Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File:                     Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier:          QkCVfyZ4kLlGPWf97lnLkIBpzwuJP6GduLKtDPRuPlw=
Subject key identifier:   83:4F:30:8D:B9:BE:1B:4B:C0:97:47:7D:C9:21:D8:FA:96:2E:64:F2
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer:       /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial:       019D130F6EDCD4A4B3BD740D17C2D508D3AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number:          05F1
Signing time:             Sun 22 Mar 2026 01:01:11 +0000
Manifest this update:     Sun 22 Mar 2026 01:01:11 +0000
Manifest next update:     Mon 23 Mar 2026 01:01:11 +0000
Files and hashes:         1: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: 1P9y7dWEs8TegGig11/N9koSrDvIAnNxj1Q4cGwsu38=)
                          2: m0yOtQ4zzaWwbkLA2mct7O9eAl8.roa (hash: TTt4vBq0ts1GuSUcOF2cVVxmQbeDaFKzFBYDNYxTze8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 23:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:13:0f:6e:dc:d4:a4:b3:bd:74:0d:17:c2:d5:08:d3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
        Validity
            Not Before: Mar 22 01:01:11 2026 GMT
            Not After : Mar 23 01:01:11 2026 GMT
        Subject: CN=834f308db9be1b4bc097477dc921d8fa962e64f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d4:bd:36:db:ba:91:44:1a:96:d0:d4:18:a5:
                    19:94:0b:72:c3:94:80:d1:78:0b:69:7e:c3:04:75:
                    b9:b0:5c:54:68:21:c9:24:25:20:a3:ee:7a:fb:6e:
                    6f:ac:c0:92:f0:65:0f:44:03:ba:03:ce:f9:9f:f6:
                    7e:9a:dd:e1:dd:5b:16:33:21:b4:05:34:ca:65:50:
                    31:a4:47:8b:de:8d:2a:7e:3c:6e:83:ab:0d:1e:63:
                    aa:19:f7:02:02:e3:62:ea:70:1e:45:2d:36:6e:f1:
                    d4:63:85:09:f6:4c:26:02:e3:b2:0b:1e:8d:d5:c5:
                    21:73:a6:51:ee:72:02:90:dd:08:5a:ac:3d:13:12:
                    49:bd:7d:f3:3d:97:03:8b:9a:d2:ee:98:33:6e:5a:
                    c3:52:59:c1:75:7d:cd:7b:2d:02:0b:dd:07:8d:97:
                    43:be:a8:47:ae:f5:6a:13:ea:2c:62:0f:70:e7:79:
                    f4:71:1f:48:e1:5a:e1:6d:ff:e4:36:08:44:b7:9a:
                    eb:d4:91:42:66:08:4f:ce:24:0b:8e:ae:c1:18:4a:
                    e0:66:2e:28:55:a8:eb:b2:e6:5e:3c:56:6c:02:94:
                    a2:83:0b:f4:34:b9:f2:4d:ee:a1:b0:96:2c:5f:4a:
                    7d:93:36:e2:d3:25:85:8a:16:8d:64:b9:b6:34:b8:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4F:30:8D:B9:BE:1B:4B:C0:97:47:7D:C9:21:D8:FA:96:2E:64:F2
