Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
File:                     W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json)
Hash identifier:          4EQOG8zTCz9c2xN4iRTPcn5CF1c3Q9P6KyF3RZn79wQ=
Subject key identifier:   BB:4B:9A:BC:F9:9B:9D:93:B4:D0:B3:62:7C:56:A7:1C:E3:05:5B:AD
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Certificate issuer:       /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial:       019D2A3BE1C526AA70801F7C81F50CB27143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 13:01:00 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:00 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:00 +0000
Files and hashes:         1: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: kSUOkTo+jHRDx1JDNWgdvC45aKpxWq4s2OQFBOsb5AA=)
                          2: xBMgUB3OiRn5NfPpJr2oznHaboc.roa (hash: Ge6/j/nZc+qoP4ABRM1EYKbSsOCo7dSlgAk6T5wqxkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3b:e1:c5:26:aa:70:80:1f:7c:81:f5:0c:b2:71:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
        Validity
            Not Before: Mar 26 13:01:00 2026 GMT
            Not After : Mar 27 13:01:00 2026 GMT
        Subject: CN=bb4b9abcf99b9d93b4d0b3627c56a71ce3055bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ad:3d:d2:97:0e:81:a4:4d:ed:96:89:df:7a:
                    1b:2c:d4:db:6b:13:76:b1:b4:65:28:49:ed:58:6b:
                    f9:22:e5:e0:07:be:c4:1d:0c:4e:1c:b7:d0:6c:71:
                    28:6e:0b:43:d4:b8:30:82:9b:fb:9d:bb:e9:35:31:
                    61:a8:86:c0:d0:be:90:d2:d7:1c:fb:ad:1d:2a:82:
                    ee:48:6f:99:4c:2c:93:37:3b:9a:a4:9a:2c:02:51:
                    9c:4b:80:aa:25:25:3d:4f:f2:2f:89:f1:4f:5d:f8:
                    a4:ed:65:32:d7:e2:b8:74:82:f0:61:0d:34:64:47:
                    d0:b5:a7:37:0f:e2:47:0e:d2:13:e9:00:09:45:37:
                    89:1e:c7:22:09:ee:16:d3:91:65:61:43:c6:8b:29:
                    e2:34:3b:1c:06:a7:1c:03:ff:69:9c:89:50:a9:60:
                    5f:bb:f9:f0:b9:98:c9:57:54:3b:a7:bb:48:c2:ba:
                    64:7c:46:8c:d6:17:f0:fa:70:ee:3e:23:b1:6d:75:
                    5d:33:68:1c:10:6f:9a:a8:c3:fe:ed:47:7e:eb:29:
                    74:5f:78:26:05:2d:9a:cc:7a:06:c3:d3:03:01:15:
                    49:6c:0e:8d:18:12:e1:27:23:0d:58:3d:26:26:cc:
                    29:72:db:d5:d4:12:93:7d:e2:85:7a:23:06:66:2f:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:4B:9A:BC:F9:9B:9D:93:B4:D0:B3:62:7C:56:A7:1C:E3:05:5B:AD
            X509v3 Authority Key Identifier:
                keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:0b:43:6e:21:b2:93:d9:f7:9f:91:20:09:b8:be:0f:58:6d:
         58:09:97:1a:f2:53:11:2a:4f:fc:72:35:f7:fb:74:11:f4:31:
         b6:79:7c:05:b0:52:9e:f0:ea:c2:5c:53:76:79:fa:2e:33:f2:
         df:76:77:1b:0a:52:52:93:b4:db:51:c2:7e:c7:b0:60:fa:39:
         db:96:21:47:08:a6:00:f4:e8:15:66:3e:1e:a9:41:e8:87:8e:
         4c:4f:85:00:de:7f:85:5f:54:99:8d:72:f4:14:fd:05:20:8b:
         8a:b6:e4:6d:64:d1:10:5f:55:5d:77:a6:fa:76:53:21:e9:8e:
         72:96:f0:c4:a4:5f:1a:76:d1:92:62:99:8e:18:b9:e5:cf:85:
         85:12:e3:55:87:5c:ab:7e:02:b9:70:93:2c:02:de:4c:da:a6:
         e7:48:9c:04:68:84:f6:b0:ce:0e:60:fe:a6:fd:04:79:b8:3d:
         db:47:5f:fd:38:cd:c7:75:f0:1e:06:5f:12:07:2c:2c:dc:87:
         13:55:1c:9d:2d:67:1a:05:a1:d8:58:9c:4f:1a:cf:12:a4:cf:
         12:17:9d:9e:40:83:d8:83:c2:8a:1f:5b:be:40:14:73:b2:e2:
         29:09:b2:d7:54:d9:f7:df:a4:73:20:a7:9a:da:5b:81:19:c1:
         46:db:95:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:18 2026 by rpki-client