Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
File:                     WLtUmHY5ugxs-8rVmMP145_KlFw.mft (raw, json)
Hash identifier:          iToY9Kyd9ovteDBqUxSn+JpKrq0ioHQaOYNFO33Ki6s=
Subject key identifier:   30:0F:C8:37:75:31:E1:42:82:A6:86:D3:48:0A:F9:EE:07:C6:2C:A2
Authority key identifier: 58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C
Certificate issuer:       /CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
Certificate serial:       019D382E90E72BE14100F64EAB5D050D3DF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 06:01:08 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:08 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:08 +0000
Files and hashes:         1: OLEHUxF6oS2GH_zZGLZ59cbd0UM.roa (hash: iXyMvC2zcRw1kQk9NMVDBWBfZ7cLWCvnkd2tBslhHyk=)
                          2: WLtUmHY5ugxs-8rVmMP145_KlFw.crl (hash: T1Lb2yot62MYz7cCjUaw0iG2V9wUo+hABeJb29rSYXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:90:e7:2b:e1:41:00:f6:4e:ab:5d:05:0d:3d:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb54987639ba0c6cfbcad598c3f5e39fca945c
        Validity
            Not Before: Mar 29 06:01:08 2026 GMT
            Not After : Mar 30 06:01:08 2026 GMT
        Subject: CN=300fc8377531e14282a686d3480af9ee07c62ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:97:7b:de:a3:a0:c4:3d:6f:e8:1a:0e:29:
                    1f:45:49:fb:d6:5e:7c:a8:c0:eb:c3:76:02:d5:82:
                    64:d7:5f:37:a3:93:e0:4f:59:60:07:c1:b0:83:10:
                    45:86:91:4a:81:85:88:d3:69:bf:b4:67:de:f0:fb:
                    8a:66:f4:40:6a:6b:8e:1e:b7:f6:5f:44:a2:12:55:
                    8f:07:75:46:42:07:63:41:67:cd:78:6d:5a:68:e4:
                    ce:5c:03:38:63:fb:22:4b:0d:a6:44:4a:e5:77:d8:
                    8b:92:93:45:68:8a:fb:e9:00:9d:01:0f:a7:fd:f7:
                    64:9c:3c:c3:06:53:f5:19:2c:62:71:88:ff:ae:e2:
                    bb:bd:69:33:74:f0:74:72:9d:c0:6d:ea:09:59:f2:
                    37:b6:1c:0b:52:7c:f7:04:aa:97:29:df:01:94:ae:
                    9b:29:7c:82:13:b7:ee:4b:ec:6d:90:bf:7f:6d:e4:
                    3b:a0:3a:b2:c4:81:88:26:d2:90:75:dd:b1:ea:3d:
                    48:e8:4d:d9:96:a5:16:f6:89:33:01:fd:74:69:b3:
                    fd:7f:dd:d5:f7:b0:1c:ab:7c:41:52:97:e0:48:13:
                    f7:8c:6a:de:64:f9:0a:73:cb:95:0c:70:37:5e:f4:
                    c2:f3:6f:b4:1b:b1:9a:e7:82:24:5b:05:8a:d4:78:
                    e8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0F:C8:37:75:31:E1:42:82:A6:86:D3:48:0A:F9:EE:07:C6:2C:A2
            X509v3 Authority Key Identifier:
                keyid:58:BB:54:98:76:39:BA:0C:6C:FB:CA:D5:98:C3:F5:E3:9F:CA:94:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtUmHY5ugxs-8rVmMP145_KlFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23a2b2-69bb-4933-ae6f-8c9f2d705948/1/WLtUmHY5ugxs-8rVmMP145_KlFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e9:a0:b5:19:96:60:65:3a:95:05:75:33:c6:9d:5d:00:26:
         d6:11:5e:cb:ef:09:6d:79:70:19:33:63:a0:a7:c4:9d:a4:97:
         97:6a:49:3d:b1:0a:33:2d:10:82:ca:f1:91:22:18:f3:9d:2d:
         b8:b0:4f:6e:92:54:59:87:86:cf:b9:e3:37:39:6d:e1:d5:9c:
         a7:2a:0f:bc:da:e3:2f:40:ce:ce:b0:a0:bb:c0:9a:0a:87:6b:
         ed:33:a0:5b:8a:72:e4:10:24:c2:ba:6b:2d:63:74:c1:a7:a2:
         08:eb:8e:e7:de:60:1b:b2:fd:3a:ec:06:37:4e:7a:b2:86:f0:
         38:5b:5d:7f:55:7c:cd:05:d6:e5:6e:c9:7e:53:7c:f7:64:c4:
         6a:c1:f5:e1:c1:d0:72:0b:e6:25:f4:f9:b3:0f:9b:e0:88:00:
         97:a8:48:c2:32:6d:15:21:88:c6:5b:9a:74:70:2d:08:be:fe:
         75:5b:70:2c:29:4d:84:7d:f3:84:f0:bc:e4:54:7d:97:ef:13:
         14:1b:db:c5:05:a2:5c:8d:3f:cf:23:d6:ab:c7:fb:dc:4d:95:
         64:49:fc:de:f7:8e:28:d6:3f:5a:d6:5e:ef:f1:3f:1c:a0:7b:
         e4:3f:d7:54:a2:29:fb:f8:c4:ee:5f:05:4c:8d:b4:a2:7f:d3:
         c4:95:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:03 2026 by rpki-client