Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
File:                     W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft (raw, json)
Hash identifier:          6OxAqKboO19UhrA1/pe/t/vjX/ZLLpuRh1KQ66gedmg=
Subject key identifier:   92:60:9A:35:32:93:D5:A7:0F:F2:B4:29:94:13:18:B1:42:11:35:22
Authority key identifier: 5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51
Certificate issuer:       /CN=5bdc41674d65d2af9174b1abace0b371362b4851
Certificate serial:       019D39E576367B36E533E4FB82F4A1E137D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
Manifest number:          0E40
Signing time:             Sun 29 Mar 2026 14:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:32 +0000
Files and hashes:         1: EPkMocEIf6YHtVveQVCBv3QN0fQ.roa (hash: P29zKbxU8CX1RFik6k8KtMo4X8xEhL7qfYBrdaaVZmo=)
                          2: W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl (hash: X3FznZZ67f7uQ6F1sD0ocE9yCjXMD3wMAn8+zxjiZQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:76:36:7b:36:e5:33:e4:fb:82:f4:a1:e1:37:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bdc41674d65d2af9174b1abace0b371362b4851
        Validity
            Not Before: Mar 29 14:00:32 2026 GMT
            Not After : Mar 30 14:00:32 2026 GMT
        Subject: CN=92609a353293d5a70ff2b429941318b142113522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:0a:4f:3e:f4:dc:9c:bb:4a:2f:6a:65:43:
                    2c:27:38:fc:75:88:38:89:d3:ed:70:c1:81:92:6c:
                    cb:5a:1b:22:20:21:9b:f2:94:bc:33:c2:5c:95:57:
                    3b:31:aa:49:fd:98:18:9f:78:4e:ac:ad:da:dc:31:
                    e4:0f:d1:ba:95:d5:d7:77:e0:c6:47:ca:b3:7a:4f:
                    1f:48:c9:9d:1a:a3:40:05:b5:73:c7:a6:04:b8:65:
                    f7:cb:a5:f3:06:c8:b2:3c:16:d5:20:ee:27:df:05:
                    0b:28:47:e8:34:0e:82:a3:83:b1:1e:bc:89:9f:16:
                    6c:96:2c:7f:62:ca:53:46:22:cb:13:69:98:95:fe:
                    59:73:cf:4f:84:be:ec:9e:a1:64:61:45:a2:3e:b0:
                    d0:85:07:24:88:72:03:b7:92:c8:3c:90:35:05:6f:
                    73:41:19:94:8c:59:96:12:b7:6e:d0:c7:98:5c:14:
                    2f:e0:51:7a:d6:5e:8b:12:d3:ed:34:d8:39:85:11:
                    f4:11:cd:77:83:f6:7b:21:2e:5c:82:15:53:4b:21:
                    cc:85:92:ef:c0:c7:f0:b4:ef:cd:76:64:65:54:72:
                    78:51:c3:85:0b:56:cd:b5:b7:4e:3d:2d:0f:da:de:
                    1f:53:4c:b6:92:a7:54:b2:ff:62:72:c7:57:19:6f:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:60:9A:35:32:93:D5:A7:0F:F2:B4:29:94:13:18:B1:42:11:35:22
            X509v3 Authority Key Identifier:
