Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File:                     WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier:          veXuQlkqGIkG7xUQwjkcyyp+pd5wCmOzAX6eff1pduM=
Subject key identifier:   56:FC:2B:97:E5:4C:95:43:37:35:6B:1A:A0:77:B1:C8:43:44:B6:CC
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer:       /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial:       019D25832C9F0A36BC764B3A204B61B30C39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number:          137E
Signing time:             Wed 25 Mar 2026 15:00:46 +0000
Manifest this update:     Wed 25 Mar 2026 15:00:46 +0000
Manifest next update:     Thu 26 Mar 2026 15:00:46 +0000
Files and hashes:         1: 0VnbCUUxMHz9IQSGbuoNhNu-3i0.roa (hash: hvzM8HfzEPqtWwc9Q56WgaJxRYytObZ9iUV/CwXnl4U=)
                          2: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: OW4IxSAqUXbHD9n/Ljtp/KNjvkiCbj0lPdbUa4pRUkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:2c:9f:0a:36:bc:76:4b:3a:20:4b:61:b3:0c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
        Validity
            Not Before: Mar 25 15:00:46 2026 GMT
            Not After : Mar 26 15:00:46 2026 GMT
        Subject: CN=56fc2b97e54c954337356b1aa077b1c84344b6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2a:41:d5:60:9e:38:fa:52:b1:f0:d8:95:10:
                    3a:62:b0:03:a3:cc:b0:cd:c0:07:9a:c1:a1:04:b2:
                    34:35:80:e1:aa:b9:b0:79:4e:dc:be:6e:a5:a2:ad:
                    58:d6:63:90:ee:3f:7f:0f:43:10:71:01:aa:6c:57:
                    64:42:f2:3b:0e:a8:e0:e7:c2:9a:98:a3:b9:2d:61:
                    c6:ec:ab:a4:1e:cf:4a:a5:1f:63:ee:94:3a:d4:df:
                    a3:99:92:38:88:14:ab:f3:db:58:2b:e0:46:52:82:
                    b6:ad:bb:55:6e:a5:d8:06:0a:9e:fd:10:a0:98:e3:
                    e8:05:e2:3f:23:35:fb:40:aa:51:c4:27:a1:13:ff:
                    d6:49:0e:42:b2:2f:6a:c3:12:1e:a1:cb:b2:ea:49:
                    d3:c3:2d:03:4f:d7:25:4c:57:0a:12:f7:91:74:ec:
                    db:9b:b8:e0:89:ac:d2:cf:73:ee:93:34:e1:67:3a:
                    ea:e4:f8:eb:04:bd:20:35:96:03:6f:78:7e:a8:8a:
                    8d:aa:8e:5e:1f:70:d1:9c:01:06:ae:77:db:c6:6c:
                    55:6c:25:61:d0:a6:d5:40:c6:dc:f5:15:0a:b3:40:
                    1d:88:d5:e2:33:39:69:f8:92:36:28:24:0a:4c:d1:
                    49:c8:b5:e6:bb:7d:a2:57:12:b5:e5:a8:e7:4a:bb:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FC:2B:97:E5:4C:95:43:37:35:6B:1A:A0:77:B1:C8:43:44:B6:CC
            X509v3 Authority Key Identifier:
                keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9a:f4:3a:88:b8:e0:21:a4:97:a5:0a:47:a3:2f:52:cf:1d:
         2b:fe:1a:5f:e3:52:83:7b:91:b0:e2:3d:9e:ad:b5:dd:f9:1f:
         c0:a2:42:ed:6b:55:35:a5:33:0e:80:d6:fc:ac:33:0c:21:24:
         02:1e:4b:68:41:c2:7c:2c:f2:ff:d1:97:da:4a:1d:af:a8:fe:
         f1:ab:b3:a9:3f:33:90:f2:64:24:6b:96:04:0f:77:3f:86:49:
         56:01:b3:ac:d2:50:4a:4c:49:2f:4d:e0:08:bc:99:72:aa:b4:
         4c:1c:df:ca:62:8d:d9:cf:71:e6:1f:de:86:5c:a7:90:c0:bd:
         84:58:dd:ee:80:ea:26:a1:a1:75:d4:0d:d1:99:68:2b:d4:0b:
         de:5a:63:89:32:12:c8:c1:d5:86:30:ee:a6:07:a7:41:5e:c4:
         67:93:d2:56:8a:bd:ba:d1:42:a4:5b:a0:68:11:9b:fe:96:53:
         30:14:0a:af:b1:d5:fb:51:e2:fa:da:34:93:20:e8:bd:a0:bf:
         d8:28:ac:5a:e3:c9:5d:a1:30:2d:70:b6:1d:d1:ed:26:3f:95:
         41:9d:33:e2:ae:bd:4b:fa:a1:34:46:55:cd:c5:77:22:95:46:
         30:c7:b7:f7:00:0f:e5:dd:b1:5e:9b:eb:1c:ba:41:f0:09:29:
         6e:ab:b3:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lgyyfCja8dks6IEthsww5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNjExMDJlZDRkNjZkY2Q5NTJkZTAxMzA0ZTBhZmUxMzg0
ZDAwYmYwHhcNMjYwMzI1MTUwMDQ2WhcNMjYwMzI2MTUwMDQ2WjAzMTEwLwYDVQQD
Eyg1NmZjMmI5N2U1NGM5NTQzMzczNTZiMWFhMDc3YjFjODQzNDRiNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ypB1WCeOPpSsfDYlRA6YrADo8yw
zcAHmsGhBLI0NYDhqrmweU7cvm6loq1Y1mOQ7j9/D0MQcQGqbFdkQvI7Dqjg58Ka
mKO5LWHG7KukHs9KpR9j7pQ61N+jmZI4iBSr89tYK+BGUoK2rbtVbqXYBgqe/RCg
mOPoBeI/IzX7QKpRxCehE//WSQ5Csi9qwxIeocuy6knTwy0DT9clTFcKEveRdOzb
m7jgiazSz3PukzThZzrq5PjrBL0gNZYDb3h+qIqNqo5eH3DRnAEGrnfbxmxVbCVh
0KbVQMbc9RUKs0AdiNXiMzlp+JI2KCQKTNFJyLXmu32iVxK15ajnSruQDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFb8K5flTJVDNzVrGqB3schDRLbMMB8GA1UdIwQY
MBaAFFphEC7U1m3NlS3gEwTgr+E4TQC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYt
Mjg4YmQ2YjllMDkyLzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYtMjg4YmQ2YjllMDky
LzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5r0Ooi4
4CGkl6UKR6MvUs8dK/4aX+NSg3uRsOI9nq213fkfwKJC7WtVNaUzDoDW/KwzDCEk
Ah5LaEHCfCzy/9GX2kodr6j+8auzqT8zkPJkJGuWBA93P4ZJVgGzrNJQSkxJL03g
CLyZcqq0TBzfymKN2c9x5h/ehlynkMC9hFjd7oDqJqGhddQN0ZloK9QL3lpjiTIS
yMHVhjDupgenQV7EZ5PSVoq9utFCpFugaBGb/pZTMBQKr7HV+1Hi+to0kyDovaC/
2CisWuPJXaEwLXC2HdHtJj+VQZ0z4q69S/qhNEZVzcV3IpVGMMe39wAP5d2xXpvr
HLpB8Akpbquzgg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:00:46 2026 by rpki-client