Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          30gq4Zm40dt6uHyFQb9AVl0ikA/Ce1303lsOTq3pOEI=
Subject key identifier:   BB:D1:FD:E4:83:C7:77:AD:A2:E4:15:B3:44:E8:7D:EC:B4:21:C2:19
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       019CE5C890C236D785DA9CBDEDF5176AED64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          17F7
Signing time:             Fri 13 Mar 2026 06:00:52 +0000
Manifest this update:     Fri 13 Mar 2026 06:00:52 +0000
Manifest next update:     Sat 14 Mar 2026 06:00:52 +0000
Files and hashes:         1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=)
                          2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: frA1lfh9kfQf7fiT6vmG/RhTHpeKbN5uNrKaljGV0oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:90:c2:36:d7:85:da:9c:bd:ed:f5:17:6a:ed:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Mar 13 06:00:52 2026 GMT
            Not After : Mar 14 06:00:52 2026 GMT
        Subject: CN=bbd1fde483c777ada2e415b344e87decb421c219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:20:f7:f5:10:f8:1d:39:e3:f9:e6:c0:6a:
                    c6:7b:78:98:31:b4:85:cc:af:d8:33:24:f9:4a:b0:
                    dc:a9:ae:96:b9:d1:55:31:07:0b:c6:49:84:7e:d3:
                    84:17:be:82:8e:6c:cc:fa:9a:0e:50:5b:b7:c2:e1:
                    6f:7f:42:51:68:a8:bb:ee:80:c7:02:01:ac:e2:f6:
                    10:49:03:46:8c:f4:d7:f1:1b:8f:b3:96:5e:9e:5c:
                    6d:2b:fd:5f:9c:69:a1:61:d6:d1:ea:4b:dc:f2:d5:
                    76:87:20:97:b8:28:9d:90:5a:df:7c:d4:d7:a1:8c:
                    55:63:c0:06:35:ce:66:ee:48:c0:52:1c:75:ce:92:
                    8c:59:59:7c:dd:c3:5a:72:4a:1c:46:9f:7f:af:29:
                    41:fd:16:e5:ef:b8:e0:6d:b5:20:cc:aa:6f:fe:2b:
                    03:17:4d:05:5d:a1:17:8a:92:a2:a6:39:c7:d3:ad:
                    00:4e:36:87:5b:6c:fd:51:6d:e3:d0:fa:08:c5:1b:
                    1d:23:9e:fb:d0:78:87:43:30:ad:ae:2d:ac:51:70:
                    55:8a:85:e8:76:ff:70:84:fb:34:10:76:ca:42:c8:
                    b2:52:de:77:3a:81:71:8c:fd:7b:71:cf:bd:bd:6e:
                    8a:04:fb:96:1e:a3:6c:a4:4e:41:6b:08:84:1e:9e:
                    73:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D1:FD:E4:83:C7:77:AD:A2:E4:15:B3:44:E8:7D:EC:B4:21:C2:19
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:1b:de:0e:29:a8:42:d2:c8:e6:e0:35:3c:59:19:ec:17:
         c8:96:16:19:40:2c:22:f1:fc:18:5b:51:f7:eb:7c:de:88:60:
         bb:a1:4a:a4:8a:05:6d:33:47:42:4a:57:28:86:bf:fa:30:62:
         e1:cf:23:01:3d:23:cc:aa:8e:9e:8d:09:db:5d:b5:23:8c:6b:
         58:85:e1:2d:0d:67:b8:47:2d:2d:1f:43:58:bb:63:3c:3a:b3:
         82:ee:69:dd:61:23:1b:f4:f2:51:68:e6:01:2b:1b:3c:1e:5a:
         6c:40:d5:c5:79:8e:bb:a2:68:cc:48:d5:de:72:b8:a4:96:1f:
         5e:45:89:a3:35:7a:dd:7d:a2:a6:03:48:8f:e8:4c:74:c2:a2:
         c7:8e:fd:27:3b:c0:5b:19:49:90:7e:dc:a9:60:44:0c:7b:f0:
         e0:46:ed:18:1d:dc:f1:f8:7d:f5:8d:15:55:6c:f9:7e:bf:67:
         b2:1b:0f:21:7b:7d:33:dd:c3:3e:9b:65:63:71:d4:41:e2:38:
         65:0b:9a:27:4a:ea:92:d4:8c:84:74:fd:69:64:67:aa:be:c4:
         c7:5f:8d:f0:15:9d:06:e5:57:b8:56:70:11:e3:ce:6b:d6:3d:
         00:bc:58:16:d2:92:cf:6a:d9:7c:5e:41:8c:c3:a4:92:50:9c:
         8b:cb:11:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:56:56 2026 by rpki-client