Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
File:                     WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json)
Hash identifier:          oOUw6SqDrGT7q+oSXfWbh7I92/hRvaO6jFFXapGnAbA=
Subject key identifier:   C5:DA:71:EB:B2:AF:01:41:D6:C4:4A:AF:AA:0B:08:81:80:EB:1B:01
Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C
Certificate issuer:       /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
Certificate serial:       019E299453373F1B500A2D73454FDB13695B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
Manifest number:          0C23
Signing time:             Fri 15 May 2026 03:00:46 +0000
Manifest this update:     Fri 15 May 2026 03:00:46 +0000
Manifest next update:     Sat 16 May 2026 03:00:46 +0000
Files and hashes:         1: VTB86vXjl63HP_fOsKrIdbzcoJA.asa (hash: zJ0NqqlHYiqkS1rTeTMyJ51OKHNjjKQ2DaF7GT0xXzo=)
                          2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: DLTiudPRJYi3G8nAC3mfLjdrbgKSScF+vAL6XQJbp5s=)
                          3: jVMH2GvhkSocgvgfvAA1EbZbZfQ.roa (hash: 0HrZ0G786k9URGZA3ViN57+jJomPgSkjhNpMS+Ngy/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:53:37:3f:1b:50:0a:2d:73:45:4f:db:13:69:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c
        Validity
            Not Before: May 15 03:00:46 2026 GMT
            Not After : May 16 03:00:46 2026 GMT
        Subject: CN=c5da71ebb2af0141d6c44aafaa0b088180eb1b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:24:5a:25:0f:f5:a0:89:a2:d4:6a:e5:42:
                    08:8f:bb:e0:03:2d:06:fd:c7:01:7d:e5:8d:c6:3b:
                    64:0b:6b:3a:2a:36:4b:95:9b:37:b2:41:e1:98:88:
                    9a:90:4f:1c:86:af:9f:7e:be:06:ae:91:b4:09:30:
                    6d:b4:d5:08:ac:33:d8:bf:88:2d:38:1c:a5:07:6a:
                    64:26:ac:0c:8f:f6:f4:3f:66:95:4f:5d:57:53:bf:
                    27:35:b5:34:b3:bd:c0:46:4a:37:fc:76:07:29:4c:
                    85:02:f2:78:7b:73:f6:87:8a:93:9d:92:d8:e7:31:
                    03:21:e0:98:cc:d9:f0:e0:9d:5b:b9:6a:72:ae:34:
                    be:0a:b2:26:7d:52:3b:9c:c9:3d:e4:c1:f2:81:75:
                    13:e1:ed:47:86:2d:62:8e:67:47:0e:03:a5:ee:f1:
                    dd:ce:e6:8d:77:12:85:c7:5f:7e:e2:4a:8d:51:64:
                    0c:d3:f9:0b:e6:47:d3:5c:22:06:53:89:6a:9a:2f:
                    d2:f0:9a:bb:3a:10:3c:e2:84:b7:27:97:44:85:51:
                    32:ef:ac:56:c3:85:2d:c7:cc:46:b0:5e:93:df:8e:
                    58:98:ec:cd:d8:ca:3b:37:39:8b:2c:4f:42:53:aa:
                    1d:ed:24:84:6a:7e:8a:61:67:f6:92:1c:e2:b8:a7:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DA:71:EB:B2:AF:01:41:D6:C4:4A:AF:AA:0B:08:81:80:EB:1B:01
            X509v3 Authority Key Identifier:
                keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:6c:8f:79:3e:39:76:d9:d0:24:f4:6d:ae:0d:92:83:9d:3f:
         b5:2a:a9:52:67:3b:38:5c:73:e1:d5:ea:c1:c1:d7:73:76:22:
         74:77:d9:53:40:d9:e7:8a:6f:4f:93:88:71:71:39:14:05:62:
         e9:ae:1b:55:c7:36:6f:bd:df:55:1d:91:24:74:e4:25:fd:a1:
         7a:08:8b:58:74:29:5f:34:dc:8a:1f:af:9e:f8:28:35:b1:dc:
         70:c4:70:1a:ca:51:97:c7:e5:05:b7:ad:08:59:45:3d:2e:bb:
         d0:a8:98:4d:8b:e8:fd:65:41:98:27:84:0e:19:48:c6:09:ff:
         9e:7b:1f:ba:e8:a0:2c:e4:88:d6:42:1a:0f:21:99:09:dc:84:
         d9:c6:4c:dc:b3:fe:c3:29:77:92:43:27:14:12:56:a3:2d:5c:
         8c:e6:92:d9:3f:de:57:d7:3c:6f:ca:cf:70:10:1f:48:09:f5:
         90:13:27:67:0d:3b:9d:99:a9:2e:e4:b5:4e:20:6c:bf:5d:de:
         ba:69:23:e0:e4:51:7f:52:be:0b:02:ab:02:b4:49:af:4c:53:
         37:a4:59:3e:ab:f4:43:8d:01:06:f2:7a:0c:91:77:3b:32:f9:
         9c:3e:9b:95:8e:20:96:f6:73:63:86:f8:10:ec:43:b0:c2:5a:
         4d:ea:51:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:50 2026 by rpki-client