Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft
File:                     WLuO46dH7YtXhlfN1HN1hvX9uTE.mft (raw, json)
Hash identifier:          I0+whmGooMaX18cxxLn68/dJRU22j28L3wyClNph/r4=
Subject key identifier:   1D:E9:EA:0E:F0:3D:26:00:6F:E1:49:45:CF:2E:D2:CD:35:A4:75:B8
Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31
Certificate issuer:       /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
Certificate serial:       019D37891F5696EB4C50AE5B3075A713B3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft
Manifest number:          1891
Signing time:             Sun 29 Mar 2026 03:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:26 +0000
Files and hashes:         1: D1F4AwDSP0DpFXVKqtO62poYhGo.roa (hash: HFTwrntOgjxmxHVlJcT3YFDvFfol8GOo19TviMZdSu8=)
                          2: FT_Otv36fbgX0-E_yYp2jsjacC8.roa (hash: iWvTgXBRg5gSlKF04ojnmMHFrOSejZ8j4d3v48KQleg=)
                          3: WLuO46dH7YtXhlfN1HN1hvX9uTE.crl (hash: vjOxjCzMojYhWSYp98HNtnKPgvCYjqxbscyPLEvLwOk=)
                          4: rLOMqZT_GPb_kAqiy4Tac7XWQSY.roa (hash: jjGCuniJtmOl9PVD/xJjf68/Ks+X5NplY+UAGpuUkqE=)
                          5: wbhecKf5tElmU6pJxZeFEX-8B14.roa (hash: uWdSPOkD9foXKCetNGuI0zZsAl+SBEmOCVyqN6tkOzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:1f:56:96:eb:4c:50:ae:5b:30:75:a7:13:b3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931
        Validity
            Not Before: Mar 29 03:00:26 2026 GMT
            Not After : Mar 30 03:00:26 2026 GMT
        Subject: CN=1de9ea0ef03d26006fe14945cf2ed2cd35a475b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a5:82:38:81:5d:cb:3b:cd:60:e3:df:d2:fc:
                    c9:60:64:03:7c:3c:bc:55:43:6f:52:07:1e:f8:fc:
                    a1:ac:b1:c9:e2:7b:b0:9d:44:59:7f:68:94:a8:d0:
                    b5:91:9b:6c:83:0c:34:07:65:56:da:e6:25:3b:03:
                    0d:ad:a2:b9:58:18:18:2d:01:ad:68:0e:34:08:5c:
                    c7:3d:ff:7e:36:53:56:52:53:7b:13:df:58:c0:03:
                    f9:02:39:d1:5e:78:fc:86:2e:0b:96:6a:e1:20:6a:
                    36:f6:4d:3c:47:ce:8d:b1:de:ea:2b:f7:9d:39:08:
                    2f:38:54:2a:03:83:e6:de:98:73:9c:8b:89:5e:d3:
                    db:3f:2a:67:75:a3:86:8f:1b:1f:97:11:04:dd:c1:
                    07:f1:2e:43:8f:93:a6:ca:a8:34:30:ed:b6:c9:f1:
                    f2:8b:82:9e:20:93:00:bc:9d:8e:a8:60:0a:e4:4f:
                    2c:53:e6:04:95:38:da:54:b8:2d:4d:74:35:dd:0a:
                    a1:a9:37:49:68:4a:24:1c:25:ba:6f:61:be:3f:4f:
                    aa:dc:de:ea:4f:60:1e:db:30:c8:69:35:02:56:78:
                    af:b9:d8:d7:89:9f:b2:86:2a:f6:bb:a9:da:27:29:
                    2a:86:0a:4e:97:68:0b:9c:fe:9c:c3:b1:4a:8e:f5:
                    2f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E9:EA:0E:F0:3D:26:00:6F:E1:49:45:CF:2E:D2:CD:35:A4:75:B8
            X509v3 Authority Key Identifier:
                keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a4:e8:f8:53:c7:d7:f8:5c:c7:92:a7:f4:d6:45:0f:7d:78:
         72:ec:14:0a:b6:40:66:f1:39:dd:0e:1e:04:ec:13:85:10:f3:
         24:eb:fa:97:7c:ba:ef:1b:bc:84:93:bf:1d:ae:39:39:80:d1:
         b8:5b:24:3b:3d:42:21:16:12:b4:bc:67:22:bd:3c:39:bb:1f:
         c7:8c:b6:c1:49:11:2f:dd:ef:4d:75:c7:b8:76:87:aa:3a:7c:
         dc:09:02:a1:ab:4e:82:c8:a0:97:a3:6e:07:5b:b8:a0:94:da:
         2a:12:c5:ad:8d:7b:6c:92:95:11:b9:a3:53:e6:9e:7c:b9:74:
         d5:09:fb:58:67:e8:bf:03:dd:a2:90:f9:ff:6f:91:9e:de:fc:
         b5:f6:f8:1c:82:aa:88:67:b4:0a:43:b3:28:25:d1:d1:78:aa:
         25:37:31:61:aa:2d:77:83:5f:27:97:fa:a8:59:12:51:cf:2c:
         d5:73:f8:57:d9:59:ad:20:d2:d2:29:7d:79:f1:ce:4b:8a:58:
         00:32:11:05:75:89:1f:51:55:28:c4:68:17:56:5d:37:76:86:
         d9:bd:f9:1b:65:b8:f8:99:4d:7f:71:7d:30:c0:60:4f:7b:60:
         21:b6:b4:79:68:43:2a:80:4d:a4:95:90:7e:da:ca:1b:ba:d4:
         15:a8:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:19 2026 by rpki-client