Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft
File:                     W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft (raw, json)
Hash identifier:          1074ZBw7jb+/8kTOXhKlQHSixNsTj8VeRxEix90gTcg=
Subject key identifier:   F9:74:0B:42:32:86:3A:C6:5F:50:45:E3:A9:F6:F6:57:9C:EE:72:CB
Authority key identifier: 5B:7F:A0:27:D2:ED:B7:9C:76:F4:8B:F1:27:73:CD:8B:22:95:17:F0
Certificate issuer:       /CN=5b7fa027d2edb79c76f48bf12773cd8b229517f0
Certificate serial:       019D378954DA4C017672EB0B7B820028E542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft
Manifest number:          050E
Signing time:             Sun 29 Mar 2026 03:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:40 +0000
Files and hashes:         1: W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl (hash: RVhsZI3Uud4/nGWpJDbwIJJyzb606y9Lwvfy8+RFamE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:54:da:4c:01:76:72:eb:0b:7b:82:00:28:e5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7fa027d2edb79c76f48bf12773cd8b229517f0
        Validity
            Not Before: Mar 29 03:00:40 2026 GMT
            Not After : Mar 30 03:00:40 2026 GMT
        Subject: CN=f9740b4232863ac65f5045e3a9f6f6579cee72cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ef:7f:45:22:80:af:06:36:99:20:46:87:9f:
                    b2:ae:6e:44:eb:cc:0c:dc:c7:c8:6b:96:79:75:53:
                    7b:6c:6d:ae:ce:e3:5e:66:96:90:95:3d:ba:03:05:
                    8e:8c:e7:8c:57:5d:04:87:2a:f1:fe:56:be:6c:34:
                    17:42:cc:85:b6:af:fb:5a:81:6a:bb:bf:36:6e:cb:
                    c4:f0:7c:65:ad:0b:91:a1:2e:0b:dd:c5:fa:47:bb:
                    a7:40:d8:57:06:c1:68:4d:61:66:46:70:2d:bf:55:
                    25:e2:2f:0d:0a:3c:4c:cb:37:f5:88:74:3e:06:9e:
                    98:90:06:b6:97:75:23:90:5f:68:47:69:bb:33:db:
                    b8:e1:0a:3b:b2:e0:a9:b4:81:2b:00:0a:76:4a:43:
                    47:f0:08:5b:fc:93:4e:df:a0:89:9a:0e:bc:f5:67:
                    50:bb:4b:fa:21:55:2e:aa:45:5a:e2:68:1f:7c:46:
                    41:8e:73:85:15:58:d4:46:09:54:27:9d:ff:a9:45:
                    46:4c:55:99:dc:67:09:74:58:8e:41:a4:7c:b9:73:
                    e2:96:92:15:7c:90:35:bc:e4:e0:d8:96:e5:9d:6f:
                    81:dc:f6:52:b6:c3:17:a3:7f:3f:a7:7b:fb:2f:ac:
                    43:82:97:11:0b:0f:be:1f:b0:58:e9:88:81:25:5b:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:74:0B:42:32:86:3A:C6:5F:50:45:E3:A9:F6:F6:57:9C:EE:72:CB
            X509v3 Authority Key Identifier:
                keyid:5B:7F:A0:27:D2:ED:B7:9C:76:F4:8B:F1:27:73:CD:8B:22:95:17:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7c62b6-f401-4b16-a21c-10855cfdc8af/1/W3-gJ9Ltt5x29IvxJ3PNiyKVF_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:61:53:63:e0:ee:e3:d8:9a:48:b2:dc:e3:75:13:e7:a4:
         bd:ba:75:3c:ed:8a:ef:cb:e9:bb:d2:d5:52:37:e2:d7:18:57:
         9f:fd:d5:75:4f:9f:ce:bd:04:3b:c7:12:5f:70:03:e3:6e:85:
         33:75:27:98:99:34:fc:d1:8e:d3:a3:ac:e1:94:4b:57:88:02:
         af:fd:62:c9:80:38:4e:1f:d7:c3:b4:3f:63:c5:c1:19:9b:b8:
         73:c7:87:bc:e7:b8:a6:16:61:ef:5b:b6:ca:be:7b:a7:0e:0b:
         5f:4f:cf:41:9d:68:ea:f8:ee:02:f4:a1:5d:d5:fc:7e:d0:7d:
         97:b4:6a:3c:e1:17:54:00:65:bf:62:be:1e:40:fc:a8:6d:c3:
         42:9e:f6:de:b5:08:28:48:80:c7:d1:2e:87:d7:49:a5:bb:34:
         1a:a6:49:29:d6:1c:d7:4c:59:a4:91:37:a6:63:7d:f6:94:87:
         28:20:0e:f7:63:e6:1b:78:72:01:49:06:1d:87:2e:0b:9a:2c:
         07:57:b4:90:c5:83:19:c1:30:0e:cb:77:b9:e9:17:63:f8:bb:
         73:91:28:56:7a:34:b5:f5:61:ae:81:c7:c2:80:ad:34:33:c7:
         a4:e2:d3:49:e0:0a:77:10:b9:fb:d4:bf:c5:6e:29:26:37:f0:
         bf:8c:ad:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:07 2026 by rpki-client