Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          QZPzIP6KyY9/TDH2Hs8DvJgMYb4z3gRpNAqRJE/OLiU=
Subject key identifier:   68:A4:41:D5:0A:21:C0:97:01:D1:EB:09:56:ED:53:FF:18:36:C4:57
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       019D273A8FD1C301FF8B41A19376639BF35B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          189E
Signing time:             Wed 25 Mar 2026 23:00:42 +0000
Manifest this update:     Wed 25 Mar 2026 23:00:42 +0000
Manifest next update:     Thu 26 Mar 2026 23:00:42 +0000
Files and hashes:         1: OeUkA-MxuBY0MCQq2lEXcd7LDp0.roa (hash: UNu3aGNU9iKX9W+pdSbXjn6MIdvAzU/dQ2Ruk579C2c=)
                          2: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: M4TxfGFsDnTmIeVOCFA91ILjEaToQGOdMpOkbbzsLnI=)
                          3: _LKma__zHFDMDJXCFflTJpsJLLo.roa (hash: d16O3qOwG02xNq1nLgFHuKeCvYDVgJiMUkRZsNPQaBE=)
                          4: klXMh69HPg_6eKMxQVgx6zhe1QE.roa (hash: vG86oygd0IFm9Rxuz3bX4pixPzbUrSLnke23ygFfpi4=)
                          5: p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa (hash: r27HfBWDMYwyRF//qyu0OtsF9qIPudC+kjCHFI00zPo=)
                          6: pgoXDP1h0nWBwbv9FG2W5mHI85k.roa (hash: OZdZQ/KCgv22adlJuUYrt3hL7fGkm6hBd3n3kVRfbgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:8f:d1:c3:01:ff:8b:41:a1:93:76:63:9b:f3:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Mar 25 23:00:42 2026 GMT
            Not After : Mar 26 23:00:42 2026 GMT
        Subject: CN=68a441d50a21c09701d1eb0956ed53ff1836c457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:8a:b1:be:6b:ef:7c:48:ed:8d:91:15:ff:
                    c2:79:5c:80:7f:32:df:5a:c5:ff:93:f0:68:88:5b:
                    3a:fa:23:da:ec:63:a4:cd:7a:fb:45:17:c6:d9:13:
                    62:f3:7e:17:a4:5d:21:8d:c3:dc:86:ef:fb:de:cd:
                    2e:39:27:28:f9:93:03:49:09:28:da:46:4b:c6:cc:
                    9a:1b:6c:3a:ab:00:8a:32:8f:8c:ef:95:16:79:d1:
                    03:79:e6:f8:9c:ba:cc:2e:16:4c:3d:d4:b0:30:7a:
                    d6:45:51:8a:51:3f:42:97:d8:77:ff:b3:c8:86:1a:
                    ba:5e:ba:45:b1:70:d4:e4:db:50:e3:e3:cb:40:68:
                    a8:00:10:94:4f:50:09:ab:cc:b8:89:5f:c7:b6:26:
                    87:80:13:86:a1:2d:64:18:39:4e:19:80:0d:fc:fe:
                    17:24:f8:20:fe:6d:3b:4a:dc:26:5d:b7:7e:de:2c:
                    27:58:c8:88:f4:3c:fd:28:11:55:75:8d:c5:15:63:
                    80:0d:e8:14:9d:3a:ce:bc:70:b7:92:56:d8:6d:91:
                    df:2c:1a:41:fb:a7:9e:bd:03:51:4e:2a:3f:06:73:
                    8b:82:9b:96:57:84:e9:a3:be:fb:9a:02:7f:0a:48:
                    7b:87:3c:f3:d3:e6:da:33:fd:c5:57:ae:db:8a:47:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A4:41:D5:0A:21:C0:97:01:D1:EB:09:56:ED:53:FF:18:36:C4:57
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:c4:45:34:65:3a:94:04:78:e9:fb:e2:51:1f:e9:f8:a4:49:
         62:d4:2a:ff:ef:a6:d2:90:ed:38:72:1e:e5:48:76:48:42:f8:
         ee:f5:bf:32:29:28:5b:15:d6:da:de:9f:27:68:65:73:e1:81:
         a2:7d:e1:6c:f0:69:f4:d6:15:60:4f:26:16:f0:80:a0:d6:c2:
         ef:50:69:11:f0:d5:52:d3:a8:e6:f0:9b:3d:42:6a:47:26:2f:
         ca:69:c0:5a:eb:5c:23:83:69:f6:48:c6:fd:d1:0d:f2:a0:9b:
         55:3d:3d:36:90:b1:98:9e:44:b1:16:2d:26:99:ad:ed:4d:01:
         bc:c3:cf:b9:d8:c0:4e:5f:60:52:ff:37:d1:9b:52:45:bd:c6:
         91:f4:3a:c4:99:78:6c:9c:e1:22:6e:9b:7e:19:13:62:a9:dc:
         fd:a5:52:8a:0c:4b:41:5a:27:a4:01:32:b8:91:88:f1:f5:bf:
         d8:21:2b:26:9f:cb:3e:4e:2b:e9:71:67:62:10:e2:b8:11:f4:
         af:4f:7d:89:4a:28:5d:b2:86:77:77:b7:c1:4a:64:61:5b:8b:
         0b:a2:47:c5:4a:59:45:ee:71:cc:82:1e:de:0b:c2:f6:e4:6b:
         bb:8d:fe:fd:ba:9f:1f:4c:e4:88:d2:fb:f1:bf:11:87:fa:f9:
         d3:6a:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:00 2026 by rpki-client