Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          oJPZN4O02GqFDLHzkG5fCf2BUStJbdWQ4GRHn1yVCik=
Subject key identifier:   BB:E9:FA:2B:43:B7:C6:A6:FE:1B:A2:00:5E:97:45:A1:6D:B8:23:75
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       019D2B84E1A0F7BAB057344E70664A07F860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          0842
Signing time:             Thu 26 Mar 2026 19:00:21 +0000
Manifest this update:     Thu 26 Mar 2026 19:00:21 +0000
Manifest next update:     Fri 27 Mar 2026 19:00:21 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: jQN4+/J3MNoVOnVYQNTByF1kgaCdLbPIXoqryf1yzHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:84:e1:a0:f7:ba:b0:57:34:4e:70:66:4a:07:f8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: Mar 26 19:00:21 2026 GMT
            Not After : Mar 27 19:00:21 2026 GMT
        Subject: CN=bbe9fa2b43b7c6a6fe1ba2005e9745a16db82375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:bf:fd:7b:a4:89:69:20:21:6f:61:71:fd:
                    8e:b8:00:a5:98:bb:cd:73:00:9f:41:81:60:be:7f:
                    14:0a:84:67:50:87:27:06:37:10:b3:05:c7:10:5a:
                    08:07:61:82:e9:91:fe:ca:5d:bc:19:97:40:22:cd:
                    8f:ed:79:5c:ae:56:4c:ca:c8:3e:a4:39:f5:96:84:
                    d2:b9:8c:22:ca:ca:dc:1d:68:13:22:3c:31:dc:3a:
                    5f:2f:75:7f:9f:e9:bf:51:41:9f:50:8f:b5:5b:9f:
                    58:74:60:cb:0a:3e:5b:56:0d:96:bc:44:b2:60:36:
                    c4:ae:86:dc:57:5d:1a:40:5c:b4:d4:2a:76:09:b1:
                    10:d7:7b:14:e1:ec:12:2d:fa:aa:fd:49:2a:bf:59:
                    a7:4c:05:e2:1d:1b:49:34:9e:f9:2a:3c:a4:2a:07:
                    4b:27:19:91:92:3b:72:58:2a:9e:15:68:0b:02:01:
                    bf:67:42:c9:20:90:90:74:ef:4a:38:2e:65:c3:d7:
                    ce:8e:f4:51:b3:bb:d9:3f:0f:16:3c:ac:09:68:f7:
                    0c:42:c5:9a:d3:ac:d3:57:c3:11:dd:2a:26:72:7e:
                    a1:f7:9e:66:dc:9b:f0:fd:9f:c4:68:d4:52:ca:f5:
                    e3:c7:f4:01:b8:23:66:b6:0a:46:3a:6f:d9:6d:81:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E9:FA:2B:43:B7:C6:A6:FE:1B:A2:00:5E:97:45:A1:6D:B8:23:75
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:93:ed:d8:e0:9f:af:f8:03:38:fa:69:ee:81:50:2b:ad:43:
         3e:d4:68:5d:f7:2a:13:0c:e8:d5:37:1c:b6:1c:eb:ba:47:9a:
         8f:3d:9c:ce:e4:c2:2b:6b:2a:ad:3d:2b:28:0d:fa:5d:06:29:
         ca:bb:c1:05:e4:ca:0d:2d:ef:0f:6f:32:f4:6e:dd:e9:90:21:
         a2:2f:0b:d9:ef:81:bc:23:c6:26:28:cf:1f:80:d2:9b:35:06:
         e0:56:b9:b2:d4:34:cb:5f:0d:4b:7e:47:1f:ff:aa:78:44:d0:
         cf:e0:aa:8d:5b:3a:77:ce:02:d9:ab:15:3e:4c:31:08:7f:33:
         4c:6d:77:e9:b0:84:28:da:38:ac:51:fb:7f:a2:fa:d2:d2:e1:
         c9:ce:6a:94:a4:a6:3e:e8:b2:37:e2:10:a2:cf:89:24:c8:05:
         cd:8d:10:88:4e:e1:3f:ef:f4:4f:58:e3:3d:28:42:a9:8c:c6:
         50:c3:64:45:75:5b:9c:cb:45:d7:28:ad:73:8c:0e:fe:2d:b8:
         05:8b:de:f5:b4:98:4e:32:2c:4c:df:1a:74:83:9d:53:42:92:
         7b:ce:e5:0d:56:18:5c:22:c2:36:77:8d:6d:24:cb:1d:84:20:
         f9:1f:21:41:c4:4b:b5:44:0c:dc:ef:70:3c:d1:da:2f:57:5a:
         a2:93:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:52 2026 by rpki-client