Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft
File:                     wgBqzAX53EUeoNROhyfbRwuSh5Q.mft (raw, json)
Hash identifier:          5g4N7O51K3C82bYKTwYHBa+LWDLYtrvOV6+FihtElK4=
Subject key identifier:   2E:78:F2:D9:20:3A:63:9E:EE:15:FA:05:46:F9:1B:56:9B:AF:B4:ED
Authority key identifier: C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94
Certificate issuer:       /CN=c2006acc05f9dc451ea0d44e8727db470b928794
Certificate serial:       019D29CDC35EF7BA5292BAE5C3222DA583C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft
Manifest number:          0180
Signing time:             Thu 26 Mar 2026 11:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 11:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 11:00:43 +0000
Files and hashes:         1: OnvoRNLHbzsIkTRkRkLChjG1iT0.roa (hash: qrtj2aNzirWTVBYJA9xano/gPNM1ljL51u+ViRJHcdQ=)
                          2: wgBqzAX53EUeoNROhyfbRwuSh5Q.crl (hash: ryE+3A/PV97pxESxpzT7w+RrT0TTdwVvehKvCb8w0w0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 11:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:cd:c3:5e:f7:ba:52:92:ba:e5:c3:22:2d:a5:83:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2006acc05f9dc451ea0d44e8727db470b928794
        Validity
            Not Before: Mar 26 11:00:43 2026 GMT
            Not After : Mar 27 11:00:43 2026 GMT
        Subject: CN=2e78f2d9203a639eee15fa0546f91b569bafb4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5c:28:34:d3:c8:e8:96:66:48:a2:de:ee:30:
                    61:d8:87:92:cc:10:c8:98:15:f0:85:d7:57:09:e1:
                    86:78:3e:35:6f:3c:05:81:05:51:12:1b:dd:0e:f6:
                    b2:3f:86:f5:17:58:af:7a:2a:82:7d:78:68:24:48:
                    2e:ed:a0:64:65:0f:57:a2:3e:28:93:ae:90:a5:76:
                    4c:53:14:c3:01:4c:c0:85:d6:4e:6e:f6:3c:bc:87:
                    9b:7e:91:79:6e:98:dd:a3:5e:23:3a:93:f9:78:7e:
                    f4:41:fb:7b:ff:75:86:51:ec:aa:e2:3d:f9:10:a2:
                    c8:2f:8b:ca:2b:6c:89:a8:1d:ad:fb:b4:71:90:a3:
                    60:46:e3:6a:b4:8c:10:65:2e:02:81:06:b5:79:b1:
                    93:c2:d9:00:e8:28:f5:af:30:59:16:68:fe:fb:75:
                    ef:7f:71:01:ec:58:89:ad:1e:17:a5:bd:c8:63:f1:
                    74:80:86:64:e9:21:8e:f2:65:d3:3b:5a:13:7c:8e:
                    6e:36:db:a1:79:55:df:ca:e7:ff:e7:09:2b:59:4a:
                    f5:a6:0b:ff:9c:e6:2a:13:70:a6:1a:cc:46:3b:30:
                    15:21:f9:97:33:a3:9d:70:8b:94:0e:5a:d0:32:ea:
                    5f:6d:1e:97:68:9b:db:48:dd:3f:2e:6c:31:9a:81:
                    7a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:78:F2:D9:20:3A:63:9E:EE:15:FA:05:46:F9:1B:56:9B:AF:B4:ED
            X509v3 Authority Key Identifier:
                keyid:C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:52:75:c5:4e:b5:68:f6:dc:4c:2a:78:34:7c:fd:3b:e0:4d:
         ed:41:d2:33:31:ca:91:88:af:d2:45:47:63:93:bc:13:9e:6b:
         d6:77:96:eb:6d:d4:14:f5:e1:00:12:98:5e:6d:6b:6c:20:5b:
         6b:76:e1:db:a6:0c:95:16:b9:a9:b8:c7:20:ce:0f:ca:67:47:
         78:1d:21:6b:4e:f9:06:7c:c8:41:43:9d:b7:10:14:80:70:d5:
         bb:4b:6a:d0:6e:2f:2c:a5:d5:31:0a:a4:0d:f0:64:ea:55:79:
         82:1f:11:f9:96:55:e0:0b:fc:ef:d7:9d:c4:d7:c0:c6:7c:c6:
         2d:4f:06:af:fa:c0:10:31:1b:7e:a3:7b:a3:32:3b:32:98:c6:
         f8:86:bc:29:43:b2:b1:18:ad:70:14:a0:9e:c6:7a:ba:c9:69:
         16:51:a2:9f:3f:d6:11:53:7f:d8:37:c1:8d:8b:ab:f7:ed:e9:
         6a:b6:a1:92:82:b5:a1:87:6e:8b:31:db:04:bc:a1:79:4a:36:
         b4:b2:04:29:5a:95:88:f5:95:0a:76:64:20:b9:c5:f2:de:ed:
         83:78:53:cf:3b:2c:be:2a:b9:1d:58:62:4c:b1:dd:dc:ac:91:
         fe:65:71:62:8e:04:a2:a4:f7:91:dd:2b:b8:64:b5:11:63:24:
         d3:06:13:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:40 2026 by rpki-client