Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
File:                     Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft (raw, json)
Hash identifier:          d6GiojVYW3sa13sI+mRfz98iFp+Iv9jctc9ZHQ4sy98=
Subject key identifier:   A2:79:51:21:83:80:AC:79:33:C0:58:C9:A6:0E:F9:C1:30:5D:AF:19
Authority key identifier: 5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC
Certificate issuer:       /CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
Certificate serial:       019D26CD54232E9F022EC421302F37AA297C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
Manifest number:          08F2
Signing time:             Wed 25 Mar 2026 21:01:23 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:23 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:23 +0000
Files and hashes:         1: EdVO9FKaVINf4-EcfDH2n-UZXgI.roa (hash: dwVT4CPLLp3oBHUxJmbUMjoihn96t4N47NrHTtml6ac=)
                          2: MaHcS05o3WBeZOrNVbnsOPGuJZk.roa (hash: hWXPAtBNsAo9ZPaQbHx34drt2IC8j3ryox2B1+pnB+E=)
                          3: NDTyjuX0d0SqmeDC7nrxRfzybEQ.roa (hash: 0+UTjLVBfjPCy7oBImPLDU8M26qc7pRRuIqY0xDLdrA=)
                          4: Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl (hash: id+bOKhbw31IV2hHGrSK9H4Px+n5v8K2ATqGwpK/XUo=)
                          5: ybipZwfesbQV__aPxuV5d5A89PY.roa (hash: Y2ObOEWw+FxcDxPbeDirQ1ndGcwUsmZzdYgHyDiU8K8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:54:23:2e:9f:02:2e:c4:21:30:2f:37:aa:29:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b087d1dc98e26e4c959d09f6146d7fdf869e4fc
        Validity
            Not Before: Mar 25 21:01:23 2026 GMT
            Not After : Mar 26 21:01:23 2026 GMT
        Subject: CN=a27951218380ac7933c058c9a60ef9c1305daf19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:f1:a2:71:76:dc:c7:ab:50:9b:30:dd:9c:
                    02:00:52:65:70:89:eb:45:9e:53:d0:fc:12:8e:ad:
                    ba:11:4b:dd:1a:4b:71:a9:0d:c7:23:08:b7:6b:b5:
                    f6:1c:91:4b:d2:67:44:7f:4b:ac:e9:2e:df:76:02:
                    79:70:37:34:12:ac:ee:d9:8f:17:bb:83:f7:60:89:
                    6f:58:74:d1:e5:78:2a:5b:23:e4:a2:2e:45:86:d4:
                    c2:49:e8:f7:9a:82:bf:30:cf:b8:8b:36:68:60:ec:
                    38:6e:63:5d:a5:02:f3:88:50:fe:37:07:f7:c3:4d:
                    c1:59:32:7d:de:80:24:7c:25:c6:2e:bf:ae:c7:40:
                    38:f3:c4:f6:73:91:57:b8:00:fe:13:de:6f:e2:e1:
                    ff:2a:14:2e:c5:2e:4f:4a:be:a5:e4:12:1a:e8:cd:
                    30:44:6b:a7:3f:3d:7c:6b:2e:83:3c:91:f8:28:b9:
                    c9:44:0c:79:3c:e4:c3:a9:5b:69:90:a8:64:92:88:
                    35:f9:f6:49:48:b6:a2:33:e9:47:ba:ca:12:ac:ea:
                    d2:b3:3d:d2:57:0d:09:9f:4d:9f:56:c8:ca:86:d5:
                    2d:29:40:cc:90:e3:66:21:4e:68:ef:1d:9e:69:70:
                    25:71:5d:cd:5d:fb:03:47:1a:1c:21:fc:79:7d:08:
                    67:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:79:51:21:83:80:AC:79:33:C0:58:C9:A6:0E:F9:C1:30:5D:AF:19
            X509v3 Authority Key Identifier:
                keyid:5B:08:7D:1D:C9:8E:26:E4:C9:59:D0:9F:61:46:D7:FD:F8:69:E4:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a9a06e-69ac-45ce-badc-09dbd08cbe2d/1/Wwh9HcmOJuTJWdCfYUbX_fhp5Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:aa:a0:f0:74:8f:cf:21:32:33:b7:93:fb:1b:19:ff:ef:d9:
         69:5c:9e:d9:28:67:95:e7:ec:89:b1:77:d7:63:90:5c:4a:4b:
         8b:d2:9b:7c:27:b9:90:d4:7b:71:a0:d6:d1:78:ff:ab:8d:7a:
         9e:ff:d9:60:37:05:2e:55:28:5c:44:2a:a0:39:0e:fe:47:8e:
         30:d7:ab:6c:c3:10:87:36:e5:ba:38:83:e5:83:f3:a4:f8:cf:
         8e:30:d8:4f:8f:0f:59:e7:4d:50:d4:d2:d3:4a:eb:94:58:13:
         ae:71:c2:4e:86:93:a6:2c:f7:15:d9:96:ac:c0:dc:db:33:14:
         82:d3:b2:ab:d7:35:ee:9b:0c:dc:e9:9e:74:ab:e3:ef:ec:f2:
         9c:7c:3d:c9:05:a3:3c:dc:fc:1d:a7:5c:f0:a7:2f:92:56:ca:
         62:26:67:25:f7:be:62:ce:cc:6a:6c:c5:98:ba:75:47:bb:a0:
         0b:3b:cb:1e:c4:1d:df:15:85:ee:0c:5f:20:3a:76:05:0d:21:
         eb:50:f1:8b:83:c3:78:a1:3a:9a:3c:ad:60:33:8d:14:f7:ec:
         00:02:6c:f7:31:28:0a:68:e6:d2:4a:61:e2:a9:ef:84:08:6a:
         5c:61:f3:85:44:02:07:0f:3e:73:1c:cb:39:18:99:76:08:ea:
         2a:0d:1d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:57 2026 by rpki-client