            X509v3 Authority Key Identifier:
                keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:0a:20:cb:42:b1:ea:ab:d0:af:0b:74:44:3d:4f:fd:da:
         0f:21:09:ad:9c:01:bb:8b:dc:60:4a:4b:1f:a4:28:c3:77:ac:
         6c:d5:f3:95:63:fb:0b:4a:6d:6f:f7:04:6e:71:19:5c:f9:17:
         2a:8b:21:20:58:4b:16:30:b6:d6:47:99:ec:07:87:a6:06:dd:
         0b:57:83:e5:48:df:18:7e:4e:a5:b8:04:13:3c:89:ea:44:0e:
         40:4f:d4:6c:c4:82:64:7d:18:4e:ea:f0:61:9d:68:6b:e9:cd:
         73:c0:38:a6:53:4c:18:4f:fa:3d:6a:6f:2f:c1:09:b1:76:d7:
         11:b2:58:0c:12:53:07:c5:73:7b:a0:6e:e6:2e:57:37:2c:78:
         f9:5a:99:e0:50:99:20:0e:7e:06:a2:76:69:3a:bc:18:74:88:
         14:e8:06:32:82:28:3a:66:23:07:55:c1:78:9e:1c:03:42:a5:
         72:18:32:9d:f8:45:ae:05:ff:b4:30:13:86:ce:06:5b:4f:87:
         fd:de:a1:26:e7:ce:b5:ce:4c:a3:92:3d:d6:4e:33:65:84:7b:
         9f:d2:03:47:c2:e2:46:ea:bd:00:cb:47:6b:16:5b:16:13:71:
         ba:ca:32:5e:3c:8a:9f:51:8f:c4:ab:ab:21:01:27:ed:0b:83:
         0e:5f:23:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0TD27c1KSzvXQNF8LVCNOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhODdmY2M4NWNiNDk5NDE5YTFiMWVjMmYzMjA5YzJhNDM1
ZmI5MmQwHhcNMjYwMzIyMDEwMTExWhcNMjYwMzIzMDEwMTExWjAzMTEwLwYDVQQD
Eyg4MzRmMzA4ZGI5YmUxYjRiYzA5NzQ3N2RjOTIxZDhmYTk2MmU2NGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9S9Ntu6kUQaltDUGKUZlAtyw5SA
0XgLaX7DBHW5sFxUaCHJJCUgo+56+25vrMCS8GUPRAO6A875n/Z+mt3h3VsWMyG0
BTTKZVAxpEeL3o0qfjxug6sNHmOqGfcCAuNi6nAeRS02bvHUY4UJ9kwmAuOyCx6N
1cUhc6ZR7nICkN0IWqw9ExJJvX3zPZcDi5rS7pgzblrDUlnBdX3Ney0CC90HjZdD
vqhHrvVqE+osYg9w53n0cR9I4Vrhbf/kNghEt5rr1JFCZghPziQLjq7BGErgZi4o
VajrsuZePFZsApSigwv0NLnyTe6hsJYsX0p9kzbi0yWFihaNZLm2NLjgBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINPMI25vhtLwJdHfckh2PqWLmTyMB8GA1UdIwQY
MBaAFFqH/MhctJlBmhsewvMgnCpDX7ktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82ODVmMmQtYmRlNC00OWZkLWExNDMt
OTk0YmI2MjhiYmE1LzEvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82ODVmMmQtYmRlNC00OWZkLWExNDMtOTk0YmI2MjhiYmE1
LzEvV29mOHlGeTBtVUdhR3g3Qzh5Q2NLa05mdVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRgKIMtC
seqr0K8LdEQ9T/3aDyEJrZwBu4vcYEpLH6Qow3esbNXzlWP7C0ptb/cEbnEZXPkX
KoshIFhLFjC21keZ7AeHpgbdC1eD5UjfGH5OpbgEEzyJ6kQOQE/UbMSCZH0YTurw
YZ1oa+nNc8A4plNMGE/6PWpvL8EJsXbXEbJYDBJTB8Vze6Bu5i5XNyx4+VqZ4FCZ
IA5+BqJ2aTq8GHSIFOgGMoIoOmYjB1XBeJ4cA0KlchgynfhFrgX/tDAThs4GW0+H
/d6hJufOtc5Mo5I91k4zZYR7n9IDR8LiRuq9AMtHaxZbFhNxusoyXjyKn1GPxKur
IQEn7QuDDl8jHw==
-----END CERTIFICATE-----
Generated at Sun Mar 22 05:34:47 2026 by rpki-client