Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
File:                     WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json)
Hash identifier:          +z4ys9HFC40nBryO3Pa3GSXm5UNl1mT2CczvKEE5J1E=
Subject key identifier:   DE:E4:43:BA:B2:4C:F2:85:CD:30:A2:DE:50:B9:9F:C9:D6:3A:2A:93
Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0
Certificate issuer:       /CN=58a763f0c467abaa701d968c3749c6dad03489b0
Certificate serial:       019E299475581345BFF9AE5E050782C8364E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
Manifest number:          0E5B
Signing time:             Fri 15 May 2026 03:00:55 +0000
Manifest this update:     Fri 15 May 2026 03:00:55 +0000
Manifest next update:     Sat 16 May 2026 03:00:55 +0000
Files and hashes:         1: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (hash: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w=)
                          2: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: dowz70z/+FBLZ1xunBf3NRkM8P1k75B3sQYG9IojMZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:94:75:58:13:45:bf:f9:ae:5e:05:07:82:c8:36:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0
        Validity
            Not Before: May 15 03:00:55 2026 GMT
            Not After : May 16 03:00:55 2026 GMT
        Subject: CN=dee443bab24cf285cd30a2de50b99fc9d63a2a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:8d:40:95:5e:9e:74:0c:ad:33:85:af:93:
                    01:cc:37:09:ac:c9:16:0a:3d:24:9a:f9:e9:5c:ae:
                    8d:3a:86:40:e4:66:8f:3e:3a:f2:24:67:d2:c4:86:
                    5d:31:13:9c:70:fe:69:04:60:4f:a8:34:94:76:8c:
                    21:70:01:b3:12:9b:37:58:d9:97:6f:1e:b4:32:0f:
                    2e:6a:bc:5c:63:11:3f:29:a1:da:80:ac:c8:93:38:
                    40:8b:a4:b3:39:3a:56:e3:b0:c0:b4:e5:69:5d:c3:
                    64:03:e6:a1:24:39:5f:e9:52:94:72:06:b4:40:05:
                    be:66:ca:46:35:b9:d0:0b:0a:f3:71:7b:09:2c:26:
                    c3:82:64:05:4f:c8:44:e2:6e:99:11:ac:d2:12:25:
                    52:d4:b1:ee:d4:17:65:57:f9:1d:39:a6:21:b4:a0:
                    26:09:6c:f1:5c:4e:63:7d:5a:12:73:0f:14:82:ab:
                    a8:0a:9f:b2:14:4e:5d:93:0a:13:cb:21:d1:2d:c5:
                    b6:8a:ba:ae:ca:7f:9a:09:df:cc:fa:9a:48:05:c8:
                    90:8c:cf:55:6d:d2:e3:00:20:b1:34:a1:b1:4b:0a:
                    fa:ce:71:25:61:0b:6e:7e:6a:06:c3:12:06:92:f6:
                    48:0c:3f:c6:b9:71:10:42:e1:cc:eb:94:f2:6c:bb:
                    70:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E4:43:BA:B2:4C:F2:85:CD:30:A2:DE:50:B9:9F:C9:D6:3A:2A:93
            X509v3 Authority Key Identifier:
                keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c5:b7:34:7d:39:70:2d:8a:34:5e:3f:7e:73:d0:48:05:35:
         87:48:22:a3:1a:45:c2:dc:f4:9b:3f:8e:13:07:35:18:21:53:
         c1:74:33:27:9e:5a:2e:a1:78:3b:66:de:36:a3:44:73:c5:a5:
         79:d3:b0:fe:d6:64:c1:7a:7d:32:da:f0:8a:4f:03:80:0c:59:
         f3:d4:3e:3c:63:91:3c:61:da:a5:ff:6a:58:c2:b4:6b:2c:06:
         00:cd:57:ad:f9:0d:52:c1:b8:4b:65:f9:b9:37:5e:9f:4a:49:
         57:7e:f2:f0:cf:7b:ad:4c:cf:b5:32:b1:11:06:15:ed:5e:c3:
         b2:b4:94:41:d6:6c:dd:f5:47:a8:4a:99:f7:b6:12:b6:b8:49:
         b6:6c:3f:e4:3b:2d:7f:29:fa:85:49:15:b1:d1:c4:8c:1a:e0:
         a5:2f:ff:c2:f2:a7:dc:5a:db:6b:14:3e:19:79:36:1e:52:f6:
         9b:b6:a4:a0:91:4f:56:1b:28:d4:5f:34:27:fb:df:d6:9d:63:
         8d:68:fc:24:17:eb:83:87:87:78:20:12:92:3b:7d:ff:c4:17:
         b6:cb:0f:9d:89:c0:79:dd:39:c1:4b:d5:c8:c6:2b:19:2e:3e:
         c3:68:eb:a6:13:b4:af:b0:00:3a:0f:e9:9c:e4:4d:f0:78:f0:
         09:64:d0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:03:07 2026 by rpki-client