Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
File:                     WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft (raw, json)
Hash identifier:          0zCOFSAyJsa9VIc/tlZivYmiXDxaPXhj0ApVmBJdifc=
Subject key identifier:   EE:D4:F8:6D:E4:C0:3B:21:FF:6C:20:6B:B6:05:DA:77:06:96:30:4F
Authority key identifier: 58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74
Certificate issuer:       /CN=5812db6bf70652bfb45bebfb25054a57f9799f74
Certificate serial:       019D254C83688E92052B0B6DC27D38729DD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
Manifest number:          97
Signing time:             Wed 25 Mar 2026 14:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 14:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 14:01:04 +0000
Files and hashes:         1: WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl (hash: /U1Pzfw2afPXBdYJckeZR3PzDHbj5y2eAEWYl5npJpY=)
                          2: XrTneSBYqqy106mabxkh4w7evJo.roa (hash: m5E5vycsGrzxgE4v1Xbbf+YHA1i0THF2g2GCWtHz6u8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:83:68:8e:92:05:2b:0b:6d:c2:7d:38:72:9d:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5812db6bf70652bfb45bebfb25054a57f9799f74
        Validity
            Not Before: Mar 25 14:01:04 2026 GMT
            Not After : Mar 26 14:01:04 2026 GMT
        Subject: CN=eed4f86de4c03b21ff6c206bb605da770696304f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:d7:d8:b6:7c:37:08:9b:13:83:51:bb:5a:
                    73:21:9e:e6:84:f2:2c:cd:c7:15:2d:ae:e3:2c:31:
                    89:b4:e0:1b:bd:63:63:7a:0a:53:06:80:6f:b7:e7:
                    7e:03:6e:d7:bc:73:4a:ef:be:62:5e:7b:a6:55:13:
                    82:19:ef:cd:26:de:aa:82:8c:e5:ff:bd:76:e0:60:
                    69:37:37:bd:b6:1c:bc:ae:dc:3a:e8:92:a1:bb:20:
                    fa:cb:83:80:21:49:b8:64:80:1d:3f:6c:55:a1:34:
                    ec:d6:d4:29:49:56:fa:58:10:b8:48:82:b1:0b:97:
                    ff:19:9f:cb:22:5b:ce:18:31:52:1c:1f:1b:34:fd:
                    43:a4:5d:53:61:45:bc:1c:53:d9:5e:f2:f8:45:51:
                    70:54:1b:a2:28:b9:b0:c5:aa:f1:11:e3:71:2a:e0:
                    a1:7b:e1:ae:74:75:67:1a:30:b4:34:e5:8f:ac:f2:
                    00:70:21:16:73:45:50:b9:93:6a:b8:85:cf:e6:c2:
                    c4:4a:10:4f:aa:0c:f1:b2:f7:59:56:08:fe:b4:d1:
                    c1:60:56:07:51:3b:74:21:a2:52:a5:65:36:ad:ec:
                    6f:8d:85:f1:f1:8b:2d:74:59:25:64:f6:3c:65:85:
                    60:8c:d3:69:a2:09:21:26:82:76:5a:f1:6b:03:1e:
                    c7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D4:F8:6D:E4:C0:3B:21:FF:6C:20:6B:B6:05:DA:77:06:96:30:4F
            X509v3 Authority Key Identifier:
                keyid:58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8f:d4:33:ac:21:e8:56:ab:ed:97:50:e8:47:37:d2:06:d5:
         f8:7c:d8:2b:42:67:d0:b3:8c:f3:a2:80:c3:b5:33:83:b2:8e:
         97:bd:5d:0e:02:d1:2e:b3:66:57:66:0b:7a:95:e7:b4:29:98:
         48:12:a9:9b:16:dd:f7:ea:8e:33:56:2e:ef:b7:19:1f:27:a8:
         b8:78:78:bf:d4:b3:02:9f:5a:04:a5:55:5c:30:ef:61:f9:00:
         dc:0e:98:29:b9:cc:7f:76:26:d5:3f:64:0c:9b:b3:98:1a:30:
         81:86:0f:dc:d6:3f:ba:de:cf:e3:1f:67:33:ee:46:62:f4:c0:
         a9:5f:d6:5a:62:cc:f1:57:bf:18:4d:8c:0b:bb:17:48:b4:df:
         78:56:d0:75:47:b4:19:58:5f:2f:cb:f3:40:e1:77:38:9e:23:
         9f:0c:53:58:09:aa:21:78:c9:0a:8b:8a:c8:6d:79:7b:c6:98:
         94:5c:9f:15:2d:88:1a:85:d1:b5:a5:d3:ad:e8:85:03:fa:76:
         d7:90:a3:68:06:2a:a1:ee:35:86:bd:79:6e:6a:24:9d:cf:20:
         e6:55:dd:9b:b3:d9:87:36:33:ab:ff:67:75:2e:21:be:41:3d:
         a5:3f:b2:a1:d3:5e:e6:f4:8a:f7:91:4f:75:9b:05:37:77:ab:
         0d:f2:67:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:20:51 2026 by rpki-client