Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier:          T71HSAhwNefjphafLlpEN2uGSYPxM8Ze8x/1UoGWo/s=
Subject key identifier:   41:55:C1:73:55:F3:B5:40:B8:CC:56:F1:90:F6:C8:CD:6C:83:D2:98
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer:       /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial:       019CE4EC98FA44B7C79AB1C07F9DF8DDD7BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number:          036A
Signing time:             Fri 13 Mar 2026 02:00:36 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:36 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:36 +0000
Files and hashes:         1: UUMyTjiCqTOJ9RxzyslUJ28NkGE.roa (hash: LT6KzYJU9uNZJmsZb9G6zfqBp9thSTQ3sJt1lTbYuNo=)
                          2: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: OCz0hTi8DrvYBspwJ7/l3xqoEge3CqTbAyV9+WgNUmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:98:fa:44:b7:c7:9a:b1:c0:7f:9d:f8:dd:d7:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Validity
            Not Before: Mar 13 02:00:36 2026 GMT
            Not After : Mar 14 02:00:36 2026 GMT
        Subject: CN=4155c17355f3b540b8cc56f190f6c8cd6c83d298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:9c:6d:97:ca:38:31:9e:f1:6d:ad:a8:fd:
                    df:17:fb:ef:57:c4:94:c3:71:bd:fe:ae:be:1e:83:
                    6d:8c:67:5e:0a:d2:92:29:76:b9:d1:86:18:04:8b:
                    03:01:7e:75:bc:7e:13:67:01:61:a0:5e:63:b8:f8:
                    72:c3:94:58:04:22:d2:a7:e5:98:85:cf:00:84:64:
                    05:bc:a3:32:43:b1:dd:51:e0:fe:15:24:6e:e3:fc:
                    5e:84:3a:52:3f:a1:9e:9d:7a:9a:01:28:e2:d2:bc:
                    fd:36:02:e2:1e:e9:26:87:f7:74:c3:b9:da:c9:59:
                    d2:2a:45:f4:ac:94:1b:a6:53:02:a4:10:fc:2c:a8:
                    17:8a:3d:8e:ee:d2:c1:d7:f6:96:d9:a0:58:8c:07:
                    2b:7e:18:01:3b:83:61:ca:a9:4b:e1:e3:70:de:8b:
                    34:28:a4:00:a6:85:28:6a:c9:d8:64:51:c7:22:36:
                    45:38:0f:b9:34:4b:15:ee:99:45:f7:8b:92:bf:10:
                    04:da:03:64:98:61:2f:eb:81:02:64:0c:46:dc:47:
                    e0:80:8a:d5:dc:f1:75:0a:b5:92:98:41:c2:b0:b0:
                    b8:26:c7:ba:19:a0:9c:2c:4b:97:90:e2:ac:c6:61:
                    74:b1:01:98:49:28:d7:95:37:7e:ab:08:cd:79:2a:
                    3f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:55:C1:73:55:F3:B5:40:B8:CC:56:F1:90:F6:C8:CD:6C:83:D2:98
            X509v3 Authority Key Identifier:
                keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c3:61:70:17:fe:56:db:24:57:71:a3:6f:60:6c:fd:51:31:
         74:87:40:4d:35:ac:b9:13:23:f6:f3:d1:ce:9e:f7:e9:bf:d3:
         29:d5:2f:6a:63:e9:8a:b4:4e:68:7b:b3:f8:e9:4a:49:0a:e8:
         f7:1f:28:29:2e:b4:9e:7b:2a:eb:54:39:04:08:fc:81:ca:c7:
         45:5c:84:99:dd:21:f9:00:8e:e7:9d:9e:af:c2:33:54:9d:ba:
         44:d4:a4:03:f4:ee:0a:f2:ab:8d:91:f9:ef:47:13:66:fb:9e:
         b2:76:83:80:42:d8:fc:1e:91:58:d1:37:2c:32:ac:53:21:28:
         c5:9c:84:79:3b:8b:26:6c:d8:2b:1a:f4:af:f3:88:3b:f7:35:
         30:4a:c1:4d:ae:ae:f5:f3:f6:05:bb:8d:c7:f1:f9:14:18:cf:
         16:a8:2a:51:a3:4e:c5:7b:be:26:53:33:55:9c:bd:7b:2b:e2:
         9d:66:70:24:5d:b4:31:15:38:e7:ce:8b:a2:f2:72:bb:bd:6f:
         bd:9d:aa:8a:45:e6:11:5a:56:d6:fd:ee:53:cb:b7:05:e6:92:
         69:d0:5c:59:94:c2:83:92:db:95:9d:4c:c8:0d:24:77:99:64:
         42:10:ec:40:b1:93:22:8a:69:e7:f2:ac:35:eb:74:84:3e:20:
         b5:ee:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:50:42 2026 by rpki-client