Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
File:                     WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft (raw, json)
Hash identifier:          St79lkd+8R/360+EwQmqYYYNz5RtVj5bM645AuwnQz8=
Subject key identifier:   2B:69:AC:D2:04:74:DD:CB:AC:8A:02:6B:C5:FD:0A:C3:F5:53:E3:BA
Authority key identifier: 59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5
Certificate issuer:       /CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
Certificate serial:       019D2703C674EB848E0573A7CC4FC2CC9A42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
Manifest number:          15C5
Signing time:             Wed 25 Mar 2026 22:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:51 +0000
Files and hashes:         1: A_qMp1Z14Eo4YybYC7Vj77PU9K8.roa (hash: aNl3FqttAjZ15pu6lmuN+OGy+dDFilFCjj/yiQ9YQls=)
                          2: WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl (hash: d7l91trW86UVrtXDzeLrEGpy7Ns21B5Vqd5qvk4jOAQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:c6:74:eb:84:8e:05:73:a7:cc:4f:c2:cc:9a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
        Validity
            Not Before: Mar 25 22:00:51 2026 GMT
            Not After : Mar 26 22:00:51 2026 GMT
        Subject: CN=2b69acd20474ddcbac8a026bc5fd0ac3f553e3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:84:6d:3b:b6:b1:c4:9f:fb:5e:d5:61:59:7e:
                    90:24:1d:c8:76:31:5d:d3:a6:5f:d3:fc:47:4d:57:
                    1a:4d:98:37:d1:5b:53:85:7f:e4:e3:18:27:4a:d8:
                    d7:a1:08:d8:d2:e8:bb:cf:f3:48:d0:c2:91:07:8a:
                    df:7e:bb:9e:8d:f5:9b:8f:85:d5:9c:70:0c:05:b5:
                    62:fb:a8:65:4d:11:22:f6:2d:79:12:45:8a:47:4b:
                    0f:39:41:15:48:68:3a:99:c0:81:6c:a0:44:48:e8:
                    ae:5e:ed:bc:38:05:64:db:4f:22:e0:fe:ab:6a:b9:
                    aa:22:10:93:e9:04:1a:18:9f:d9:b6:f8:b0:9f:71:
                    51:e9:55:7c:7c:bb:f4:4c:62:ea:8d:3e:60:39:88:
                    eb:5a:9c:11:13:6e:13:1f:e2:88:ad:41:f9:d4:bc:
                    fb:46:cf:5a:f1:33:b0:67:38:7e:dd:3e:d5:a1:b6:
                    6b:d0:b6:c7:67:22:8f:0d:f6:a5:72:55:54:9d:26:
                    ca:86:0b:c1:c6:0b:4a:5e:04:06:39:cf:67:41:6f:
                    ab:1a:f0:4b:d9:0c:02:25:5b:75:6b:2c:ac:ef:34:
                    be:5a:ea:b6:be:40:4d:34:93:d6:ac:9a:d8:7d:45:
                    ac:a8:f1:51:21:8c:32:94:e0:87:9a:c2:29:a6:cd:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:69:AC:D2:04:74:DD:CB:AC:8A:02:6B:C5:FD:0A:C3:F5:53:E3:BA
            X509v3 Authority Key Identifier:
                keyid:59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:91:4b:09:aa:e0:3d:ff:17:01:ff:d9:e8:fb:73:6c:96:97:
         f7:bf:a6:6d:9d:7a:bf:f8:e4:1f:5d:16:de:d6:93:35:a4:b4:
         14:51:36:2c:b5:4d:e4:09:e1:98:15:a4:21:29:5b:b2:a7:cf:
         3a:21:a0:31:13:6f:c0:e0:88:36:f2:08:95:c4:aa:0e:7a:62:
         ea:a7:da:77:fd:d6:7f:70:63:58:46:50:11:03:37:3e:62:8a:
         13:68:a7:f4:bb:62:d8:ad:8e:20:c6:5c:9d:fc:76:f2:73:f6:
         b7:cc:fc:6f:15:c2:21:5e:0b:fc:1c:33:0e:cb:29:d3:b4:41:
         19:dc:b1:43:37:9e:34:26:ad:f9:fb:41:c4:3a:b3:f2:6e:80:
         58:96:03:76:9d:5c:11:d1:59:ee:65:bf:1b:f0:97:41:62:3c:
         5e:8a:15:c3:c7:db:9a:6d:68:c7:73:63:f3:45:9e:40:04:5a:
         a4:25:19:31:59:77:ea:a3:8b:8b:c2:5d:be:37:12:92:b6:53:
         23:df:81:bf:79:7f:c4:e9:15:0d:f6:b3:09:41:fc:16:0b:a6:
         b1:b2:26:9c:0a:90:54:ab:00:fb:5a:66:e5:d4:95:0a:ff:08:
         db:d2:a8:cc:50:04:d6:c4:66:65:cb:9c:96:3b:57:52:17:15:
         06:19:bf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:27 2026 by rpki-client