Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
File:                     WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json)
Hash identifier:          tWrnlO18nZ3yzBb/LSzr+wcpQw7cpDjpTkX2BRhdtM0=
Subject key identifier:   B3:CB:21:79:5B:62:01:ED:74:99:0C:33:87:AC:92:F8:A1:C5:FD:02
Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18
Certificate issuer:       /CN=58cedba67a45b737d8ad0f7a784c350d86d67118
Certificate serial:       019E1FB5F0D34262554C9B0BF007133813D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
Manifest number:          050A
Signing time:             Wed 13 May 2026 05:01:17 +0000
Manifest this update:     Wed 13 May 2026 05:01:17 +0000
Manifest next update:     Thu 14 May 2026 05:01:17 +0000
Files and hashes:         1: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: q0ojFJyaFnpCU+5aWVY5refPxF4EsztLXSufghQxGGY=)
                          2: m5v93tUMRlQaxfIjzpbnrJ9Lohk.roa (hash: 1uqxOdkBAdrXDzt6+/f4JBRjuvDt70ncNU0kmF4G9OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:f0:d3:42:62:55:4c:9b:0b:f0:07:13:38:13:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118
        Validity
            Not Before: May 13 05:01:17 2026 GMT
            Not After : May 14 05:01:17 2026 GMT
        Subject: CN=b3cb21795b6201ed74990c3387ac92f8a1c5fd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:69:29:dc:ae:2c:38:1b:d3:8a:69:0e:ff:
                    c3:08:34:d2:73:43:ff:41:ee:80:0b:86:90:00:32:
                    92:1b:5d:72:f5:37:df:69:e5:88:0e:75:bb:d3:4d:
                    ea:ca:d6:ed:19:64:da:54:49:48:cc:97:26:46:f2:
                    b2:e6:81:d9:78:c0:ed:d6:9a:57:a6:93:07:85:97:
                    a0:ad:ee:3c:65:f3:ad:01:cc:5c:d7:a1:87:26:85:
                    71:ab:9b:7e:90:47:d9:05:ec:8a:61:bf:f6:63:94:
                    aa:b2:53:9e:01:f3:00:f1:03:ec:36:1f:7f:0e:12:
                    67:26:e0:ad:45:05:72:3f:2e:bb:13:f1:6b:16:10:
                    36:02:dc:f2:cc:e1:7a:c1:63:67:d4:3b:d4:8f:17:
                    c9:69:87:8c:d9:91:e9:4b:49:24:0c:89:bb:f9:d8:
                    9f:c8:f9:00:f5:9b:0f:01:bc:d0:45:d0:7f:de:1f:
                    b8:7f:f4:e4:aa:49:c5:97:c7:b8:39:94:48:e1:55:
                    04:7a:e4:6a:37:47:2d:33:fa:70:e9:c1:e2:c8:2a:
                    ca:9d:ac:33:52:4b:0a:56:98:e3:5d:46:16:a7:86:
                    b9:1b:38:9e:01:5d:06:c5:4b:16:47:d3:80:b5:41:
                    65:fa:38:7a:9f:97:6b:42:70:dc:a4:52:9d:0f:81:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CB:21:79:5B:62:01:ED:74:99:0C:33:87:AC:92:F8:A1:C5:FD:02
            X509v3 Authority Key Identifier:
                keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:85:bd:04:7b:18:39:5d:52:ae:e8:be:26:b1:13:86:c7:c0:
         0a:1c:eb:20:89:d0:f6:77:5d:06:9c:ea:36:00:5b:00:9f:26:
         4b:20:c4:36:82:d3:a9:30:11:39:5a:9a:70:13:d3:4e:9c:4e:
         d9:69:4b:94:63:c1:8a:e2:b3:e2:5b:23:2a:0f:14:9d:35:75:
         ad:8f:cb:d6:12:00:e2:20:8d:c3:01:f4:9c:c1:cc:c5:cf:2a:
         13:51:03:38:08:b1:97:6b:c3:5b:e7:55:f8:d0:78:50:0f:3d:
         ad:aa:9d:90:2d:58:f5:14:4d:13:96:20:75:cb:44:ad:5c:ee:
         e1:63:e2:90:74:37:a0:f8:ca:8c:b8:b6:3c:2d:de:c8:c1:7e:
         db:23:58:cc:5d:6e:ab:c6:c0:f2:dd:0b:30:c0:bc:89:cc:36:
         f1:56:d4:4e:c4:d7:47:b3:4d:c7:72:30:e8:12:a7:15:87:a8:
         da:1e:8d:84:fc:ae:51:47:1a:d0:b5:47:df:4c:4d:25:13:77:
         72:24:c6:90:03:0c:e4:3f:55:81:c5:65:e7:d2:ad:9f:68:b8:
         58:53:0a:e1:19:0c:79:56:9c:3a:a6:88:db:9d:ab:1d:f0:70:
         6f:7d:df:0f:c3:94:4c:d0:3b:b6:34:dd:d5:a8:3e:8b:dd:bc:
         8b:7c:ef:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:53 2026 by rpki-client