Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
File:                     W-oEa0mXgK7H1hgtLVanXrCJaM0.mft (raw, json)
Hash identifier:          EJfTJRBlJKAvqkPSbTEuLegnR5sxkYxC+Gjgk2J+SSA=
Subject key identifier:   5A:D2:09:35:03:98:90:FD:0F:5F:BA:19:14:AE:4F:11:D5:A4:9F:E0
Authority key identifier: 5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD
Certificate issuer:       /CN=5bea046b499780aec7d6182d2d56a75eb08968cd
Certificate serial:       019E62A8983B14250530A1381735F6E5BD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
Manifest number:          1814
Signing time:             Tue 26 May 2026 05:01:16 +0000
Manifest this update:     Tue 26 May 2026 05:01:16 +0000
Manifest next update:     Wed 27 May 2026 05:01:16 +0000
Files and hashes:         1: W-oEa0mXgK7H1hgtLVanXrCJaM0.crl (hash: 1mE7wKKQgF4doEoL6qGZkUW05g5UsK0/YDKzJzXFYRQ=)
                          2: zQPH05SIZNuQg4zGS0l4MvCEJwc.roa (hash: ueZfBj8JGiHYfSauWwC/j0GXwlPaWH1VC5mIskTovc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 27 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:62:a8:98:3b:14:25:05:30:a1:38:17:35:f6:e5:bd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bea046b499780aec7d6182d2d56a75eb08968cd
        Validity
            Not Before: May 26 05:01:16 2026 GMT
            Not After : May 27 05:01:16 2026 GMT
        Subject: CN=5ad20935039890fd0f5fba1914ae4f11d5a49fe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a3:1f:2e:39:15:12:d0:34:e6:81:59:60:be:
                    51:cc:46:b4:84:d7:9f:fa:15:fb:d1:4e:18:54:08:
                    de:4e:f9:8e:42:8d:6c:f4:d2:ef:fe:3c:e5:58:8b:
                    f5:0c:ca:c3:6c:d8:cb:eb:63:94:22:fd:5f:1f:41:
                    06:04:18:49:ab:f0:c6:12:f9:6c:ae:c0:05:1b:4c:
                    97:fc:57:95:3e:62:bd:5e:5c:9f:aa:5e:6b:61:0d:
                    eb:5d:68:0f:73:d3:d7:14:6b:0a:68:e6:21:e8:45:
                    cf:05:86:7d:ec:77:5a:87:c2:aa:08:06:11:4f:21:
                    dd:8a:d6:c8:fd:40:ab:ce:6d:00:08:5d:ce:7b:68:
                    d1:ed:40:b6:a6:c1:18:57:66:58:6b:54:d3:c4:c9:
                    f7:5f:64:ab:5e:21:2b:a4:89:ff:bd:e0:5e:47:8d:
                    1a:cf:12:fd:49:4c:3c:7b:65:76:27:cf:7c:88:75:
                    a2:d9:f8:b2:37:b1:e1:7c:39:cf:9d:73:5e:cd:2f:
                    3f:99:a9:74:42:58:e9:6f:79:76:cc:52:ee:27:bd:
                    da:a4:c7:38:a9:fc:1e:d6:fe:85:24:09:7e:e5:cc:
                    4c:71:93:45:96:71:c4:6a:1a:09:40:ed:df:db:88:
                    b4:d0:24:ab:b5:eb:8f:5b:55:49:24:c8:d1:65:17:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D2:09:35:03:98:90:FD:0F:5F:BA:19:14:AE:4F:11:D5:A4:9F:E0
            X509v3 Authority Key Identifier:
                keyid:5B:EA:04:6B:49:97:80:AE:C7:D6:18:2D:2D:56:A7:5E:B0:89:68:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-oEa0mXgK7H1hgtLVanXrCJaM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/ac4c2d-8ab1-4e01-b6b1-29602215add0/1/W-oEa0mXgK7H1hgtLVanXrCJaM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:81:59:4f:ca:f9:64:ad:34:0a:c3:81:72:93:68:54:52:
         c4:31:48:2e:3a:c6:5b:5c:fb:63:f2:fa:72:dc:aa:53:bf:85:
         13:85:62:2a:b3:3f:a9:76:a5:18:a8:bb:af:af:31:23:79:bf:
         73:3b:b8:8e:4a:eb:47:41:78:f7:fc:7a:54:b3:c1:d5:c1:26:
         4e:16:9b:7f:d3:87:12:31:f8:10:ab:00:04:8a:d6:84:b5:af:
         5d:54:ef:9a:ea:07:d7:8d:28:c9:d4:fd:d8:a2:72:d7:0c:be:
         07:b3:d2:21:77:3c:90:80:44:77:6b:aa:82:5a:09:7d:f5:76:
         91:03:05:5b:2e:54:0e:f3:fa:6f:6c:f1:20:62:66:c1:81:52:
         70:d2:15:d6:77:e5:c1:cf:17:a7:36:1f:65:9a:d4:01:2b:2a:
         34:5c:69:48:c2:15:c8:a4:5c:0d:11:ce:31:d7:6b:ba:d0:b0:
         eb:58:17:bd:f6:ab:b5:f6:9a:e5:28:4b:1d:9a:9c:b5:89:c5:
         cf:1d:c8:e8:ab:8c:e9:80:fa:e6:51:9a:80:c4:11:9d:d0:b4:
         69:b1:b4:34:05:6c:f9:7f:ba:78:1b:1a:23:f4:2b:bd:77:a8:
         fc:70:0e:46:f5:d3:b4:40:b7:5e:e3:78:f0:fe:f2:a1:3a:e0:
         a3:51:7a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 11:48:50 2026 by rpki-client