Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
File:                     rwsdp573_B75WWLcigHyuNSzUr8.mft (raw, json)
Hash identifier:          WN8Tn7HvGQaoUrdi8e29g1XlbMXcVNIjE5ZvU+lqxb0=
Subject key identifier:   B2:B0:34:22:D0:82:6F:30:0B:5C:94:72:39:22:DA:71:A0:43:92:E5
Authority key identifier: AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF
Certificate issuer:       /CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
Certificate serial:       019D27A90CF61927BF17524A53B5E3AF4013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 01:01:23 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:23 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:23 +0000
Files and hashes:         1: 7vVeQuE1pXfb85TPk9RxkOqhUsQ.roa (hash: Zidvg6m8T57hltHN7w1iLL7TnfvL//CVYkIzvMWOn9A=)
                          2: rwsdp573_B75WWLcigHyuNSzUr8.crl (hash: qKFnQJQQsle6cEoUDCNnSJjM0H3qRZY1NWVtBpMg5+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:0c:f6:19:27:bf:17:52:4a:53:b5:e3:af:40:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf
        Validity
            Not Before: Mar 26 01:01:23 2026 GMT
            Not After : Mar 27 01:01:23 2026 GMT
        Subject: CN=b2b03422d0826f300b5c94723922da71a04392e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:9d:2c:9a:dd:12:6e:31:3f:9d:de:38:fd:
                    5f:6d:4e:65:47:6f:0b:d2:1f:6a:4c:5e:a2:98:82:
                    3c:6b:8d:00:a2:72:e2:45:b1:1b:94:13:d8:1e:2b:
                    2c:6e:a5:bd:b4:0f:2e:84:98:21:ee:4b:7d:7e:d4:
                    30:4c:7b:0d:ec:9d:fc:6d:9b:08:41:62:9b:70:b7:
                    dc:a8:76:9e:16:17:b1:9a:32:6c:37:0b:47:28:f6:
                    98:7c:41:b1:9a:8f:e3:3c:c0:2a:d4:9b:d5:c3:be:
                    a5:19:11:d9:bd:94:f7:e0:e9:ab:b1:35:ea:5d:e2:
                    fe:72:f5:62:0f:5b:2c:66:57:9c:9c:74:68:05:16:
                    53:1d:c8:3b:93:bc:7b:48:db:8f:eb:f5:0b:9d:d1:
                    71:a3:56:2e:79:e0:ae:64:28:fc:3c:de:0a:45:eb:
                    f5:3e:07:af:64:b6:f1:f7:7c:fd:13:a1:2e:6a:a3:
                    36:27:fb:87:bb:8b:89:b8:c0:38:03:1d:8f:92:98:
                    39:82:b3:17:3c:9f:74:8a:2f:19:a2:10:fa:2f:22:
                    0d:57:23:a1:8f:c9:fa:fc:ce:4c:0a:bd:bc:87:98:
                    05:a1:bf:15:16:c8:30:67:3a:0c:e0:14:1b:dd:13:
                    e4:b2:91:d9:be:1d:99:2b:3a:11:21:64:7d:61:0d:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B0:34:22:D0:82:6F:30:0B:5C:94:72:39:22:DA:71:A0:43:92:E5
            X509v3 Authority Key Identifier:
                keyid:AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b3:a3:7a:05:40:a3:c5:60:b0:e8:d9:c7:53:5e:a1:ad:f1:
         c3:b1:0b:5a:38:da:6e:e2:47:f1:d8:53:ad:41:0d:23:bc:a5:
         a8:44:35:cf:f6:30:cd:55:c8:7a:a4:1d:11:7e:11:89:47:a2:
         5e:57:58:49:22:60:66:7c:2e:cc:8e:0f:36:4e:3d:98:e5:41:
         60:00:68:24:83:4d:49:bc:30:98:fd:08:8c:b1:76:ff:ef:e2:
         df:f7:28:ea:95:93:2c:df:af:45:51:82:a9:af:72:94:1e:13:
         30:52:c0:64:ea:ca:c2:d6:02:92:14:f4:e7:ea:5c:61:c3:17:
         f0:fe:cf:a0:b8:83:aa:33:76:b5:96:d3:c1:54:4e:2b:66:65:
         c9:93:7e:fd:80:cc:6e:94:63:2d:06:18:4a:8d:51:d9:03:b0:
         aa:d8:84:bd:cb:c1:bb:67:be:09:be:67:82:33:05:e6:04:c1:
         65:3a:12:c8:ba:a5:e3:93:5f:0a:87:18:da:fc:ad:c1:60:0d:
         fa:fd:07:fe:8e:77:01:cf:37:d4:01:3a:db:bd:e3:83:69:47:
         e5:a5:d4:53:de:6d:b6:6c:ff:0f:e1:48:83:1a:88:f3:fa:48:
         4a:a2:fd:33:86:8d:50:f5:e7:8c:af:5f:58:79:7e:3f:2f:5a:
         6e:a5:ef:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:53:38 2026 by rpki-client