Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
File:                     WAFcyNofG780PiarII34uyb9U64.mft (raw, json)
Hash identifier:          DqFSjd/f5UFVNCAyt//dgHGz30psHu77w3WQnkuJz9g=
Subject key identifier:   52:D3:14:8F:5C:B0:AA:29:D7:E2:01:ED:87:C4:44:33:47:0D:DC:D4
Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE
Certificate issuer:       /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
Certificate serial:       019E1D59A98B7CF533863E26A27350388845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
Manifest number:          191A
Signing time:             Tue 12 May 2026 18:01:15 +0000
Manifest this update:     Tue 12 May 2026 18:01:15 +0000
Manifest next update:     Wed 13 May 2026 18:01:15 +0000
Files and hashes:         1: Im_-Uz2tqMoLUO0K7lAiChMaerA.asa (hash: QEDvScemsSsXfJycofLB6Jaj+H/Hh6UPm9fvBoayQFU=)
                          2: NrgQ_5wI2_4HvegQwjwM_Zc8xdM.roa (hash: OvI93tgCnxoNbRAqaNHTlYSufUon+ySjKVV/RPhyqkQ=)
                          3: WAFcyNofG780PiarII34uyb9U64.crl (hash: ZVRpPW7A/Iy+E9LiFhjrTrbndVww5MAx7n3MZyTO0ow=)
                          4: Wr5va4tlLM7OArIc13NwZVzUZSM.asa (hash: ZnrWop8OkpeoCvz/MYLeKchWVnb3K25hWmby4HEumAM=)
                          5: pqktpCxLGm0ef4jw2Ni2l6y-LvY.roa (hash: qzKRc0VCQWppc/oSUuGJGwq+ZahDXUJUBntxA72SvqY=)
                          6: sWwYUGN-qX4W4KsEuJ-NzSM85K4.roa (hash: 7Ca2j50Ko1N7zY6m8PRjHntwoi86jOPRDQ4B+sSksSw=)
                          7: z0dUAUAYs2FDj8KE93GCEX_1moY.asa (hash: jkyk8H05lxWxlsGkVRiKoTC3QiMwT13kS4SkDxeCCDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:a9:8b:7c:f5:33:86:3e:26:a2:73:50:38:88:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae
        Validity
            Not Before: May 12 18:01:15 2026 GMT
            Not After : May 13 18:01:15 2026 GMT
        Subject: CN=52d3148f5cb0aa29d7e201ed87c44433470ddcd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8f:ea:fa:89:ac:93:fa:e5:36:43:ed:84:d6:
                    03:de:b2:2f:d3:ee:ba:f2:c5:57:53:62:5f:3d:29:
                    e3:15:b1:18:c7:10:65:41:24:58:c0:2f:48:7c:d0:
                    19:6a:a3:6a:59:a2:85:97:68:79:bc:73:c0:30:58:
                    38:de:b2:40:6d:42:fb:86:43:4b:41:fa:5a:68:bc:
                    72:94:35:2b:4b:b8:c6:ed:bc:f0:d4:c4:67:5d:2f:
                    2b:7f:17:43:02:6d:22:c3:d9:ca:8f:5f:d4:0c:ff:
                    34:66:db:d5:68:fe:85:fd:e1:83:f5:cc:05:ef:11:
                    86:0b:9f:ae:15:e4:07:c9:cc:68:8b:83:e3:cf:c8:
                    58:03:ea:cc:41:38:8b:95:cc:ad:ee:10:49:28:9c:
                    24:41:36:9b:77:08:6b:67:17:6f:fa:7c:46:1a:b2:
                    1e:df:c6:c7:5b:c7:77:cc:0f:cf:d2:94:bc:84:08:
                    a0:56:d5:d0:4a:ed:b9:dc:02:7d:f1:e0:88:b6:7e:
                    83:f1:18:36:2c:73:d1:e0:ba:59:d1:0e:be:5e:d2:
                    ed:d7:5a:97:6b:d5:f6:aa:91:c5:c7:86:ba:31:1a:
                    52:c6:d3:90:a3:7b:8d:59:61:46:ec:08:57:7a:02:
                    70:d0:b1:aa:5f:89:33:08:cc:40:9d:ac:a9:01:c6:
                    e4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D3:14:8F:5C:B0:AA:29:D7:E2:01:ED:87:C4:44:33:47:0D:DC:D4
            X509v3 Authority Key Identifier:
                keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:1f:2b:ce:bf:48:dd:72:d8:d9:c3:69:0c:c5:fb:da:81:97:
         9a:82:ac:c3:36:c1:1d:a3:f4:44:b6:0b:de:b4:b4:15:66:28:
         a5:a9:64:e1:7c:19:7a:0d:c5:80:f7:8c:4f:5e:4d:7f:c9:a3:
         f4:b6:d8:ea:7e:36:2f:fe:75:e3:23:a9:d1:bc:b2:e5:2b:59:
         ad:67:53:72:75:c7:cd:2d:20:88:70:b3:9f:b4:bd:25:a1:68:
         3c:e4:6b:dd:2d:47:ba:37:75:b0:95:9e:17:a1:a7:07:24:07:
         75:0b:30:f1:13:8e:a3:74:fe:76:47:59:bf:ba:50:c4:c7:c1:
         ac:dd:ec:d3:1c:91:90:8e:7e:53:ad:9a:24:49:ff:a4:93:04:
         3f:33:21:91:27:2e:1f:52:83:8a:eb:66:ad:01:c6:01:a3:c7:
         e4:2d:69:a5:38:04:89:41:f4:0d:ed:bf:b7:92:1c:68:36:80:
         09:21:a9:f3:b3:f8:ad:b5:61:63:da:72:46:b8:e0:83:ea:09:
         bc:22:8b:4e:a7:cf:48:40:15:89:f3:fd:20:84:4e:23:97:84:
         5a:9a:3c:16:4e:bc:9e:55:ec:cb:55:dd:de:89:dc:6d:33:e4:
         3f:34:9e:8a:00:a5:c9:16:fb:8e:96:fb:6c:67:05:42:17:9e:
         9e:33:62:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:30:25 2026 by rpki-client