Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          YwtYaJgMARcyyb6f6O4plLxc6Pf6/JsoIapOFMWiT10=
Subject key identifier:   07:8F:01:AF:AD:2E:C4:A3:8D:57:DE:BF:5E:EA:B3:8A:11:E0:60:DC
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       019D277274AB798BC66F4372CFE3D749A6AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          074F
Signing time:             Thu 26 Mar 2026 00:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:45 +0000
Files and hashes:         1: FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa (hash: cK6XeGopFBU42xQOw3pXSfyyWEVVyNojCMYqWc1ytZU=)
                          2: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: h5BDUrpgeHSQt049BiOy4RQ3coPPxO9jnfxAifdQLSw=)
                          3: nGiD_VuUEB-534WjNRVtjKrImS4.roa (hash: bHtWWwpySfNp2/DWZty3G/IOwsGExDDGytrN6bgjIio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:74:ab:79:8b:c6:6f:43:72:cf:e3:d7:49:a6:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Mar 26 00:01:45 2026 GMT
            Not After : Mar 27 00:01:45 2026 GMT
        Subject: CN=078f01afad2ec4a38d57debf5eeab38a11e060dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:50:ea:b5:34:2c:b2:fc:11:bb:6e:ce:60:16:
                    c5:44:c6:59:c6:9c:ae:62:20:98:47:a9:17:cc:91:
                    ba:8d:15:37:eb:9c:9f:e7:4c:90:ff:01:18:9e:63:
                    ac:6c:0e:23:f1:4d:9d:74:90:45:90:0a:61:d0:53:
                    44:12:0b:6d:e7:6e:20:39:75:99:9f:54:00:1c:ef:
                    37:de:2a:e5:a4:6e:9d:ec:6b:df:94:37:c8:3b:b9:
                    7a:02:e0:72:04:fe:63:38:13:47:2f:a4:06:52:38:
                    9d:aa:5c:11:7d:92:9b:0b:18:74:74:1c:0b:6e:8f:
                    92:be:e8:c6:f2:d6:50:9c:9c:fa:43:7d:7e:9a:1f:
                    df:65:c6:82:c9:b6:43:dc:62:7f:5e:40:27:0b:e0:
                    ef:c1:b3:37:87:3a:a3:72:0d:4e:c0:7a:0f:a7:af:
                    01:e9:39:3a:82:9e:2a:39:1d:96:45:d0:bd:4a:dd:
                    e8:5a:6c:49:e6:bf:46:e1:50:4b:98:66:e0:7c:75:
                    8d:dc:90:3d:b5:4c:b6:76:0c:21:9c:59:c9:24:36:
                    7a:06:8a:b5:7e:af:11:26:e5:66:64:06:9d:10:a3:
                    52:dc:94:74:df:a8:d9:94:df:3f:af:ff:ea:b3:0f:
                    e7:ce:6e:7c:a6:de:5d:ce:58:18:47:a9:6f:35:73:
                    5e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:8F:01:AF:AD:2E:C4:A3:8D:57:DE:BF:5E:EA:B3:8A:11:E0:60:DC
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:aa:02:e9:5d:e5:b2:4c:18:b5:e1:30:01:72:92:1a:44:ee:
         7d:d0:42:4d:71:db:db:6f:62:64:6a:87:1a:c8:f4:51:b4:05:
         bb:b4:67:2e:26:ae:68:1f:e1:2b:08:89:2e:62:9c:c8:74:3d:
         2b:68:1b:16:73:dc:b5:af:42:e6:d8:34:2a:0a:b1:42:30:4f:
         25:b8:e5:56:ba:7f:21:cf:0b:ba:ac:ba:22:69:10:0e:5a:bc:
         a4:fb:32:d5:2f:24:50:97:f2:b2:fe:bd:61:29:17:89:64:89:
         91:a0:51:f3:5f:23:8d:c7:cc:18:91:c4:5f:3f:78:e6:b9:3c:
         a9:d5:c5:57:94:08:82:87:38:f1:54:86:02:7b:cd:c2:c8:a6:
         26:7b:80:63:b1:da:0c:49:9f:48:68:29:ad:4f:1d:01:b1:08:
         9e:e1:5a:46:34:d0:dd:5d:26:e7:c3:dd:c7:29:ac:e2:fc:47:
         b1:fe:b5:11:ab:53:f2:eb:f2:a3:c5:21:ed:42:13:b0:6d:4c:
         5c:38:42:ed:db:6f:ec:60:da:83:18:8c:31:77:de:ef:1c:b8:
         2a:30:f4:74:51:19:e0:e3:57:7f:c4:b5:35:45:84:46:f0:66:
         b5:a0:c4:ed:a6:af:23:24:4d:1b:c5:b7:ea:fa:a5:56:a9:00:
         01:f4:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:34 2026 by rpki-client