Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
File:                     Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft (raw, json)
Hash identifier:          2u12tBv9U5Nz9RW3f/juHlw/xxFIka5plWkhRI7yxMA=
Subject key identifier:   53:E4:40:0A:7A:C5:24:BB:C4:8B:03:D3:77:AE:B4:A3:C5:06:49:EC
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Certificate issuer:       /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial:       019D39AEAA40BCC50FF40DD968144A70D31F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
Manifest number:          07EA
Signing time:             Sun 29 Mar 2026 13:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:41 +0000
Files and hashes:         1: Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl (hash: RoQm1Wmf2/Cnx9OYbEsMhflSJKUpQMkVldGmcA/WTHs=)
                          2: vskKnMst18EVmBm6lBj0YzIpNuk.roa (hash: jTxDQ4a1vled+k24Z+iZwB1mJUNUMg7H5qSldRSueFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:aa:40:bc:c5:0f:f4:0d:d9:68:14:4a:70:d3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
        Validity
            Not Before: Mar 29 13:00:41 2026 GMT
            Not After : Mar 30 13:00:41 2026 GMT
        Subject: CN=53e4400a7ac524bbc48b03d377aeb4a3c50649ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fb:db:1b:c6:c7:a8:42:45:e2:5d:3a:da:bc:
                    38:93:a5:f3:c9:ab:e1:62:a5:5b:00:18:5e:32:44:
                    ee:b9:49:3d:62:a1:ba:49:ed:3c:d3:13:ee:fd:bb:
                    6b:ba:93:61:33:21:16:d7:2f:6a:28:81:b8:6f:6e:
                    79:e9:d6:c7:01:55:96:8e:71:8d:26:9e:15:d7:26:
                    2c:f0:d8:b0:ec:f0:ff:94:aa:2d:11:cd:84:1f:5f:
                    78:11:7e:80:30:3d:27:d3:a3:f7:b6:65:14:e4:13:
                    da:fd:32:06:22:b7:37:d8:df:63:6a:f6:44:74:64:
                    95:fb:da:c1:b9:33:c0:dd:d3:11:36:e8:c5:9e:0d:
                    ef:cd:31:82:df:4a:ab:55:c9:16:a9:6b:c0:e8:1a:
                    41:3b:be:d1:bd:f0:85:b3:bc:7b:30:c0:e5:e0:48:
                    79:e9:45:23:be:b1:50:c0:69:42:2e:09:91:71:84:
                    ed:23:cd:2a:c7:39:0f:99:d3:f7:3c:2e:25:12:7a:
                    4a:c4:bc:35:ce:dd:36:45:5f:7c:53:74:58:a8:35:
                    e6:62:2d:fb:60:91:11:5b:19:d8:86:a2:96:fe:a1:
                    e8:63:43:46:4d:a8:08:36:07:c3:1c:30:f8:49:c8:
                    db:ba:04:fe:6a:a0:21:1e:e6:f5:fe:f5:a2:36:09:
                    91:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E4:40:0A:7A:C5:24:BB:C4:8B:03:D3:77:AE:B4:A3:C5:06:49:EC
            X509v3 Authority Key Identifier:
                keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:34:7d:85:20:d3:14:41:4a:a6:74:93:b1:64:af:34:b5:
         be:f4:3b:32:32:b8:71:90:e5:19:25:7c:b3:70:8c:91:3e:ad:
         4d:ee:c6:56:ef:68:fc:d7:07:27:a2:bf:6f:dc:6e:88:e1:45:
         4d:40:6d:49:0c:86:01:68:5c:3b:83:34:78:b0:52:72:ee:a5:
         29:ac:a6:23:e4:dc:a4:b0:21:ce:64:f8:be:ff:9a:3c:5b:11:
         ca:0a:50:40:44:eb:6d:47:61:a6:43:da:4a:0c:b4:a7:43:c0:
         a2:16:b8:75:97:82:0e:08:c5:d7:29:f7:ce:c6:0b:cb:9b:87:
         c3:66:e5:e5:67:33:f1:b9:0d:08:87:6f:cb:ee:06:a1:d2:14:
         7c:88:b0:c9:c7:e5:e9:7c:34:97:f9:4c:b8:8c:89:fb:8b:3f:
         67:9c:84:da:3b:b5:8a:5a:05:ed:b2:b2:db:71:2c:45:cc:ac:
         49:cd:25:98:ad:d5:20:2d:0f:d6:92:a5:81:8f:8f:9b:98:ce:
         ab:72:af:15:b3:60:1c:21:59:32:72:5c:a8:e3:47:e4:09:3f:
         6a:95:6c:4a:f3:80:af:5a:db:51:f7:6e:39:22:86:b3:38:df:
         f3:e8:d9:02:7d:bb:27:b6:21:04:a3:9c:2d:5e:e2:6d:4c:6a:
         eb:7f:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:13 2026 by rpki-client