Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
File:                     W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json)
Hash identifier:          HWawwtuIPl6O/Em+ZC9MHhIe4efDD75u9gc+1v5nj2Q=
Subject key identifier:   23:0C:6B:77:90:C9:D7:C6:2E:C5:C3:EF:5D:A8:3C:DD:0E:8D:F3:41
Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71
Certificate issuer:       /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
Certificate serial:       019D382E9F5329075898FCDE477EE76A6315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
Manifest number:          0E31
Signing time:             Sun 29 Mar 2026 06:01:12 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:12 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:12 +0000
Files and hashes:         1: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: /L2R2w1+6wu7BojYjW2tBqXELB6aLmFX3z4ZwZ5bQ2Y=)
                          2: XcofZ2zUXbUkXhdjGHo_Ijp3eqY.roa (hash: G155Cwdr7xdTzfgF1ccmtV2g6/W9sVULFwUJkZWAH2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:9f:53:29:07:58:98:fc:de:47:7e:e7:6a:63:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71
        Validity
            Not Before: Mar 29 06:01:12 2026 GMT
            Not After : Mar 30 06:01:12 2026 GMT
        Subject: CN=230c6b7790c9d7c62ec5c3ef5da83cdd0e8df341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:92:46:3d:89:4a:15:4a:a9:70:df:38:90:
                    de:4f:1d:16:57:59:a0:42:83:f4:60:42:55:07:e6:
                    b3:7b:d9:a4:53:a4:b8:76:32:41:8e:d6:85:ac:79:
                    83:bf:cf:22:32:3c:78:ad:90:85:0e:55:f1:0a:71:
                    dc:fa:f4:11:9e:93:80:ca:a8:ec:eb:c7:81:0e:2c:
                    62:c8:ac:71:ea:c3:fa:02:a0:63:25:dd:71:61:05:
                    c2:4f:b0:cb:f8:99:99:5f:c3:bf:0f:5a:59:16:ee:
                    4d:c8:df:98:67:e7:ce:f6:d1:25:08:09:5a:01:ba:
                    f3:63:27:c0:76:9a:65:69:31:a8:5c:a7:66:15:f9:
                    12:18:1e:e8:18:ea:79:58:bb:4a:12:a5:ea:5e:22:
                    ae:f0:1d:90:4e:cd:00:30:a1:3f:d8:77:d8:da:5b:
                    c5:50:19:93:0c:97:26:38:ab:2c:ad:22:71:d4:c0:
                    31:b6:e9:61:d1:0a:9c:17:3c:67:5f:c1:44:3f:da:
                    e6:b8:8c:ea:6c:24:63:2b:3a:5f:52:1a:99:ae:60:
                    94:c6:52:51:67:d2:77:0b:b4:01:36:4d:56:f7:7c:
                    40:30:e0:aa:8b:5c:bd:53:e4:28:f6:5e:fc:86:e0:
                    c0:fb:7c:1b:32:12:62:0a:24:30:9c:c7:41:47:92:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0C:6B:77:90:C9:D7:C6:2E:C5:C3:EF:5D:A8:3C:DD:0E:8D:F3:41
            X509v3 Authority Key Identifier:
                keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:da:05:67:c6:99:97:c1:7e:85:71:96:60:f3:e8:e1:b0:da:
         ff:91:8d:33:64:5e:5c:55:19:fe:ad:3b:0e:c2:bf:70:80:3c:
         98:e5:c9:12:a1:7c:12:ac:b6:57:67:8a:c4:db:ac:90:c5:f3:
         36:d8:4b:d0:bc:d2:4c:67:a2:f1:9d:ba:a5:41:22:73:aa:95:
         f1:18:1d:29:0c:c8:6c:2f:47:e7:95:77:29:8d:87:07:3a:0b:
         43:b9:bc:a4:34:8b:bb:0a:72:a1:ad:f8:1d:6c:72:81:ef:28:
         9b:87:f2:78:de:18:e2:d9:37:7e:68:73:46:0a:ce:ba:52:8f:
         df:c6:c5:e0:77:b7:41:94:df:23:4c:82:f0:eb:f1:b8:5e:f4:
         d1:52:fe:46:4a:d1:00:2e:4b:78:7e:85:65:96:26:54:84:8c:
         cf:f5:66:26:60:47:ff:76:06:73:d5:80:cf:d8:3f:c8:ff:6f:
         af:74:50:37:9b:de:02:ac:66:7a:46:67:5e:e0:92:2c:2e:b0:
         09:5e:2a:2b:bf:97:6d:85:06:54:45:e0:3a:3d:bf:5d:8d:f1:
         55:e0:59:ab:9f:93:3e:99:8b:05:93:2a:44:a5:b4:a0:bc:99:
         66:d6:5e:2e:30:fb:c3:8b:5a:0a:4c:bd:ab:a1:6e:ee:7f:07:
         4d:7e:34:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:53 2026 by rpki-client