Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
File:                     WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json)
Hash identifier:          Izzip1xuKpE8X9ldRytPZ0rBne/ALT+azalLFfsuTio=
Subject key identifier:   41:84:96:C2:A4:8F:1A:C3:23:14:C3:65:29:6D:4C:A1:8D:54:55:5E
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Certificate issuer:       /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial:       019CF3BB599242DDA40AC39CE9F71530C955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
Manifest number:          0C54
Signing time:             Sun 15 Mar 2026 23:01:07 +0000
Manifest this update:     Sun 15 Mar 2026 23:01:07 +0000
Manifest next update:     Mon 16 Mar 2026 23:01:07 +0000
Files and hashes:         1: FXpUcueuWBp6fQq5c2tPdjSTYm4.roa (hash: RuaY5W7lr0sJsovg6cTHvVcz5PIkzQYxHi6ype94V9k=)
                          2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: tpd/yrL3kUXp97Hb2+9eK/atcSzLCegaDYkunqzQoQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Mar 2026 23:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f3:bb:59:92:42:dd:a4:0a:c3:9c:e9:f7:15:30:c9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
        Validity
            Not Before: Mar 15 23:01:07 2026 GMT
            Not After : Mar 16 23:01:07 2026 GMT
        Subject: CN=418496c2a48f1ac32314c365296d4ca18d54555e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:30:8f:19:64:5d:96:0a:78:79:4a:d5:95:db:
                    20:1e:b2:f6:ba:ef:7c:4e:8a:c8:22:25:c7:d2:33:
                    35:bb:1b:69:ae:66:a7:05:4b:04:e4:26:90:a4:6f:
                    6d:9b:b7:fb:60:df:bf:4f:59:7e:08:47:43:fe:0e:
                    72:15:56:a8:d7:7a:a5:21:c7:8a:9f:75:cb:3e:d2:
                    ed:77:cf:54:79:47:a5:29:da:a3:44:99:a0:c2:b8:
                    3a:c6:3e:dd:20:c9:91:2a:ea:c8:a4:13:2c:03:e7:
                    ef:81:e2:1a:d9:62:1b:79:b6:79:d5:43:c5:62:42:
                    94:be:68:98:8a:2f:0d:ff:47:a3:20:a3:ef:44:a1:
                    19:ee:c7:cd:59:26:12:73:2c:b5:d2:47:5b:53:a8:
                    28:65:ca:0e:32:37:b6:b0:a9:7e:bc:9a:0a:a0:cd:
                    08:87:a0:9d:24:48:fc:e5:d9:d7:f6:d9:60:39:54:
                    dd:98:e2:e7:ec:bf:57:66:ea:fc:78:ff:2d:aa:a2:
                    97:90:ea:7b:24:70:8d:fb:8e:36:88:8d:ab:fb:34:
                    29:37:83:aa:28:77:36:dd:cf:af:41:1f:49:b3:be:
                    86:1f:94:2d:03:9f:3f:0b:3d:da:ef:73:16:a4:de:
                    f9:10:a2:76:45:09:8c:1f:dc:e0:2f:e2:c3:74:19:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:84:96:C2:A4:8F:1A:C3:23:14:C3:65:29:6D:4C:A1:8D:54:55:5E
            X509v3 Authority Key Identifier:
                keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:71:0b:91:6b:44:bd:21:c3:20:c3:14:2f:d3:72:10:c5:b6:
         b1:ac:43:8b:a1:bc:ea:e9:ef:93:fb:2b:b7:78:e9:1d:02:92:
         d6:5e:45:4f:94:1f:12:2d:9e:7f:7e:c1:2d:77:86:64:b1:e7:
         38:f5:b3:ad:e8:6e:c2:50:0d:a6:f7:05:92:39:61:6a:8a:c7:
         1f:f0:2b:e0:79:14:52:23:70:51:c4:b5:7a:63:5d:f5:79:4d:
         68:e3:db:3c:cb:f5:35:ae:39:f4:e8:9c:ab:83:81:94:d7:dd:
         7d:6f:81:46:88:64:9c:7a:eb:27:33:10:72:08:2b:dd:67:95:
         f8:68:50:06:72:36:da:a1:bb:4a:5a:6e:fd:01:3d:d5:7e:c0:
         c4:5a:e7:d9:7a:d8:9b:5a:9b:f4:82:16:5d:91:22:4e:b9:9c:
         15:44:37:9f:b5:04:26:9b:11:fa:74:7a:9a:96:c9:52:57:11:
         8b:79:e5:f9:cb:c1:41:6a:1f:97:f1:e9:6b:06:89:73:53:fb:
         50:cf:2a:0e:96:3f:3d:be:f2:0e:78:bd:28:5f:f2:cd:12:98:
         26:b8:1d:b3:b1:a0:02:5b:40:7c:5b:ef:98:a1:94:b2:73:6a:
         85:dd:1c:13:04:72:fb:87:2d:04:8e:67:92:3a:0d:71:44:80:
         69:97:84:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 03:22:16 2026 by rpki-client