Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
File:                     WP3E4ivstTWhxX9LjcRBtTMWd-M.mft (raw, json)
Hash identifier:          IzuiEztyM5m/HdBjLc6xGpxnj+VqdRdJolDs3SFJpL8=
Subject key identifier:   50:13:00:BA:F6:C8:F7:9C:C9:08:80:B3:9F:EB:97:3F:01:87:83:7E
Authority key identifier: 58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
Certificate issuer:       /CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Certificate serial:       019D39419774814AE2C497EE93818796F46A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
Manifest number:          15D3
Signing time:             Sun 29 Mar 2026 11:01:33 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:33 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:33 +0000
Files and hashes:         1: CL5vgG8h2b9NiWwfbyTtqZf0yaM.roa (hash: R85d1yKqIezVVA7/iS4hXDWK5iZ8vOcLojDLQ5Lal/A=)
                          2: WP3E4ivstTWhxX9LjcRBtTMWd-M.crl (hash: Gzq++B355N6tJlUNFWI79oNQi1iq2p0PAqoUQV9QJno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:97:74:81:4a:e2:c4:97:ee:93:81:87:96:f4:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
        Validity
            Not Before: Mar 29 11:01:33 2026 GMT
            Not After : Mar 30 11:01:33 2026 GMT
        Subject: CN=501300baf6c8f79cc90880b39feb973f0187837e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:03:8e:7d:12:20:1a:8b:d9:13:99:59:c3:e8:
                    0c:ac:68:df:17:ed:20:b6:2f:98:33:8b:0d:e9:8d:
                    6e:20:55:3e:19:a8:b5:32:c4:8c:21:5d:82:65:9d:
                    63:20:2c:3c:7d:65:a2:8f:cc:36:58:4c:b6:8d:46:
                    fb:6f:30:d7:ec:8d:db:0e:aa:c2:af:4b:c2:cc:e8:
                    90:28:a4:d4:15:c3:7c:94:1a:02:6f:0b:f2:20:df:
                    cc:1f:c3:db:c2:1d:8a:7f:83:96:f9:65:c6:71:17:
                    0f:51:80:79:68:eb:1f:fe:ac:13:94:72:51:39:05:
                    33:64:5d:4a:f1:3a:8e:e9:d4:42:d2:ea:e6:c3:fe:
                    49:6f:99:88:10:c9:b1:41:81:a5:1a:d5:64:16:a4:
                    00:cb:bf:98:58:78:76:d8:38:48:66:68:96:7e:ca:
                    2a:47:68:83:8b:c8:87:21:43:de:99:e3:1f:33:ac:
                    9e:30:ae:07:40:84:69:39:42:1f:ef:c5:ae:04:1d:
                    7f:4e:1a:c8:50:06:9d:50:89:22:66:fc:2f:8c:08:
                    4c:0f:1f:d8:82:de:03:3b:b2:65:82:6e:bd:d8:20:
                    df:fb:cb:ed:4c:43:a2:c9:3f:27:1d:46:25:92:ff:
                    db:ff:0f:b6:ec:db:06:72:b9:65:0b:35:14:fb:36:
                    88:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:13:00:BA:F6:C8:F7:9C:C9:08:80:B3:9F:EB:97:3F:01:87:83:7E
            X509v3 Authority Key Identifier:
                keyid:58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:37:82:5a:c5:2b:20:1b:d8:dd:ee:ae:91:7a:7d:8d:f4:
         58:5b:e6:1e:a8:91:25:24:cb:be:f5:f2:6b:8f:54:1e:0a:24:
         81:e5:0a:91:9a:55:27:9f:24:72:8f:71:30:ba:16:a9:ec:b8:
         17:fa:ce:35:59:01:7a:b5:30:4c:ad:27:44:e7:f7:e2:e7:02:
         a2:72:c6:33:07:56:69:bc:5d:61:c2:67:e8:19:a4:0c:4f:88:
         79:f7:8f:fc:ed:ab:b6:e5:55:36:24:42:19:26:58:dc:c7:21:
         b4:fb:64:2b:df:ee:3f:c3:96:1c:03:14:3d:4d:dc:f4:6b:ab:
         8a:8e:e6:60:4b:de:be:33:5d:6e:26:86:bc:93:6b:5d:84:c7:
         df:45:db:ff:a4:d4:df:7e:44:2a:d8:78:d7:67:1a:f2:24:66:
         9a:f9:ba:e3:37:27:f2:4e:eb:1e:7b:ff:da:e7:fa:48:7d:b2:
         4f:d0:73:83:b5:c6:3f:95:39:98:06:8e:81:27:e3:23:e0:62:
         d3:22:71:25:62:2a:f5:84:34:63:f9:87:77:33:4f:1f:ab:ab:
         5c:ba:60:28:0b:5b:d0:33:d7:17:09:f4:2b:3d:23:20:93:a2:
         fa:7d:bf:31:28:5b:a2:8b:6a:71:18:28:9f:e9:4b:5d:25:a3:
         78:9b:49:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:16 2026 by rpki-client