Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File:                     WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier:          +x6gUfbyvBVToBaMRbw7YLpT8BRKTvB7BsRDFY7zKtw=
Subject key identifier:   F3:75:16:C3:14:E3:A1:66:90:31:31:4A:42:AE:71:B1:8B:01:C4:39
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer:       /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial:       019D389C3F5D8A8CB30F6DBB48827218A2BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number:          1679
Signing time:             Sun 29 Mar 2026 08:00:57 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:57 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:57 +0000
Files and hashes:         1: 3qeL2NCx-As-scDPVvwvbvGSalI.roa (hash: s49s84Y1fceDUG+xLS7hG3wa/GQo7A9FukrgGPAHFYI=)
                          2: DTUiseBlEHrYRRybhJZtYkO70ow.roa (hash: K4NadvqyyWrb4LEKIBSE6MBJgfXoW77DQt6TglV6X0U=)
                          3: W06FGdEzFyVp5CnGDdYIbf1E-E4.roa (hash: EMpjseN02dHDvqZ+fevSM2jzqlumUsBDCpozifI3h/Q=)
                          4: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: TAi1fDX71LbkL6VocyKr75jMToR4HFD1CPOnGvTC7Sg=)
                          5: iiTKAqZGJ6vws7T7EzUEpqTG4Yw.roa (hash: ebn3NWhZojsxDB0gw9zwRqNtjRbJ4CRhTXOu0mX7Whk=)
                          6: t3R9MpZvNi4B5O3PeMlZmxothNM.roa (hash: 0Evh98kS6qvThrmAMvnRdgVdKBcCHS0mGPabP0ZsQ58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:3f:5d:8a:8c:b3:0f:6d:bb:48:82:72:18:a2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
        Validity
            Not Before: Mar 29 08:00:57 2026 GMT
            Not After : Mar 30 08:00:57 2026 GMT
        Subject: CN=f37516c314e3a1669031314a42ae71b18b01c439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:42:8e:4e:13:94:a0:fb:7e:9b:7d:4d:8f:
                    85:22:05:45:83:51:fd:e8:6f:33:5c:14:71:73:4f:
                    82:74:1b:05:6b:11:b4:e9:7a:f0:2b:b8:84:23:ed:
                    a7:aa:34:cc:d9:0f:45:75:83:9d:24:62:7c:80:73:
                    38:2c:3c:d2:00:1f:00:4c:86:4b:e6:17:5c:0c:36:
                    da:1c:31:ff:d7:69:1a:41:6c:c0:39:e5:2a:76:a7:
                    6d:51:4f:9e:b9:e4:6c:88:f0:b9:d4:ee:b1:83:78:
                    d2:c3:c9:9d:e2:68:33:23:66:5f:52:ea:49:65:76:
                    8f:ab:cd:8a:9b:4a:15:64:aa:4b:68:2a:5d:b9:b7:
                    3d:1b:b4:1b:b3:b9:63:fb:0b:d0:67:10:45:c2:9f:
                    b3:67:c7:12:bb:aa:25:9d:df:09:3f:c8:53:8c:ce:
                    c0:fb:5e:94:89:a5:55:9b:1c:3c:9a:e6:84:74:07:
                    e3:d9:4b:c3:a9:27:9a:d4:8f:c3:ab:66:67:fe:68:
                    28:5f:f9:20:c7:f6:71:7a:88:56:a3:de:5b:2c:bc:
                    2f:c3:0b:77:8d:29:08:77:a3:5a:88:b5:1d:16:2d:
                    8f:56:38:fc:2e:a0:0e:7a:45:6b:7b:29:77:7d:c4:
                    c0:88:f1:b1:31:ba:18:ff:35:9d:68:10:0d:f1:f8:
                    ab:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:75:16:C3:14:E3:A1:66:90:31:31:4A:42:AE:71:B1:8B:01:C4:39
            X509v3 Authority Key Identifier:
                keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:0c:23:24:1c:b9:fa:19:31:88:ac:df:fd:0c:4c:9e:14:
         fb:bd:df:e2:ca:87:62:d8:b3:7b:78:2b:2a:65:87:a4:c7:01:
         06:e3:a0:ca:89:df:bf:ca:e2:52:44:5c:03:9e:c1:b7:fe:97:
         85:8c:87:48:0f:c9:a9:af:cd:cf:b3:32:72:90:a6:14:36:b7:
         0f:95:28:96:b4:92:b0:3b:7b:91:da:cb:b5:6a:00:a3:c1:87:
         5b:d7:92:0d:ee:e0:d8:cf:24:c4:4a:37:d8:ea:04:96:ce:1d:
         1c:cd:50:0c:07:6a:fc:a0:a5:cd:c5:21:88:48:e4:33:cc:5b:
         96:d3:00:48:03:88:99:2b:33:82:74:6a:0b:43:98:d5:ad:c9:
         99:fa:23:6c:e4:8f:74:70:42:93:c8:f3:7c:8f:0a:80:96:46:
         95:0d:1d:56:1e:0e:40:06:cb:d2:f6:92:87:b4:09:75:bd:fa:
         09:0e:d9:42:40:30:da:a4:44:4a:11:27:2c:b1:8c:ad:27:b6:
         54:48:bc:9d:d6:02:64:3a:c3:3f:bb:06:f0:12:27:39:1a:f6:
         bd:9e:d4:f2:d8:93:8c:56:b0:0d:5e:11:75:36:04:06:85:78:
         4f:42:1c:13:a7:5e:a4:4c:97:ab:8e:12:e7:9a:81:d3:fa:e5:
         1d:d0:a2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:17 2026 by rpki-client