                keyid:5B:DC:41:67:4D:65:D2:AF:91:74:B1:AB:AC:E0:B3:71:36:2B:48:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9xBZ01l0q-RdLGrrOCzcTYrSFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/816948-8312-4619-88ab-9f67ff6afd50/1/W9xBZ01l0q-RdLGrrOCzcTYrSFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:0b:33:13:67:13:a5:0e:23:e8:e2:92:16:af:45:c9:df:2f:
         08:54:e4:ba:20:70:4e:e0:97:e6:f0:06:d5:bb:f9:02:ae:93:
         91:d7:f2:bf:be:d7:fd:8e:7b:fc:30:48:7b:e7:ca:df:d8:44:
         e7:0c:16:63:e4:45:d9:5a:6a:29:05:26:c6:60:59:ea:b6:1a:
         93:59:89:95:30:6f:17:60:c0:2f:5a:fe:be:0c:26:30:0f:a8:
         97:2c:2d:ec:88:99:69:f0:1b:4d:6e:d7:14:99:cb:7b:6d:c3:
         cc:4a:4a:8f:de:cd:72:08:d0:b2:63:1c:a8:a7:e0:45:23:3a:
         02:0e:4e:d4:00:c2:1c:81:b4:5c:9a:ab:60:58:43:0f:0f:85:
         e9:7e:1e:51:23:a2:0d:1e:e0:25:67:15:0b:f6:29:70:d7:ad:
         32:9d:a5:7e:72:dc:f7:53:fc:8a:90:f6:cf:ce:15:26:1e:20:
         d5:66:b7:10:c6:b8:03:f7:7f:0e:44:59:d6:93:9f:72:c9:17:
         86:69:e3:5a:8c:ea:4e:f6:1e:73:ce:0e:18:af:93:57:cf:da:
         1f:0d:ca:f5:c9:ef:0e:8c:67:c2:21:55:50:53:65:6e:95:63:
         5a:56:de:06:8f:d8:95:5c:e7:bb:80:46:81:52:a8:f5:f5:9e:
         e3:a5:31:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055XY2ezblM+T7gvSh4TfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZGM0MTY3NGQ2NWQyYWY5MTc0YjFhYmFjZTBiMzcxMzYy
YjQ4NTEwHhcNMjYwMzI5MTQwMDMyWhcNMjYwMzMwMTQwMDMyWjAzMTEwLwYDVQQD
Eyg5MjYwOWEzNTMyOTNkNWE3MGZmMmI0Mjk5NDEzMThiMTQyMTEzNTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW4KTz703Jy7Si9qZUMsJzj8dYg4
idPtcMGBkmzLWhsiICGb8pS8M8JclVc7MapJ/ZgYn3hOrK3a3DHkD9G6ldXXd+DG
R8qzek8fSMmdGqNABbVzx6YEuGX3y6XzBsiyPBbVIO4n3wULKEfoNA6Co4OxHryJ
nxZslix/YspTRiLLE2mYlf5Zc89PhL7snqFkYUWiPrDQhQckiHIDt5LIPJA1BW9z
QRmUjFmWErdu0MeYXBQv4FF61l6LEtPtNNg5hRH0Ec13g/Z7IS5cghVTSyHMhZLv
wMfwtO/NdmRlVHJ4UcOFC1bNtbdOPS0P2t4fU0y2kqdUsv9icsdXGW8/tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJgmjUyk9WnD/K0KZQTGLFCETUiMB8GA1UdIwQY
MBaAFFvcQWdNZdKvkXSxq6zgs3E2K0hRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWIt
OWY2N2ZmNmFmZDUwLzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84MTY5NDgtODMxMi00NjE5LTg4YWItOWY2N2ZmNmFmZDUw
LzEvVzl4QlowMWwwcS1SZExHcnJPQ3pjVFlyU0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJwszE2cT
pQ4j6OKSFq9Fyd8vCFTkuiBwTuCX5vAG1bv5Aq6Tkdfyv77X/Y57/DBIe+fK39hE
5wwWY+RF2VpqKQUmxmBZ6rYak1mJlTBvF2DAL1r+vgwmMA+olywt7IiZafAbTW7X
FJnLe23DzEpKj97NcgjQsmMcqKfgRSM6Ag5O1ADCHIG0XJqrYFhDDw+F6X4eUSOi
DR7gJWcVC/YpcNetMp2lfnLc91P8ipD2z84VJh4g1Wa3EMa4A/d/DkRZ1pOfcskX
hmnjWozqTvYec84OGK+TV8/aHw3K9cnvDoxnwiFVUFNlbpVjWlbeBo/YlVznu4BG
gVKo9fWe46UxGA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:21:00 2026 by rpki-client