Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File:                     WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier:          CljfvNk9Lex/MbRUpX+Qw5khWXJ7yXuzhxoPU11kJIM=
Subject key identifier:   A2:73:D9:59:61:E2:8B:97:1E:7A:9F:8C:E4:5D:5D:30:FC:28:E0:05
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer:       /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial:       019D25BA343EC13AE73B06D391467C3C88F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number:          1898
Signing time:             Wed 25 Mar 2026 16:00:53 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:53 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:53 +0000
Files and hashes:         1: BY0duX9kQwVXjgquhsR-munhjnQ.asa (hash: NvBZnkapjPSPy1tNHiYvTA3NcGg5KXOBAdMekZQ3UrA=)
                          2: NrgQ_5wI2_4HvegQwjwM_Zc8xdM.roa (hash: OvI93tgCnxoNbRAqaNHTlYSufUon+ySjKVV/RPhyqkQ=)
                          3: WAFcyNofG780PiarII34uyb9U64.crl (hash: Nuk25EvmiZxFLNffMnHcR6WmQ/UkijrN0GHTbwdWR6I=)
                          4: Wr5va4tlLM7OArIc13NwZVzUZSM.asa (hash: ZnrWop8OkpeoCvz/MYLeKchWVnb3K25hWmby4HEumAM=)
                          5: pqktpCxLGm0ef4jw2Ni2l6y-LvY.roa (hash: qzKRc0VCQWppc/oSUuGJGwq+ZahDXUJUBntxA72SvqY=)
                          6: sWwYUGN-qX4W4KsEuJ-NzSM85K4.roa (hash: 7Ca2j50Ko1N7zY6m8PRjHntwoi86jOPRDQ4B+sSksSw=)
                          7: z0dUAUAYs2FDj8KE93GCEX_1moY.asa (hash: jkyk8H05lxWxlsGkVRiKoTC3QiMwT13kS4SkDxeCCDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:34:3e:c1:3a:e7:3b:06:d3:91:46:7c:3c:88:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
        Validity
            Not Before: Mar 25 16:00:53 2026 GMT
            Not After : Mar 26 16:00:53 2026 GMT
        Subject: CN=a273d95961e28b971e7a9f8ce45d5d30fc28e005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:56:fd:99:35:3e:8c:c2:f7:5b:c6:52:b8:e0:
                    65:90:62:60:0a:3a:ef:fa:d5:5d:36:db:cd:c5:ce:
                    a8:f6:57:7c:13:59:23:f1:a6:a7:88:26:d8:ac:7f:
                    e8:15:a9:88:80:03:1d:4b:0e:51:69:dd:a0:55:26:
                    83:ae:fb:2a:a1:0b:33:85:e5:a7:3e:c0:b1:e8:ef:
                    4a:f9:75:73:86:75:4f:52:50:f1:63:3d:5c:14:47:
                    d0:eb:0b:d3:68:22:2a:3b:ef:9e:2c:d7:31:f9:4e:
                    89:10:55:6a:03:a8:54:3b:57:48:69:bf:93:4c:cf:
                    fb:ef:9f:8c:0b:a9:23:c7:7f:f5:a8:19:3c:4d:73:
                    13:d5:70:89:26:7f:02:6b:04:a9:e8:4b:e8:ef:e7:
                    ed:81:14:1e:81:4b:e5:d5:68:6d:83:5a:c3:6f:12:
                    05:4e:fe:73:3e:e1:40:82:71:fa:8b:ec:27:47:a0:
                    7a:e3:12:ef:f4:08:ff:58:11:fc:1a:49:19:03:26:
                    b8:7a:39:3c:90:f4:67:a4:f7:92:fe:c7:bc:8c:34:
                    a2:30:a8:9d:5d:79:2e:91:b7:1e:70:1f:96:cd:d6:
                    72:7b:1b:9e:19:77:39:e8:45:78:7d:c7:7b:68:73:
                    78:d5:01:c8:00:2a:25:78:fd:fd:2d:fc:6e:53:6d:
                    b1:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:D9:59:61:E2:8B:97:1E:7A:9F:8C:E4:5D:5D:30:FC:28:E0:05
            X509v3 Authority Key Identifier:
                keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ab:9c:ce:38:72:63:3f:26:89:b2:79:45:7e:9e:4b:88:fc:
         89:26:39:84:51:ae:d3:91:47:5a:22:95:4e:7e:51:d4:7b:34:
         9a:e3:69:0c:78:20:1d:38:d2:ee:21:5c:b8:55:0e:59:5a:4a:
         58:af:e3:2e:86:21:94:84:bd:bd:ea:dc:ad:75:49:0d:c5:54:
         f4:61:b1:74:cb:88:5e:f8:14:54:97:dc:0c:b0:83:97:c4:b5:
         cd:0a:73:b8:4f:de:9b:49:f6:bc:0a:10:c7:be:52:e2:7a:b4:
         2a:99:09:88:86:f8:b9:85:79:92:e0:a7:68:e5:1d:0f:64:a9:
         a0:d5:07:d7:a5:10:c6:90:86:d2:02:82:5c:7d:4c:f7:26:fe:
         67:3a:09:43:3b:98:46:3e:66:30:27:27:2d:99:7b:84:32:ce:
         d5:fa:3d:f3:12:23:a4:ab:4d:d9:79:2f:5a:30:0e:60:f5:f0:
         93:84:a8:c2:00:e2:11:a1:8a:ad:4c:72:c4:2c:a1:27:cd:91:
         24:7e:a7:6e:bf:26:71:c4:db:90:5d:12:5b:c1:ec:3b:6e:dc:
         be:2b:93:21:0c:2c:8f:59:66:04:0a:ff:3b:59:22:c9:6e:e2:
         9d:c4:64:cd:38:de:71:5d:75:ed:1f:d3:d4:f9:c4:17:91:d1:
         86:f9:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:49 2026 by rpki-client