Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File:                     WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier:          RPg2M5dWNiJuvF5AP+MMQ8uN7C7DpKs0n66hQS77VKA=
Subject key identifier:   1D:FB:F4:6A:A9:0A:A3:5A:2C:74:9C:69:77:E6:A3:25:84:EB:D2:F9
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer:       /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial:       019D27E034655457E23F4464FC3FABFD6786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number:          038C
Signing time:             Thu 26 Mar 2026 02:01:38 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:38 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:38 +0000
Files and hashes:         1: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: QQ+brjmddnAkAj/nMPE9zy9QTYuMWLEcuxWO/uc0fB8=)
                          2: ziF5LUxXxsiZsU2Zn5F9Vs8QBIU.roa (hash: JWHNPV4Q0ijWQ7FA9BlDGI8xfPLJfKs3pJXg1QGEDkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:34:65:54:57:e2:3f:44:64:fc:3f:ab:fd:67:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
        Validity
            Not Before: Mar 26 02:01:38 2026 GMT
            Not After : Mar 27 02:01:38 2026 GMT
        Subject: CN=1dfbf46aa90aa35a2c749c6977e6a32584ebd2f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:34:27:95:7d:a7:5b:18:22:b7:53:c9:14:4c:
                    b3:5e:e6:09:e9:7f:e7:ac:be:c7:bf:08:96:ce:08:
                    6b:a8:9e:12:5d:8d:09:58:91:b0:91:82:b9:cf:8f:
                    8e:54:7d:6a:4a:da:c2:97:e2:d2:d4:ae:2c:a1:9b:
                    6b:b0:c8:cf:af:c8:70:b4:a6:e6:47:77:4b:e1:8f:
                    64:0c:c3:3f:45:47:84:88:ab:d2:bc:8c:26:b9:a5:
                    bf:44:6b:b1:d5:34:5b:e9:3c:ca:0d:c0:46:b6:37:
                    36:a3:de:82:6a:27:fc:7e:d5:6a:6d:1a:18:68:2c:
                    17:b7:f2:93:82:11:91:ea:2a:3e:da:4d:f3:8c:99:
                    8e:c7:0d:a1:c1:dd:93:28:99:bd:0c:f6:d7:cc:f9:
                    5c:7f:ea:bc:8d:e5:ac:e5:70:c4:a3:f3:d7:ea:c6:
                    cf:c8:90:85:4a:d6:1f:6a:3c:a5:5a:d8:2a:06:f1:
                    5c:b1:e4:46:33:f7:9a:b8:10:29:fb:4f:98:d4:46:
                    ab:fb:03:e8:99:21:53:d6:12:60:5e:5b:d1:57:e1:
                    11:1b:51:0a:7b:bf:1b:13:84:3b:4b:6d:a6:09:94:
                    48:13:46:9f:bb:05:8b:47:2d:ca:c8:be:e1:9a:c4:
                    6d:ad:90:32:e7:ed:70:ec:b0:02:56:32:2e:8b:c0:
                    ed:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FB:F4:6A:A9:0A:A3:5A:2C:74:9C:69:77:E6:A3:25:84:EB:D2:F9
            X509v3 Authority Key Identifier:
                keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f0:4d:7d:df:1c:bd:e5:be:4f:26:bc:44:73:09:dd:fb:4a:
         13:c6:ec:37:d6:98:b4:c9:2b:7b:27:2a:9c:67:53:2a:b3:53:
         57:e0:49:17:df:c7:78:55:cc:08:46:bf:a5:2a:3f:97:0a:d2:
         ae:a8:46:73:05:5d:6b:0f:37:5d:aa:01:8e:ac:96:64:52:ba:
         e1:a0:6a:32:f8:24:4a:97:d8:94:78:56:9a:5d:19:0e:b5:1a:
         58:43:24:8e:35:24:08:04:be:79:0e:0d:3d:b4:ae:ed:3d:89:
         89:74:70:6e:77:d3:cd:b5:f7:c8:09:52:94:53:99:b0:1f:b5:
         33:cb:34:d1:ce:fd:2c:ba:e6:a4:31:e8:57:ed:19:17:9d:d6:
         24:a0:7f:8b:ef:7d:a9:de:ec:6a:b9:d2:03:2a:14:a8:b6:d3:
         ec:64:0d:1b:ad:05:68:c5:79:bd:5a:71:b9:fa:9f:8d:ba:35:
         17:ed:14:83:ee:57:a2:6c:78:dd:33:6c:07:f9:ad:5e:b3:b8:
         b1:d4:1e:a4:02:5f:f9:db:7e:72:11:86:cc:ad:c1:0f:7e:dd:
         d1:47:f6:cf:c3:7d:f9:69:30:72:ea:ca:46:ad:c5:cb:76:d1:
         1c:6a:4d:9a:48:d4:58:c3:34:fd:9b:57:48:c4:af:0c:45:28:
         cf:b1:08:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:52 2026 by rpki-client