Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File:                     Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier:          Xtw126elxwTyIOWuxVggzDkm+VpPqtUZs/fnLPuPpww=
Subject key identifier:   31:A2:00:61:01:73:E0:11:BE:D8:18:DF:BE:17:8C:AD:6E:00:8F:F0
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer:       /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial:       019D2703F04D7AAF492F7937F97FC8AB0F6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number:          049C
Signing time:             Wed 25 Mar 2026 22:01:02 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:02 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:02 +0000
Files and hashes:         1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: kZrclZGsNfzSOk1q+CxXVgW0bNO79J7hGHzMrZUddsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:f0:4d:7a:af:49:2f:79:37:f9:7f:c8:ab:0f:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
        Validity
            Not Before: Mar 25 22:01:02 2026 GMT
            Not After : Mar 26 22:01:02 2026 GMT
        Subject: CN=31a200610173e011bed818dfbe178cad6e008ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a4:8d:7e:52:1b:80:13:41:4c:c2:a2:1a:43:
                    49:7c:60:48:75:91:94:ba:d3:4f:d7:95:b6:47:72:
                    3d:d3:12:6f:33:68:a3:35:41:17:bf:f6:1e:df:98:
                    e2:bb:7d:85:8e:d2:1e:b1:40:b3:62:25:5c:3e:b2:
                    7c:c5:2c:cd:98:a9:b9:0f:50:15:1b:8e:b6:a8:a9:
                    67:50:e9:73:cd:24:fe:b7:e8:37:8d:d0:d9:d3:da:
                    88:21:e1:6f:19:82:6b:7e:24:d4:d6:cd:18:45:51:
                    5d:be:70:e3:cd:7c:4e:7c:02:11:fa:2c:6d:d9:38:
                    4f:df:1d:52:29:cc:b7:88:38:ef:e3:df:01:ae:35:
                    4b:4f:83:e1:fa:44:ce:44:2c:57:d0:72:aa:63:c0:
                    09:cb:72:22:4c:15:f6:84:9e:25:95:09:2f:be:ad:
                    e4:5e:8b:01:d0:5d:fb:fc:85:be:4f:44:c4:b9:e6:
                    f0:21:39:94:00:2c:aa:16:67:8e:a5:f1:dd:57:5a:
                    8a:46:ac:a6:23:b6:28:c2:78:9f:ae:a4:f4:31:b3:
                    97:98:5b:0d:6d:86:ec:c5:d7:43:2d:3a:44:3e:92:
                    a3:a5:96:ad:4c:ee:ae:59:8b:dc:6d:2c:e2:15:db:
                    4e:7e:ed:1b:79:02:1d:78:75:8d:c0:45:02:8e:dc:
                    cf:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A2:00:61:01:73:E0:11:BE:D8:18:DF:BE:17:8C:AD:6E:00:8F:F0
            X509v3 Authority Key Identifier:
                keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:04:f0:43:cb:e8:a9:1f:d5:c8:49:ed:64:38:18:57:57:e3:
         72:6c:fa:4e:6a:02:cf:03:4f:87:48:c7:53:81:92:74:b2:7d:
         4e:b8:44:20:fa:d1:c8:b9:9d:48:94:58:cc:4a:c1:78:44:a5:
         3d:96:c5:5e:f4:ea:d2:9b:f7:0b:a4:83:49:de:1d:55:44:a4:
         3d:a8:ce:76:91:71:c0:81:22:ee:da:48:3a:e3:92:be:39:cd:
         96:a8:7d:0e:0d:3c:1a:71:8c:3c:54:07:7d:52:dc:1d:18:e7:
         ce:7b:a0:b2:5d:fd:6b:bb:21:11:b0:17:e6:3a:94:b2:f5:46:
         3f:71:67:09:f0:aa:58:20:f6:db:dd:08:ab:5a:97:96:a0:4b:
         09:7f:8d:e7:04:77:02:5e:89:b0:9f:86:c2:78:d3:1b:c5:ae:
         28:f3:3e:6d:bb:d3:99:e6:a5:16:8e:4e:69:37:4f:91:75:94:
         1c:ee:ac:b6:d5:06:c2:87:41:e8:37:76:77:02:f6:cd:7e:ce:
         30:25:ef:05:34:c8:31:3d:b4:b0:2f:55:0a:b5:6b:f4:d6:4f:
         d6:f2:83:2a:3f:14:e6:1d:9f:12:95:ec:a5:56:15:4f:8e:3f:
         e8:05:3e:93:a1:19:58:4b:64:d4:e7:fd:22:bb:7c:b4:c2:1b:
         80:1e:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----