Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
File:                     WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json)
Hash identifier:          lsJ11QgI+bEZXU4o+xV1/OV0tOUJoz7///R8vHtQIR8=
Subject key identifier:   DE:54:CB:2E:B3:08:E9:66:B9:5B:C0:F1:08:82:99:3E:A0:70:D6:E8
Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E
Certificate issuer:       /CN=5ac45d9a1a22416833de59a5e619d12096d0969e
Certificate serial:       019D37F6F2A6CCA3160699327E654BC36FA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
Manifest number:          11E3
Signing time:             Sun 29 Mar 2026 05:00:23 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:23 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:23 +0000
Files and hashes:         1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: KIlSy3/2iBOBsHDowBhCw+Zbly0fPkcQ3L65t+hYJmc=)
                          2: ezjL16dggZPPKxT8c5ZTz4CAcj0.roa (hash: 1cWlyvLQe8uN9nQ0JnxAhB7NOox/3OfJkDuBy1sf4Fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f6:f2:a6:cc:a3:16:06:99:32:7e:65:4b:c3:6f:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e
        Validity
            Not Before: Mar 29 05:00:23 2026 GMT
            Not After : Mar 30 05:00:23 2026 GMT
        Subject: CN=de54cb2eb308e966b95bc0f10882993ea070d6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:b2:45:9a:16:c9:8a:91:06:f2:61:2d:85:
                    a1:b8:a3:a0:e9:b3:5a:f7:e5:83:77:5e:25:1c:80:
                    6b:6c:95:67:83:be:e3:e1:1f:21:19:cc:c9:8a:11:
                    40:a2:32:94:de:35:03:32:25:f3:4a:5f:9e:d3:20:
                    8d:2f:e6:3c:2f:4f:4b:53:e0:3b:69:d4:c4:d0:a3:
                    30:d2:4a:a4:77:c6:a6:75:21:62:23:4c:17:95:0a:
                    6c:23:4d:f8:d5:3d:7e:2e:1d:d9:e2:44:04:fd:e8:
                    ce:32:d9:4b:60:af:9a:1e:44:7c:ea:f1:59:6a:55:
                    ea:a9:78:c5:f7:2b:2b:01:5a:a4:5b:46:8a:4c:55:
                    f2:fd:54:fb:9d:f1:aa:6a:78:31:88:84:d2:10:8d:
                    be:5c:b7:e1:7e:ae:8c:fe:cb:19:25:e1:76:69:36:
                    52:cc:91:7a:55:15:86:0b:4f:50:a5:3a:b7:a5:21:
                    23:ea:fc:df:33:d0:b1:13:b6:25:8d:4c:01:6a:48:
                    24:74:2f:dc:f1:5f:d0:aa:f0:39:3e:41:e3:73:9f:
                    2f:ac:bb:f5:c1:52:71:0a:b7:86:b9:6c:5d:bd:c1:
                    b4:af:be:b4:a7:2f:b1:07:ea:24:92:68:43:64:18:
                    c7:97:11:8e:b9:d2:6d:a0:16:9a:75:41:b3:1c:31:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:54:CB:2E:B3:08:E9:66:B9:5B:C0:F1:08:82:99:3E:A0:70:D6:E8
            X509v3 Authority Key Identifier:
                keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:1f:dd:31:db:58:c6:c9:ed:e4:4f:47:d2:ab:1e:35:30:ae:
         40:e4:18:ff:d0:c7:7e:c2:c3:40:48:de:85:ae:11:b4:4f:e4:
         9a:74:4a:73:2f:7d:3e:fa:96:46:69:d0:4b:ef:54:7b:6b:d2:
         27:ea:2a:32:e6:6e:cf:2c:7f:0a:8a:34:2a:a3:d2:26:67:5e:
         a2:5e:f1:4c:96:91:cc:2c:03:fb:0f:84:cc:2e:b5:de:6f:94:
         3c:8a:a6:1d:79:6d:4f:76:4d:c8:19:8f:24:e9:02:03:d4:09:
         0f:d9:de:ae:db:1a:9f:86:5c:ea:89:9a:97:a7:06:95:1b:38:
         b5:be:5a:b2:cc:30:69:f7:0d:32:4e:c6:90:26:b1:9a:ae:81:
         ce:b5:a4:a2:83:59:05:5a:ed:e0:47:a8:53:dd:b6:a0:f2:4f:
         8c:d6:5f:c9:4a:35:1c:5f:92:bf:c2:e2:d1:e5:12:e7:f6:6f:
         c2:2c:55:8d:f0:33:11:ca:f0:a2:0a:90:e4:c0:59:98:bc:cf:
         e6:71:e5:2b:ba:eb:f8:d4:24:d1:b5:da:06:a2:6e:6f:88:2c:
         ca:c8:b6:88:b0:8e:27:79:68:f8:a7:1e:f2:21:4e:f0:ca:29:
         36:4e:c5:4d:cf:ac:2b:f1:3b:5d:3a:d8:d5:32:bd:74:42:e6:
         41:4b:87:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:15:21 2026 by rpki-client