Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
File:                     WL58UZyUIEI80vkGQL1RyYtKFTY.mft (raw, json)
Hash identifier:          yrYgmSlNgUd4gcLgl3SHm6UEc0GGFB4+vbcf1kwamD0=
Subject key identifier:   DF:F3:86:BC:68:EA:46:6E:C2:B0:FA:A3:E8:82:81:A7:15:61:CC:FA
Authority key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
Certificate issuer:       /CN=58be7c519c9420423cd2f90640bd51c98b4a1536
Certificate serial:       019D28BB4DF301A6CD44F29320F331AB9060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
Manifest number:          1028
Signing time:             Thu 26 Mar 2026 06:00:56 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:56 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:56 +0000
Files and hashes:         1: WL58UZyUIEI80vkGQL1RyYtKFTY.crl (hash: 3kFrjUOqFY3TimtJ8SXlgS+2PsddR2AICBB0O13l8SQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:4d:f3:01:a6:cd:44:f2:93:20:f3:31:ab:90:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58be7c519c9420423cd2f90640bd51c98b4a1536
        Validity
            Not Before: Mar 26 06:00:56 2026 GMT
            Not After : Mar 27 06:00:56 2026 GMT
        Subject: CN=dff386bc68ea466ec2b0faa3e88281a71561ccfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:b0:50:b1:84:68:cd:dd:7b:cb:8e:9a:c1:
                    de:8f:c1:87:f0:d4:d9:a0:84:2e:6a:a1:56:f2:48:
                    a0:d9:3f:1f:f0:75:5c:19:ae:3c:ee:23:d9:51:0d:
                    f0:8f:ac:10:52:2e:f3:e2:34:f6:69:c3:b1:7f:2f:
                    77:14:99:fa:38:16:ef:58:f3:49:bb:4d:97:9a:66:
                    3c:3b:67:ab:72:dd:44:7c:9c:ce:b0:54:44:49:d5:
                    5a:38:ed:64:32:6e:17:16:a2:05:1b:dc:88:cc:e1:
                    ed:c5:6f:cc:3e:61:8a:b3:06:ef:d7:f1:e7:35:53:
                    cb:1c:1b:e7:6a:ad:b1:91:e4:32:c8:f9:ff:d1:90:
                    d2:4e:5d:1c:af:e6:44:bb:4f:e6:c0:23:1b:4d:a6:
                    9f:b5:4e:df:86:79:2e:8a:7d:e1:29:38:11:bb:17:
                    de:b7:af:16:18:47:ef:43:79:b1:e5:ee:0c:aa:ac:
                    7e:af:ec:67:28:9f:b2:53:cb:90:00:20:67:f7:5b:
                    2c:ca:c6:ec:96:3e:90:5c:4c:5b:56:a0:36:28:eb:
                    ad:5a:80:d2:eb:c2:a0:f4:4a:db:2a:4c:30:ce:dc:
                    7b:77:9c:3a:12:2a:b4:e8:a6:4f:60:54:00:a5:5c:
                    cc:e0:c9:42:9e:fe:09:c2:4a:94:f4:f9:35:5c:cd:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F3:86:BC:68:EA:46:6E:C2:B0:FA:A3:E8:82:81:A7:15:61:CC:FA
            X509v3 Authority Key Identifier:
                keyid:58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:50:de:07:57:77:55:eb:51:92:38:ad:8a:45:8e:3b:e1:29:
         59:3c:f5:18:e4:87:16:33:33:6d:0e:d8:70:4f:2d:e9:e5:23:
         d5:26:ac:55:35:c8:ee:45:d5:e3:88:7e:15:09:6d:94:e2:c8:
         b3:24:40:71:ba:1f:60:d1:be:c8:f8:e1:1d:e4:e1:9d:3d:d8:
         52:cb:9f:f6:8e:3a:b9:01:76:3f:48:f1:d2:a0:b6:a6:4a:fd:
         2d:4d:7a:c3:36:5f:f3:8b:c3:35:e7:f8:33:44:8a:5a:10:22:
         c0:a1:59:e0:b2:0b:6a:23:2a:a2:47:4a:c7:be:e6:55:13:35:
         14:5d:77:34:54:e3:39:5d:56:f0:82:a5:8c:b4:bc:e6:14:4c:
         84:c8:c2:a6:3b:bd:e0:0b:a2:15:69:bb:b2:86:2c:39:0e:97:
         07:78:77:83:fa:bb:ef:24:ca:8c:aa:93:4d:45:86:2d:a6:e8:
         ad:f6:c5:7b:63:33:59:8e:dc:68:4e:5c:82:cc:20:36:43:84:
         a4:af:cd:b4:89:3b:3c:4c:38:f5:b0:a5:7e:67:1f:85:00:c2:
         6a:9b:43:02:4d:1a:f3:c8:90:3e:e6:89:a4:ea:bd:5a:a4:be:
         a3:7f:55:2f:bd:33:2e:2f:bd:16:47:7e:ec:88:1a:b7:a2:5c:
         7e:31:29:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:36 2026 by rpki-client