Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File:                     WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier:          15MuHrUianrGyLHfySFkAJaSw9nBa5+9yWxSWhs/CiE=
Subject key identifier:   D5:2D:96:E0:17:E0:7E:C5:34:E0:CA:A0:9A:C7:A2:2A:D1:BC:E4:AD
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer:       /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial:       019D3307D04E1A481E6D7AC51588959FB272
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number:          07A6
Signing time:             Sat 28 Mar 2026 06:00:43 +0000
Manifest this update:     Sat 28 Mar 2026 06:00:43 +0000
Manifest next update:     Sun 29 Mar 2026 06:00:43 +0000
Files and hashes:         1: ME3_RRsJTE0yygMx8pWx1CRfu4g.roa (hash: NXcFWTl4I5CN86WhLodDSbukJ6PN73DMqFCemMucwz8=)
                          2: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: 5Xkko2uCgOm+yn7zKAeFQHqrIN9v6dNtY/ZkhTLVAR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:07:d0:4e:1a:48:1e:6d:7a:c5:15:88:95:9f:b2:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
        Validity
            Not Before: Mar 28 06:00:43 2026 GMT
            Not After : Mar 29 06:00:43 2026 GMT
        Subject: CN=d52d96e017e07ec534e0caa09ac7a22ad1bce4ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:0a:9e:da:d6:dd:89:fd:97:2f:cb:58:93:
                    03:94:5c:33:f4:5a:ea:ee:c3:b9:3e:bc:2e:80:d9:
                    fb:2e:90:3c:14:ed:d0:b2:60:22:0c:d2:2d:33:e1:
                    d1:a1:b8:00:cc:a9:7e:b9:e5:f5:d9:1c:7f:af:ee:
                    c9:34:9c:24:6c:51:1c:60:fa:55:1c:fc:84:13:e5:
                    35:14:98:3a:2d:19:7f:67:12:f6:b1:7e:7d:fe:89:
                    e0:88:8f:45:e2:bd:52:48:2f:0d:8e:c7:d8:e6:c7:
                    db:2c:b9:02:f4:b0:a8:20:87:34:cf:f9:4c:2b:07:
                    16:06:88:66:59:ee:d7:36:66:18:d8:cd:e1:fa:c3:
                    69:7a:08:f0:5a:fc:86:87:6d:02:61:41:1e:8e:1c:
                    67:41:c1:43:85:7b:f8:10:75:40:08:e0:6a:cf:d2:
                    f1:ac:8f:eb:c8:07:38:94:c7:7a:71:0b:89:bd:ab:
                    ef:b0:dd:62:9e:1a:51:af:75:cf:cb:9b:eb:29:28:
                    98:d4:c1:c9:51:56:5b:fb:ff:79:49:e9:20:8c:0f:
                    51:ac:0d:2a:84:9b:15:30:79:57:dc:15:f4:d2:8a:
                    f8:c3:c3:a8:b4:20:89:56:6c:fe:36:5f:49:f9:fd:
                    90:9c:25:9e:5c:cd:1b:b3:95:99:30:e6:50:fa:b6:
                    df:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2D:96:E0:17:E0:7E:C5:34:E0:CA:A0:9A:C7:A2:2A:D1:BC:E4:AD
            X509v3 Authority Key Identifier:
                keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:4f:cf:8d:c3:59:5c:5a:f7:8d:e4:90:1a:59:c1:fc:5a:db:
         30:89:17:51:24:e3:3f:5f:31:25:ba:dc:e1:5a:b8:9f:fe:83:
         54:23:89:08:86:c9:67:39:5d:3e:7f:23:48:1c:b3:25:11:55:
         f8:dd:42:ac:76:ee:f0:b5:16:6f:c3:f2:03:78:7d:45:49:8b:
         c5:81:8c:45:70:83:30:e1:b9:6d:6f:78:77:da:1a:99:d4:2d:
         41:ad:29:f3:0f:10:0b:06:8e:be:9d:78:e5:a8:65:20:30:02:
         7c:f0:9b:ac:f7:49:e8:63:9e:a5:a8:3c:d6:63:13:14:ee:e4:
         e3:98:70:10:be:fb:26:46:14:d1:d4:88:99:da:e4:20:00:67:
         b3:6c:e1:e2:15:1b:dd:89:3f:74:12:af:c2:6c:a0:6a:85:c7:
         24:e1:1d:7d:09:fe:7d:de:8f:04:3d:38:5c:39:6c:85:8d:ff:
         eb:8b:ac:44:16:a8:1b:84:55:84:e9:7a:17:63:8c:e7:64:f4:
         22:69:b9:9d:d2:8b:92:58:7b:a8:c3:11:9f:96:c7:31:7c:6b:
         d5:a0:61:16:65:ca:fb:08:3b:7e:54:77:89:ae:ec:05:17:bd:
         e4:74:89:89:66:c6:9b:7d:4a:28:41:5d:4f:ff:02:0f:a4:fa:
         4b:90:c7:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zB9BOGkgebXrFFYiVn7JyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5
ODYyNDMwHhcNMjYwMzI4MDYwMDQzWhcNMjYwMzI5MDYwMDQzWjAzMTEwLwYDVQQD
EyhkNTJkOTZlMDE3ZTA3ZWM1MzRlMGNhYTA5YWM3YTIyYWQxYmNlNGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDkKntrW3Yn9ly/LWJMDlFwz9Frq
7sO5PrwugNn7LpA8FO3QsmAiDNItM+HRobgAzKl+ueX12Rx/r+7JNJwkbFEcYPpV
HPyEE+U1FJg6LRl/ZxL2sX59/ongiI9F4r1SSC8NjsfY5sfbLLkC9LCoIIc0z/lM
KwcWBohmWe7XNmYY2M3h+sNpegjwWvyGh20CYUEejhxnQcFDhXv4EHVACOBqz9Lx
rI/ryAc4lMd6cQuJvavvsN1inhpRr3XPy5vrKSiY1MHJUVZb+/95SekgjA9RrA0q
hJsVMHlX3BX00or4w8OotCCJVmz+Nl9J+f2QnCWeXM0bs5WZMOZQ+rbfrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUtluAX4H7FNODKoJrHoirRvOStMB8GA1UdIwQY
MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt
MDZkZjFkYzAzMzY3LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3
LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqE/PjcNZ
XFr3jeSQGlnB/FrbMIkXUSTjP18xJbrc4Vq4n/6DVCOJCIbJZzldPn8jSByzJRFV
+N1CrHbu8LUWb8PyA3h9RUmLxYGMRXCDMOG5bW94d9oamdQtQa0p8w8QCwaOvp14
5ahlIDACfPCbrPdJ6GOepag81mMTFO7k45hwEL77JkYU0dSImdrkIABns2zh4hUb
3Yk/dBKvwmygaoXHJOEdfQn+fd6PBD04XDlshY3/64usRBaoG4RVhOl6F2OM52T0
Imm5ndKLklh7qMMRn5bHMXxr1aBhFmXK+wg7flR3ia7sBRe95HSJiWbGm31KKEFd
T/8CD6T6S5DHrg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:57 2026 by rpki-client