Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
File:                     WVt4mYk7niSL5hVd9EX2MK5daHI.mft (raw, json)
Hash identifier:          EuxogxS3ivM7EbL1MYbcCRQnX7cF/utgr8h8Bg9SDdQ=
Subject key identifier:   53:5C:F7:58:6F:B3:7E:68:A6:D4:88:A1:B8:9B:4C:29:62:D1:07:74
Authority key identifier: 59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72
Certificate issuer:       /CN=595b7899893b9e248be6155df445f630ae5d6872
Certificate serial:       019D3A1C354947E3673B4EB24642BF45DA87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 15:00:20 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:20 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:20 +0000
Files and hashes:         1: WVt4mYk7niSL5hVd9EX2MK5daHI.crl (hash: mC4BkqEeR9WcdKY/7stW/Ov+HMFFJQgwqQm3TITQpMs=)
                          2: mle5l9onvzOKjJkGxBdMMEzHzFk.roa (hash: RQr1Xm4c0zALnq6+MVgOiMthhqp0SNomTNBL9iMlkL4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 15:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:35:49:47:e3:67:3b:4e:b2:46:42:bf:45:da:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595b7899893b9e248be6155df445f630ae5d6872
        Validity
            Not Before: Mar 29 15:00:20 2026 GMT
            Not After : Mar 30 15:00:20 2026 GMT
        Subject: CN=535cf7586fb37e68a6d488a1b89b4c2962d10774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:ce:4c:0c:52:6a:d0:51:ac:3b:fb:64:b6:
                    be:3f:64:a4:42:d0:de:45:47:72:28:23:f4:61:b2:
                    d3:58:b5:18:df:25:34:34:10:bd:44:b7:b5:21:ee:
                    69:e0:54:f4:ff:96:bb:c2:73:77:ce:98:dc:1a:8e:
                    95:bc:01:3f:2d:7c:26:6f:af:73:c4:9e:b6:3d:11:
                    b0:ea:ce:f8:7b:aa:59:76:5f:31:ce:df:9f:7d:a1:
                    f8:65:eb:ba:fb:c5:93:ec:05:2f:62:2e:03:d6:63:
                    a2:f9:7b:85:90:05:72:a6:14:a8:24:48:01:63:e5:
                    c5:8e:35:09:1f:35:fd:ca:ab:db:1c:e2:55:3c:da:
                    95:7c:d8:c2:9c:a5:ff:22:02:96:ea:6d:80:9e:07:
                    9c:32:2b:2f:39:3f:81:16:34:d1:6b:05:2d:9f:36:
                    94:1e:41:98:47:fd:53:bb:4a:84:af:74:10:e9:34:
                    61:bf:6f:f8:a6:f5:16:14:0b:15:88:34:78:43:e2:
                    51:8d:96:1a:d1:1d:32:b8:08:e5:e0:53:cb:9a:4b:
                    74:8f:d5:c1:3d:d0:c7:df:34:65:0c:27:32:11:cb:
                    c0:bd:a0:87:a5:4b:92:22:15:54:a9:ad:d6:c2:2a:
                    2e:cb:8a:40:6e:e8:b6:71:69:67:00:92:90:84:17:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5C:F7:58:6F:B3:7E:68:A6:D4:88:A1:B8:9B:4C:29:62:D1:07:74
            X509v3 Authority Key Identifier:
                keyid:59:5B:78:99:89:3B:9E:24:8B:E6:15:5D:F4:45:F6:30:AE:5D:68:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVt4mYk7niSL5hVd9EX2MK5daHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/79b7a1-b3c8-45a6-b991-7c78eb5b2d94/1/WVt4mYk7niSL5hVd9EX2MK5daHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:b9:fd:90:88:c2:33:7e:d6:ec:7c:6d:77:d5:58:ef:1b:
         bb:fa:46:84:db:18:81:19:90:26:aa:61:35:a2:b0:6b:e8:8f:
         90:94:72:8e:24:b4:54:97:f8:d5:c4:c6:67:ec:cf:16:b6:6f:
         38:9d:3f:41:b0:68:fe:20:c7:5d:61:72:99:56:6b:f3:5b:a0:
         92:b8:c7:52:97:02:ac:02:c7:c7:32:ae:85:ca:ee:01:22:f4:
         f4:74:2f:ff:b9:32:93:38:6d:3b:02:a8:c5:18:ca:d4:67:a1:
         6c:6f:0e:91:0d:81:19:99:af:04:f2:aa:3c:8b:c8:d6:8a:d0:
         0a:0e:68:65:6e:a3:84:04:af:2a:98:cc:05:c6:bf:e9:62:57:
         d4:f2:27:fc:2d:ff:5a:ed:77:62:70:a8:9f:85:f5:02:95:64:
         78:5d:46:2d:34:77:76:a3:73:82:70:0b:0a:6b:96:41:7e:80:
         d1:ae:27:e0:e5:ea:1b:cb:89:e7:a6:7d:82:d3:c2:28:b6:1c:
         87:ff:85:84:97:18:46:1a:bd:50:4c:95:bc:60:77:aa:e0:1d:
         bd:7f:13:b3:95:61:e1:0a:7c:70:6c:4a:89:a2:e8:10:79:bb:
         75:f4:cd:30:56:2a:e1:9d:eb:37:b7:17:85:d8:03:15:fc:9c:
         32:68:27:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:55:31 2026 by rpki-client