Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          U9uG3didDMgTnci0jvcX2nHQ1vE/5i3zTI3w9M0sVz8=
Subject key identifier:   24:1B:35:A1:4F:DF:7F:DB:51:04:18:05:03:D5:FB:F4:E0:14:A9:FF
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       019D2AA9E6133828E950C8443CA686DBCE95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          1893
Signing time:             Thu 26 Mar 2026 15:01:10 +0000
Manifest this update:     Thu 26 Mar 2026 15:01:10 +0000
Manifest next update:     Fri 27 Mar 2026 15:01:10 +0000
Files and hashes:         1: 37UgpJIpFDoLpn5jUdrrw88EOYs.roa (hash: 6IHanqLQQ9iVieDletocqCDXSFtx3QpzBhEUB5fo/Wo=)
                          2: 6CYJFLYzJsCzzHIAogKVImiilqU.roa (hash: hXxIZWK3P8ePeRytCGeiJCZHrXxQPMFWaAZ+75i/4qM=)
                          3: 9lnke6oRh0VLNBbdrOmVHhpK_30.roa (hash: mwX6XqY2Vzr3/AFUGFr4YDFxRbauEvN03/V40GGEUYw=)
                          4: E8Dq6b1_iT2pjSVqisC1G3r0_Sg.roa (hash: aZesuL1kEe2OW5HrJCbkkpREyKjdhx6K40wSnDcwXlI=)
                          5: _PydBs1sWRTvUV5cRaL2yTeOV00.roa (hash: 5vv2v2s5YeTFWOeOLBaLL5q8cPQUZNamlvCzhmGZofc=)
                          6: bzM0vXaT5a0wdLKXtzcW1KTh0E0.roa (hash: HSw7OuKnO856MNi69RfSc3oV1YFcKv7OWcbxs0IZTX4=)
                          7: hS6uewCB_QrVL4l6szpbmIikwP4.roa (hash: HveKQzzsmxnwC74x4jZYUDMe8gGcI27oxthPBotk3XE=)
                          8: iwnASaLaQw8Qdn5cYtkYv6MG2gQ.roa (hash: KCxw+NktIcx6tj5s7jZ1g6kWygCH78tSuPcXjTkGaIE=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: M4ouoIWlWQn0KLkqKwBJhai3zsixvcB2g84xmUp5TAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:e6:13:38:28:e9:50:c8:44:3c:a6:86:db:ce:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Mar 26 15:01:10 2026 GMT
            Not After : Mar 27 15:01:10 2026 GMT
        Subject: CN=241b35a14fdf7fdb5104180503d5fbf4e014a9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6a:b6:07:3d:6a:c1:5a:2f:ad:5a:fc:f1:63:
                    08:33:f6:e9:fb:ef:46:c9:47:ca:7d:44:eb:5b:1c:
                    21:f7:a6:3b:97:92:0c:9c:3b:12:64:09:2b:7b:13:
                    2a:e6:57:7a:a0:a8:c8:d7:ba:cc:36:4b:48:f8:b3:
                    f5:59:f4:c5:3d:eb:dc:58:e0:c3:c5:d8:97:47:ed:
                    d6:d5:a8:71:58:c9:24:30:5c:85:de:73:62:fa:34:
                    c9:6a:a5:d0:d3:99:2c:01:93:ae:b9:20:86:73:4d:
                    5f:1e:78:ab:45:b4:1a:2b:1c:2f:80:85:96:d6:6b:
                    c1:9e:47:c9:ff:da:6c:c2:92:60:a1:77:40:3c:c4:
                    90:7d:a5:32:e5:c2:f8:33:11:25:f4:81:76:f5:02:
                    52:65:85:7f:17:ba:2e:0f:0d:69:93:5b:b6:4d:fc:
                    42:a8:ae:53:c1:da:95:fe:94:9e:c0:c2:69:e6:4c:
                    ad:e2:f9:4d:23:90:bc:ef:a3:aa:68:14:ca:d7:8e:
                    60:4e:23:9c:84:23:83:7d:5f:f0:e7:c9:de:03:41:
                    ed:91:48:2d:5c:f6:68:df:c5:ff:e2:d0:1d:73:16:
                    e1:25:3e:e0:f6:8b:e5:70:81:02:6b:66:5e:62:b2:
                    fe:18:53:64:86:1c:47:9e:e8:ae:f6:06:28:65:dc:
                    bf:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1B:35:A1:4F:DF:7F:DB:51:04:18:05:03:D5:FB:F4:E0:14:A9:FF
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:fa:24:ba:c5:cd:c3:cb:0c:06:41:39:f3:e0:3c:31:57:3d:
         13:8c:da:54:65:a0:92:ea:37:2a:0a:e0:f3:ca:11:6c:11:2e:
         7c:32:7c:7e:71:3d:1d:10:23:00:33:02:23:6d:ba:65:9a:d0:
         3e:81:92:73:3d:10:98:30:2f:09:95:3a:c9:e5:37:3b:fd:30:
         56:f8:8b:a9:58:b1:33:45:ac:63:e2:e7:52:00:2d:d3:00:03:
         6b:e8:9e:1d:a1:ef:e9:73:73:fd:19:80:9b:ae:e4:7f:68:d7:
         84:b9:a6:73:e5:19:c5:40:6d:ee:24:8e:e4:5a:3d:93:b0:31:
         cf:59:bd:a1:5a:f4:2a:f1:6b:d2:16:91:65:ca:3d:81:14:84:
         45:f7:aa:54:9c:4d:e6:3b:4f:08:c4:9c:59:37:6e:e2:cd:7c:
         1b:5d:a8:8c:a6:f8:60:49:d4:53:ab:a5:71:74:5f:66:87:ae:
         bf:be:72:03:8a:81:95:79:fd:c3:3e:c8:d0:9d:a4:d3:bf:9e:
         ad:04:46:c7:04:ec:41:f3:6d:7b:35:3a:14:d2:5b:37:21:32:
         cd:6c:06:3d:09:ba:f6:91:a7:33:ed:d0:fa:87:af:dc:14:03:
         b6:70:5f:70:e9:5e:bf:dd:bf:ba:d8:a5:2a:14:ce:4c:80:37:
         af:f2:b8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:04:13 2026 by rpki-client