Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
File:                     W0ShsaCcqepQ5aW9W3d737XzVls.mft (raw, json)
Hash identifier:          1BCt6kvSqQpbM4EJsBwVxhPVJntji/644brK2TH/Uwk=
Subject key identifier:   75:A7:72:8C:CD:9D:2D:77:B0:9B:4A:53:99:BE:11:09:FC:9F:FF:78
Authority key identifier: 5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B
Certificate issuer:       /CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
Certificate serial:       019D265FA426A7B2C937AB7CAE73740EC51C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
Manifest number:          BF
Signing time:             Wed 25 Mar 2026 19:01:35 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:35 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:35 +0000
Files and hashes:         1: W0ShsaCcqepQ5aW9W3d737XzVls.crl (hash: dcduwG/biFw/Duf0ETRk7cet0rdTIKaRhXdE0CNid6o=)
                          2: y7HPoPOKJt4_BEiMkLGZ9Q4eEJM.asa (hash: w9rApASglHDBpx/DYcJualDyoNDP/7m3UoJGYbB33JQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:a4:26:a7:b2:c9:37:ab:7c:ae:73:74:0e:c5:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b44a1b1a09ca9ea50e5a5bd5b777bdfb5f3565b
        Validity
            Not Before: Mar 25 19:01:35 2026 GMT
            Not After : Mar 26 19:01:35 2026 GMT
        Subject: CN=75a7728ccd9d2d77b09b4a5399be1109fc9fff78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:de:72:c9:5a:9e:b7:41:66:6e:b4:73:ea:cd:
                    20:02:3a:75:69:2d:bd:e1:ae:67:c6:73:83:80:9f:
                    b0:d1:69:26:42:0a:06:8b:15:12:c6:e2:ce:84:52:
                    61:5f:79:a3:97:74:52:f6:57:61:e9:d1:f0:82:d2:
                    30:7d:0b:15:50:1b:40:cd:32:80:d8:a5:47:f6:9b:
                    a4:63:61:fa:6b:10:66:be:1f:40:d2:77:dd:62:9a:
                    7c:8d:66:d5:ce:a4:36:32:05:2f:6f:4d:5c:39:11:
                    10:20:a2:e6:53:7b:76:8a:0c:9d:7d:ec:79:80:5b:
                    fd:c3:01:cd:33:92:72:54:73:03:ed:17:cb:34:87:
                    9d:ec:06:40:eb:a1:39:7d:e3:c7:9c:16:5e:31:bd:
                    b1:88:30:ef:f6:7f:18:2c:b9:2b:3f:c8:52:70:9f:
                    ac:e0:48:45:e3:43:50:62:80:fc:82:f4:cc:44:1f:
                    6f:16:74:4c:0a:6b:15:a5:67:b6:07:71:ec:93:bb:
                    74:2d:cc:fa:82:3c:cd:c5:bb:26:cd:58:ef:dd:63:
                    2c:7f:93:f4:a6:58:7b:78:9f:ca:94:ee:d5:76:27:
                    32:be:ed:cd:3e:9b:a8:d8:45:96:6f:a8:e6:5f:a6:
                    eb:f1:56:29:ff:64:fc:13:20:d9:07:2e:4a:d9:36:
                    e4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A7:72:8C:CD:9D:2D:77:B0:9B:4A:53:99:BE:11:09:FC:9F:FF:78
            X509v3 Authority Key Identifier:
                keyid:5B:44:A1:B1:A0:9C:A9:EA:50:E5:A5:BD:5B:77:7B:DF:B5:F3:56:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0ShsaCcqepQ5aW9W3d737XzVls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b63a01-7e7b-4a5f-9683-1cd9926c5495/1/W0ShsaCcqepQ5aW9W3d737XzVls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:51:4d:a0:92:fe:b2:17:81:8a:1c:32:23:65:7e:b6:dd:7f:
         29:fa:0d:fc:d7:51:64:44:3a:02:f3:31:50:5e:ac:f1:27:dd:
         86:d4:0e:54:35:e9:21:1d:ee:e4:c8:bf:14:85:49:3c:9b:10:
         44:61:39:8f:af:10:66:2c:09:6d:0f:67:5c:af:1b:97:0d:f6:
         15:9a:ec:3b:f0:a1:36:3b:70:f7:24:8a:07:9c:4c:5f:00:c5:
         44:a7:11:40:90:4d:e2:95:13:c9:df:88:03:b7:c1:2c:4c:61:
         ec:79:5e:26:b8:fe:7f:58:10:d0:9b:20:dd:b2:80:72:30:3d:
         61:14:07:78:e9:39:d9:5b:9f:b1:d4:06:a6:18:e6:c1:0a:49:
         05:14:b8:97:0b:fb:46:da:20:be:22:ed:77:e5:12:6f:19:0b:
         9f:b4:0b:d2:23:75:57:ed:8b:41:2f:c8:cc:ee:1a:41:57:93:
         80:27:97:64:4c:48:e5:5b:b5:56:01:9e:22:c0:3c:c3:bb:68:
         57:84:bd:da:9e:91:bd:1e:7a:a8:11:fd:b6:be:51:1d:f2:21:
         e8:ac:0a:45:bd:ea:d0:cf:62:91:f8:bc:bc:cc:5a:ad:6a:df:
         6d:25:4c:9f:77:c6:2a:cf:f1:b9:33:e8:25:9d:b8:a3:e3:46:
         35:31:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:45:13 2026 by rpki-client