Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
File:                     WvHVJdnhyP7n9RySmYQyGRL_80w.mft (raw, json)
Hash identifier:          Iq2YeG3Ko1SgOcPjkdE4QdDsQgRvlp9CoLpMC+LrqJA=
Subject key identifier:   DE:AB:35:7C:22:58:4A:44:28:7C:6A:B2:13:67:C9:F6:FF:15:E4:A8
Authority key identifier: 5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C
Certificate issuer:       /CN=5af1d525d9e1c8fee7f51c929984321912fff34c
Certificate serial:       019E31BC58E2871D5F6919B8505E110BF10A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
Manifest number:          1912
Signing time:             Sat 16 May 2026 17:01:27 +0000
Manifest this update:     Sat 16 May 2026 17:01:27 +0000
Manifest next update:     Sun 17 May 2026 17:01:27 +0000
Files and hashes:         1: 0dnjqtNqlGr2gvhu_tFz-SXliR4.roa (hash: t2qLzugd9xhfE3idBqMcmuwC4C5rfcraLp7miENReGQ=)
                          2: WvHVJdnhyP7n9RySmYQyGRL_80w.crl (hash: OLK34ltnP1BpI3e9ke/xzcIIfl6bGFFk+Ib2tTwSJ6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:bc:58:e2:87:1d:5f:69:19:b8:50:5e:11:0b:f1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af1d525d9e1c8fee7f51c929984321912fff34c
        Validity
            Not Before: May 16 17:01:27 2026 GMT
            Not After : May 17 17:01:27 2026 GMT
        Subject: CN=deab357c22584a44287c6ab21367c9f6ff15e4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2e:fb:37:b4:2f:da:03:61:e7:5e:e1:5a:4f:
                    95:6d:ad:78:7b:69:a9:7f:6e:74:17:0d:96:5c:ba:
                    58:86:ba:c3:48:fe:93:48:09:a8:48:dc:70:3c:99:
                    de:4c:d4:81:d4:0f:0b:b5:ae:25:49:89:b8:05:15:
                    98:8a:d8:96:2d:cd:dc:3d:d6:96:6e:de:13:e4:75:
                    e7:a3:64:29:bc:d9:7f:18:8b:31:63:f2:70:27:e8:
                    a2:a0:7d:64:98:a7:23:a6:54:46:b6:6d:5e:ad:ae:
                    2c:73:ed:26:95:ac:5a:0c:c5:23:5a:21:55:6a:ed:
                    b6:76:3c:fb:c6:85:cf:65:2a:a4:15:6b:57:0e:86:
                    e0:7b:55:fd:81:41:50:b0:3c:59:02:86:f0:0c:f3:
                    db:48:75:35:ce:2d:18:ad:ad:70:3b:47:33:a4:42:
                    b8:47:8a:15:4f:52:e5:b0:9b:58:b9:29:d0:7e:3a:
                    c9:8d:35:89:cb:f3:bb:8d:b2:cd:aa:78:c9:51:3b:
                    05:9b:29:f9:5b:fd:ec:83:cf:2e:70:46:e0:64:b9:
                    14:50:bb:44:9f:bb:c5:8b:47:04:8c:88:8d:2d:1e:
                    eb:4e:3e:49:94:93:1a:2f:77:0d:ed:ed:bb:8a:fb:
                    b5:37:8b:f8:6f:2f:3b:d1:55:43:14:36:52:56:08:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AB:35:7C:22:58:4A:44:28:7C:6A:B2:13:67:C9:F6:FF:15:E4:A8
            X509v3 Authority Key Identifier:
                keyid:5A:F1:D5:25:D9:E1:C8:FE:E7:F5:1C:92:99:84:32:19:12:FF:F3:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvHVJdnhyP7n9RySmYQyGRL_80w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d0fea6-22a1-4aa5-b50d-a114939cdaa5/1/WvHVJdnhyP7n9RySmYQyGRL_80w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8a:9d:b2:51:12:ac:a4:39:4a:41:8b:27:24:a2:42:84:b0:
         42:92:0c:30:6d:85:b6:3c:64:6b:01:9e:41:35:f8:21:38:75:
         5e:cd:eb:ca:0b:9a:98:5f:3d:3e:46:2a:75:72:9f:f5:e2:b8:
         63:79:5b:9f:17:e3:76:30:1d:72:95:45:73:ab:9f:e2:00:db:
         70:44:95:2b:d6:34:05:39:92:0f:a0:1d:8a:d5:5b:00:46:3d:
         bd:44:96:fb:81:ba:08:9f:0e:94:40:92:45:2e:eb:b3:8b:fc:
         90:5c:37:0f:23:b7:ba:40:cf:6d:99:0a:12:c7:f6:04:dc:98:
         af:0d:4f:b0:11:ee:ab:06:37:51:cb:73:73:f1:a8:52:5c:28:
         be:2e:28:2d:9f:4c:eb:84:ac:9a:60:7c:5d:05:0e:f4:db:fa:
         e2:b2:46:a4:ce:71:b9:f5:cb:a9:b9:93:41:35:bd:3e:60:85:
         c8:d2:16:87:01:6a:9d:26:d1:38:5f:36:01:07:47:27:25:32:
         15:ee:91:58:c0:bd:1e:23:00:db:b4:a4:27:c0:7b:56:2c:05:
         ee:fa:75:50:70:0d:dc:77:2b:e1:84:0a:23:21:19:94:a9:b2:
         05:62:cb:25:fa:26:d3:e1:fd:19:22:b3:50:0f:59:35:65:f0:
         af:c1:ac:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:01:32 2026 by rpki-client