Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
File:                     W1v_nUH3GfYmAMMtNBDduZ7Msww.mft (raw, json)
Hash identifier:          DerQPZtX2SCD2baaao9sW2PB4+iWtxW0koW2smGYZa4=
Subject key identifier:   CD:C4:FE:59:56:A2:C5:CD:C5:8F:07:67:42:E2:83:27:00:C3:AF:C2
Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Certificate issuer:       /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Certificate serial:       019D371B8DF7C87F77176BC85BEEF03CEC9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
Manifest number:          12B5
Signing time:             Sun 29 Mar 2026 01:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:45 +0000
Files and hashes:         1: DIGCQbMEvX3S2DQ7VERDwaNmPgI.roa (hash: vrQP6CoSztwA+KPM4HiP9pP5zfEZ7MxF+t1JeC7UBYM=)
                          2: W1v_nUH3GfYmAMMtNBDduZ7Msww.crl (hash: aDGDsH88a2tuZ7A8V2OJyH/7o1fxbwXWWWFUGuj8ILg=)
                          3: ubWTx4s1XitX6PHQT8bII0Sr8VA.roa (hash: OkiBE/NUzkKV+xXfw7sua6AgcBbcZ2vjT39S06HxuOw=)
                          4: uhG95XF25QmjvzLstx1n9pIbB5g.roa (hash: nKE/loz1ortOdOeQYwJVvnlVW4oJD/w1eygAfQW6kko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:8d:f7:c8:7f:77:17:6b:c8:5b:ee:f0:3c:ec:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
        Validity
            Not Before: Mar 29 01:00:45 2026 GMT
            Not After : Mar 30 01:00:45 2026 GMT
        Subject: CN=cdc4fe5956a2c5cdc58f076742e2832700c3afc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:40:42:6c:67:eb:71:e9:30:72:c7:34:80:1c:
                    7e:aa:e0:40:10:60:a2:3a:a7:cc:7f:a1:fd:1b:e1:
                    e3:83:9c:0b:86:3c:43:a1:f8:23:bb:62:2a:fe:96:
                    a7:96:74:4d:19:29:f5:d1:c2:be:79:6b:33:9a:ae:
                    17:d8:be:4f:81:8b:e5:10:9a:95:0e:f7:bd:94:03:
                    f3:83:06:4f:d8:97:1d:6d:0e:9b:16:d0:e7:94:e5:
                    3f:12:bc:4e:e4:a0:02:4c:4c:21:42:e1:c3:84:03:
                    66:d4:9d:41:74:be:ee:ef:bf:d6:0b:e5:ce:31:87:
                    a4:b5:99:f5:aa:f1:71:88:8b:02:5c:ef:73:d0:b1:
                    50:22:d1:b6:2d:24:3e:3d:c0:91:25:60:a5:10:d4:
                    c3:42:21:4f:79:e9:1d:13:af:61:34:5b:83:e3:76:
                    a5:d4:ef:e3:20:38:d0:6e:f8:d7:cc:be:b7:31:80:
                    ea:4e:57:03:63:aa:ca:62:4d:76:77:00:47:84:57:
                    20:25:25:70:23:68:ef:f3:0f:9a:96:44:9c:fa:7c:
                    23:7a:5e:9b:ef:d6:df:29:45:19:5b:50:51:c5:3b:
                    32:e6:9c:87:94:39:dd:0d:43:c1:1f:fe:d1:8e:c1:
                    c2:49:97:2f:6b:19:f2:e8:3c:b3:3e:d6:e3:82:d3:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C4:FE:59:56:A2:C5:CD:C5:8F:07:67:42:E2:83:27:00:C3:AF:C2
            X509v3 Authority Key Identifier:
                keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:2d:fb:c4:04:25:e9:65:ca:02:d9:c6:f1:f9:c2:08:99:ea:
         f0:95:05:d6:2b:fe:68:fa:9e:e3:82:a7:f2:e8:ea:be:5d:f2:
         3c:6c:c2:83:80:e5:88:a5:d5:2d:6f:d6:3f:3e:e3:e8:6c:72:
         06:16:39:82:54:ba:32:b8:dc:db:d6:46:d1:c1:ed:a7:99:be:
         5e:e2:82:d0:80:2a:3c:d5:a9:77:bf:d3:cf:e7:59:fd:cf:c7:
         26:9b:94:fa:56:3c:48:a0:5b:f6:70:38:9e:59:a9:21:07:a2:
         55:54:25:2d:1b:82:43:06:a0:1e:36:b1:d0:65:ca:66:93:f6:
         d9:32:58:13:85:e8:d7:0f:b7:19:0e:34:50:3a:b7:41:99:35:
         a0:4b:f2:80:f9:eb:1c:37:cb:96:94:78:73:55:9b:6a:7f:f9:
         71:e1:45:8b:ce:f9:70:5a:ed:4f:56:a4:a8:67:95:b9:97:dd:
         60:3a:1b:d4:a0:85:f5:18:31:07:ab:c2:ee:7b:0a:3a:64:b5:
         86:8e:61:ce:9f:cb:d9:d5:4d:73:1c:75:6e:df:f2:cc:17:73:
         3a:64:f2:0c:26:00:d2:f2:e1:cf:da:1d:34:04:a9:50:90:d7:
         3e:01:cc:9d:9b:3e:86:76:ec:91:91:65:69:d9:a7:b4:e4:2a:
         c3:c6:9e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:12 2026 by rpki-client