Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
File:                     W-l5-45HcwS7WR1raO6nPalKgVs.mft (raw, json)
Hash identifier:          TCZV2ckH3v+JiHklDUfYMwSPKQa3ETsN4mm/6kVbfoI=
Subject key identifier:   D8:88:43:82:F2:FD:7A:E9:AC:AE:4D:A7:A9:76:4F:B3:5D:C6:12:EE
Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
Certificate issuer:       /CN=5be979fb8e477304bb591d6b68eea73da94a815b
Certificate serial:       019D37F72509E3A29F3157C1F7EDC0813EE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 05:00:36 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:36 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:36 +0000
Files and hashes:         1: 6klAqUDcmb5Fwl8MBme-xk1cjbY.roa (hash: UMoOrcyMTbvRKtBDKMxd7U1itYMkpR/DOGCMbMTSLRU=)
                          2: W-l5-45HcwS7WR1raO6nPalKgVs.crl (hash: UHrSZ+pc9Dmmo7sfOPuQTWgv1oNAgNHxXlITT+U5QnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:25:09:e3:a2:9f:31:57:c1:f7:ed:c0:81:3e:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b
        Validity
            Not Before: Mar 29 05:00:36 2026 GMT
            Not After : Mar 30 05:00:36 2026 GMT
        Subject: CN=d8884382f2fd7ae9acae4da7a9764fb35dc612ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0a:89:87:db:36:25:0a:f8:cc:90:6b:cc:9d:
                    aa:1b:02:f9:d2:f1:8f:56:f2:db:5b:d3:2f:ad:34:
                    1a:a4:2a:72:f1:0e:a8:51:c4:96:99:63:75:b6:30:
                    4d:88:23:ec:ea:ea:7b:5a:7c:67:45:45:bf:f0:8a:
                    e2:44:87:43:87:9a:e3:3b:4a:03:1b:23:7f:db:89:
                    57:7e:1d:e6:03:6c:e5:bd:67:7c:91:93:88:f0:f3:
                    b7:8c:cc:25:f5:ab:23:3b:03:a3:5a:c8:ac:ef:48:
                    db:92:44:f7:ab:91:dc:99:26:12:7f:3c:ba:b6:f4:
                    f1:f5:6b:40:72:83:1c:fd:2c:96:6b:b3:c8:e4:85:
                    33:42:1c:6f:a4:c5:b3:7e:f8:88:2a:7f:e9:39:d2:
                    2c:69:58:a5:64:9d:c5:12:82:e4:b3:48:e0:bb:71:
                    a7:93:45:8a:73:62:16:91:f5:47:f7:1f:3f:0b:86:
                    98:9b:27:1b:f4:0b:de:07:68:a4:a9:53:2b:b7:d2:
                    d5:d4:a5:cf:d4:93:91:04:c1:7f:da:fe:f9:60:e5:
                    ab:d1:28:f6:f9:e3:9d:59:7f:c6:a3:20:98:01:f8:
                    5b:a3:2c:a9:67:e0:d6:c3:22:a5:b5:55:c4:7e:d0:
                    2b:8c:63:43:cb:99:49:52:12:5e:2a:de:2c:ec:7a:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:88:43:82:F2:FD:7A:E9:AC:AE:4D:A7:A9:76:4F:B3:5D:C6:12:EE
            X509v3 Authority Key Identifier:
                keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:29:b0:8e:7f:e1:d6:73:26:d0:51:a9:d3:50:ff:58:25:11:
         d4:67:c9:c5:09:87:12:93:9b:d3:8e:7f:06:ac:4d:1e:84:e1:
         4b:3c:95:47:10:8e:e6:53:4c:90:67:d8:fa:ae:19:d8:39:1d:
         51:e3:67:89:c6:1d:43:b5:7b:ac:f2:6a:30:be:2c:d1:c3:0e:
         9a:b3:9d:5f:4a:09:fc:95:81:82:1c:66:09:4b:f2:15:1d:c8:
         91:35:5a:4a:73:f0:3f:6e:8f:37:fc:c4:75:2a:ac:d5:7a:08:
         6d:36:84:1e:fd:59:c0:9c:1a:d0:af:a5:7e:c7:4e:c3:da:75:
         79:38:ab:ee:e2:3a:d8:7c:ca:9e:22:db:e9:0d:63:d1:97:2f:
         f1:3d:fc:9c:48:9a:79:1b:a6:d1:67:f9:f2:c8:b8:37:d3:62:
         74:8d:34:38:51:79:36:a2:ff:cc:fa:58:80:0e:cc:83:90:81:
         bc:92:34:c9:bc:20:f1:cb:cb:38:3b:df:86:6d:59:4d:76:23:
         98:f7:c3:18:87:17:00:65:42:0a:89:e0:8b:3d:34:9f:97:2b:
         92:b9:8d:eb:06:21:f7:6d:7b:79:8f:bf:17:05:92:5a:fb:f5:
         35:32:3b:48:a2:1d:ba:ad:52:be:08:7d:ae:21:b8:47:cb:13:
         5f:ee:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:24 2026 by rpki-client