:fa:
                    42:53:ca:28:b8:a0:e7:a1:99:a3:88:c3:64:87:78:
                    5f:da:b1:2f:2a:a2:b1:28:a5:9a:6b:c4:d2:90:86:
                    8e:c3:99:1c:da:f9:27:37:75:d3:49:a3:ac:6d:fd:
                    4f:04:f2:b0:4b:34:f9:4a:8a:1c:b5:57:6e:d8:81:
                    ea:5e:77:3b:07:11:61:b8:ee:19:ce:22:f1:29:dc:
                    c8:41:b2:91:31:cb:f6:d5:ce:fb:ff:f2:ba:67:b7:
                    41:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:22:8A:32:B6:0E:C4:90:E2:08:62:B7:2E:12:18:66:72:F5:3C:A5
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:77:72:56:93:28:e6:70:9b:50:b6:c0:ec:b1:f1:08:18:92:
         38:0a:82:0a:51:78:4e:29:49:ae:15:92:cf:38:6c:3e:f0:c0:
         4e:68:1e:4f:85:70:f7:a2:b9:ce:bc:8d:de:29:dd:87:f0:e9:
         d6:76:b1:7b:3a:da:d7:9e:a7:4b:37:e9:36:ea:74:eb:6d:79:
         46:c8:46:59:5f:af:a0:f6:00:d2:0a:66:d3:59:6a:de:a7:8b:
         f1:5d:d3:74:f1:22:80:a4:a4:2c:8d:b3:d7:aa:a2:12:50:0e:
         67:1b:e6:b6:0e:e4:d4:30:a7:cf:94:24:80:78:13:1f:53:38:
         9c:cc:18:f5:cf:84:26:f9:fd:c6:76:ae:4a:ee:f8:84:e6:82:
         95:ee:ce:6c:bb:aa:9d:b6:98:eb:39:5e:aa:6e:f4:a1:42:19:
         c7:c1:5e:69:02:e0:a6:7f:b3:28:11:af:6d:6e:d5:2a:e5:c9:
         dd:31:01:2d:e8:6e:5b:38:1c:00:29:bb:e3:93:32:48:01:a0:
         79:09:cd:99:90:26:fa:08:c7:03:82:1f:50:1f:cc:a2:2a:f2:
         a1:93:da:dd:8f:9e:0d:92:9f:21:5e:26:0c:77:9c:96:5c:eb:
         73:9a:d0:bf:ee:97:02:19:ed:3a:42:a7:c9:87:50:5e:82:a3:
         31:0c:79:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:04:31 2026 by rpki-client