Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
File:                     WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json)
Hash identifier:          0/lZOk4GYNl95P6V6QEwQaYMb8GOKguXcm2n+NDr+fg=
Subject key identifier:   55:EA:1F:CA:E9:92:CE:C8:03:C0:A8:46:22:B7:59:3C:08:C2:14:48
Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80
Certificate issuer:       /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
Certificate serial:       019D27044FD8CBB0E42BA9E1FBF36022AB6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
Manifest number:          07EB
Signing time:             Wed 25 Mar 2026 22:01:27 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:27 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:27 +0000
Files and hashes:         1: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: H6Ei2kgFKsF7IOPYNAlUP12gyz0XSIsfiZJHn4T1Ek8=)
                          2: pCg_IO1cPrzNc2xa1m7otiwxh4Y.roa (hash: xhDhbtSEarX85N5AGFHu5oduKKvgeHiQNe7PQ5nfYFQ=)
                          3: zuaIfcfFIX5EeM-omKdGGgGs_mY.roa (hash: CvfuaqVfIoNAv4R8GIVYc0kHxO/XnZ6ljRU5mOaCsoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:4f:d8:cb:b0:e4:2b:a9:e1:fb:f3:60:22:ab:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80
        Validity
            Not Before: Mar 25 22:01:27 2026 GMT
            Not After : Mar 26 22:01:27 2026 GMT
        Subject: CN=55ea1fcae992cec803c0a84622b7593c08c21448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:13:c7:9d:59:76:84:d7:82:3f:59:ea:70:
                    ea:66:ca:e3:29:39:3b:03:8b:7c:8e:41:7b:66:aa:
                    35:91:88:a4:ab:66:4b:50:f8:49:c6:3d:9a:8e:6e:
                    c0:ad:01:79:85:9a:1f:e8:64:54:91:21:d9:bf:54:
                    7d:25:cb:88:fd:4d:19:72:c1:4f:bc:74:a5:c7:72:
                    b8:e0:e3:0b:08:b3:45:e8:d8:4a:fa:fb:f0:23:e7:
                    cd:8a:62:f3:36:c6:b5:cf:ca:e4:2b:97:62:f0:cb:
                    a5:29:4f:46:6a:55:be:37:b8:24:c6:0f:f5:ca:1d:
                    a8:8d:1f:2f:3d:41:f4:fe:7d:5c:f8:fb:a5:63:f0:
                    aa:b8:65:e8:13:c0:b7:23:e4:d3:ed:bc:96:d8:08:
                    fa:6d:3a:13:d5:94:9e:1c:6b:0e:46:c8:1f:e8:70:
                    46:fc:52:02:f3:0e:92:5c:53:08:3e:39:b6:e0:b3:
                    06:31:83:7f:ed:32:16:fb:9c:31:0d:5c:cc:a0:8c:
                    41:be:18:5b:a8:b4:4a:a4:81:09:aa:eb:40:f2:ac:
                    73:63:d1:48:0a:f0:69:22:db:53:5f:43:79:25:1c:
                    d2:16:42:a0:6c:fd:55:0f:f3:49:3b:68:c0:88:f8:
                    9b:4e:5f:55:c0:bb:38:d5:d5:2b:bc:54:be:6e:4a:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EA:1F:CA:E9:92:CE:C8:03:C0:A8:46:22:B7:59:3C:08:C2:14:48
            X509v3 Authority Key Identifier:
                keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1e:1c:67:3f:28:8b:02:63:da:af:6d:e4:63:eb:04:6b:27:
         bd:22:de:39:03:5e:ae:e3:f9:37:5b:f5:15:6d:2e:04:17:01:
         54:1f:72:47:1f:e4:d8:6c:7c:c4:57:5c:87:82:97:86:55:c0:
         f3:8b:0f:38:21:6b:29:79:b0:58:04:db:7e:be:58:52:aa:a4:
         fa:cb:26:99:9b:e6:78:8d:b1:cd:1e:eb:ef:6f:fa:5f:71:71:
         76:05:47:03:fd:bd:c2:fc:5e:8c:65:89:ee:09:61:d7:78:2f:
         1d:64:2e:cf:a3:ac:64:b4:8b:67:ed:e0:2c:24:e4:20:17:9d:
         db:e5:71:c1:3f:d3:90:17:1f:44:2d:e2:71:ca:3f:36:e4:9f:
         e5:f0:56:a3:47:3c:d1:fb:a2:38:74:eb:f3:be:e4:47:14:f3:
         1b:c8:a2:4b:b5:47:a7:7f:ec:b9:c5:c9:3c:e7:e0:89:e8:3d:
         2e:48:e9:e4:2c:b8:a5:db:1b:69:c6:c9:7e:2a:9e:bf:61:be:
         ba:0e:c4:98:81:d9:bd:10:f0:ff:39:be:1d:ac:10:da:0b:c8:
         ce:a8:41:e8:29:7f:ed:fa:e2:f2:57:4d:8f:85:35:14:33:99:
         55:f8:dd:15:29:57:a1:a5:48:e2:c7:a1:60:51:23:c3:df:b8:
         3c:3e:6a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:01:41 2026 by rpki-client