Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File:                     WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier:          Z4fe/sCgHWCBrWC9A/M6/nfSVIHqCqEKOEaWi0K5GgU=
Subject key identifier:   0B:6D:2A:36:8B:CB:21:5C:D9:A9:52:AE:51:3F:6E:A4:3F:DC:13:F0
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer:       /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial:       019D29619C27A91B8E0C9DEB2DAE7580AD3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 09:02:35 +0000
Manifest this update:     Thu 26 Mar 2026 09:02:35 +0000
Manifest next update:     Fri 27 Mar 2026 09:02:35 +0000
Files and hashes:         1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: ZfHs1dufuK6qjelFZrK9bFSKyiKXo2KG7M1BsdWHTVs=)
                          2: mFWoM2Jw-ryruWtnjaLb3-NL4aM.roa (hash: Fj1kXt+CryXtIK5HQJEsrCU21FrZJ0TBdWzjGcYN2Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:61:9c:27:a9:1b:8e:0c:9d:eb:2d:ae:75:80:ad:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
        Validity
            Not Before: Mar 26 09:02:35 2026 GMT
            Not After : Mar 27 09:02:35 2026 GMT
        Subject: CN=0b6d2a368bcb215cd9a952ae513f6ea43fdc13f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:e4:19:d0:29:76:0e:2b:09:b8:4c:b6:cf:
                    07:58:fc:bb:b8:2c:8f:4c:0a:aa:7b:92:79:94:52:
                    6f:b2:02:53:56:c5:ee:aa:46:43:99:bb:b0:57:98:
                    63:be:55:2e:64:a6:c4:3a:dd:cd:d2:5e:4f:91:b5:
                    0c:a4:b2:31:ad:ba:58:67:65:ec:7c:0e:37:1d:ba:
                    59:d8:04:9f:56:7c:81:90:69:63:10:2f:7c:64:76:
                    38:6a:b3:fa:cf:a3:dd:35:b3:2f:74:d6:1f:52:25:
                    9d:78:b9:30:17:98:d4:c0:72:78:0d:bd:60:b8:a2:
                    9d:76:89:cf:51:52:09:3b:4e:7d:1f:51:28:66:81:
                    6d:6f:dc:5d:47:8c:67:47:5c:cd:8a:d1:e8:a0:a3:
                    49:74:f5:93:05:1a:2d:b3:1d:cd:b5:cd:2c:f4:7c:
                    76:1c:76:04:f4:e0:5b:05:6b:75:85:09:15:1e:c0:
                    47:74:46:b2:80:bd:90:60:bc:9e:c1:50:93:62:a1:
                    97:82:f5:3b:b0:86:6e:13:cd:0c:70:fa:6e:4d:be:
                    21:a6:39:66:c1:0d:1e:6b:65:8e:85:b4:30:43:f9:
                    26:f2:75:a8:c8:96:f4:7f:06:9b:08:20:e5:fd:83:
                    ae:31:a5:c7:dd:11:25:48:5d:b9:0b:50:b7:e4:fa:
                    bc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6D:2A:36:8B:CB:21:5C:D9:A9:52:AE:51:3F:6E:A4:3F:DC:13:F0
            X509v3 Authority Key Identifier:
                keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:63:ec:40:c6:6b:1a:50:5d:28:ba:02:24:9c:7b:2c:8a:
         f7:1c:55:ab:f3:bb:4b:01:2e:3c:4d:e9:7b:69:bd:77:7f:ca:
         4c:71:23:3b:f3:0c:5a:3a:58:86:3a:ee:a4:d1:52:ef:29:6f:
         c4:f1:f3:e3:db:5e:ff:eb:f1:3b:f3:5a:8e:22:f3:57:e2:8e:
         b6:d9:57:22:2f:53:e6:29:59:dc:3a:6a:f4:82:07:52:96:33:
         38:9e:94:30:0a:5a:f9:0a:c0:3a:91:cd:d0:3e:4e:5d:27:7f:
         07:0b:40:4f:3d:dd:a7:01:06:c5:54:e1:4c:02:89:62:a7:9e:
         b3:19:f2:08:26:40:95:4f:92:17:eb:49:be:63:6e:16:55:9f:
         28:3a:fb:5a:1e:27:25:29:e2:1a:54:1e:2a:a3:94:bc:41:8d:
         a1:3a:ae:b1:77:9a:22:b3:5d:bb:06:ba:fd:5a:de:d2:98:9c:
         73:71:b2:3e:d3:bc:7d:25:60:17:5a:1e:11:c7:24:d2:35:64:
         58:02:e4:13:a0:59:25:51:e3:ee:0b:ad:fa:5f:81:5d:31:f2:
         cf:7a:99:92:af:01:52:c2:cf:1a:21:0d:3b:ad:47:92:7b:76:
         bd:02:5b:99:72:49:f9:67:24:25:4b:0d:59:f1:2e:3b:6a:5a:
         b9:3a:68:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:55:56 2026 by rpki-client