Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
File:                     wb_RnDPps9MzU8_rZBee9z0yMys.mft (raw, json)
Hash identifier:          UcmE5K3Q8x7C4ReBsu8Kp9dpM7+0qj/+uuTSX2sL5c4=
Subject key identifier:   82:38:C4:10:D6:9E:C0:C6:EB:23:22:36:87:22:26:E8:95:88:3A:27
Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Certificate issuer:       /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Certificate serial:       019D284D899DC5613BE35811804112A5994A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
Manifest number:          1888
Signing time:             Thu 26 Mar 2026 04:01:03 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:03 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:03 +0000
Files and hashes:         1: 61mqPCCWhNbX67BIUF71mtqBCdI.roa (hash: 0DCVdUX6gKmCd0/r1uVqZ3Z8KDhNYPwW1WvEER9Boj0=)
                          2: wb_RnDPps9MzU8_rZBee9z0yMys.crl (hash: Tr/fTXvq1YSzUBJaIvW7g1kIwbx265V2b/qaakYOwEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:89:9d:c5:61:3b:e3:58:11:80:41:12:a5:99:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
        Validity
            Not Before: Mar 26 04:01:03 2026 GMT
            Not After : Mar 27 04:01:03 2026 GMT
        Subject: CN=8238c410d69ec0c6eb232236872226e895883a27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:b0:22:c2:94:a6:75:26:5a:94:ee:a4:d1:
                    da:f4:c1:9e:8b:23:bf:32:1b:96:3d:c0:5a:c5:02:
                    e1:15:a5:9e:2d:fd:53:4e:70:2b:ac:d2:11:be:1f:
                    a5:43:6e:28:f7:f0:99:28:63:79:3b:aa:c1:2f:3e:
                    ff:77:15:05:4e:2d:aa:3f:20:f1:70:74:29:a2:cb:
                    5f:90:dc:e8:cc:37:3f:31:e3:e5:86:34:50:85:54:
                    3e:95:f1:52:2e:80:34:4f:e5:2f:b8:06:d8:74:b8:
                    47:68:a6:c5:43:d8:f9:d5:01:dc:bd:8c:0f:48:ac:
                    15:6a:01:4b:e2:6d:16:a1:43:3b:00:7e:80:00:82:
                    bd:53:9b:68:92:a2:8e:02:49:01:d9:31:4e:a9:1a:
                    ad:d3:b6:f7:9b:07:84:a2:1a:53:87:a2:5b:22:de:
                    69:7b:94:5e:b7:3e:cd:4c:ce:db:af:40:bb:e5:dc:
                    e9:4a:84:5f:a8:4d:20:78:14:97:5d:d7:b1:c4:b9:
                    05:c5:70:24:9b:6f:41:fc:c7:fb:05:a6:79:17:ea:
                    73:36:19:c0:a0:89:36:72:3c:06:f8:46:f1:95:93:
                    15:c8:44:e6:c6:85:53:a4:8d:24:3a:27:0f:56:3c:
                    ad:97:4a:e6:88:cb:a3:fd:1a:4d:71:56:da:6f:96:
                    92:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:38:C4:10:D6:9E:C0:C6:EB:23:22:36:87:22:26:E8:95:88:3A:27
            X509v3 Authority Key Identifier:
                keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:3a:aa:12:fa:fb:4f:d9:8d:7d:d2:c4:61:41:58:dc:aa:c4:
         b7:a1:53:51:d5:b7:bc:27:e6:6f:83:ab:b1:52:41:9d:1b:e8:
         a7:fa:e4:c8:03:7d:fd:82:d8:2e:20:2a:cc:00:fd:fb:b1:64:
         dd:16:89:f1:2f:fd:26:eb:ba:49:18:37:5f:0d:b2:f7:6f:d6:
         58:2f:68:d4:35:52:7b:87:20:c5:69:ed:e0:78:f1:09:da:64:
         63:ea:a9:d0:75:e1:bd:1a:38:e1:23:ac:f9:a6:49:d0:1b:57:
         f2:2f:8b:ee:09:3f:48:89:41:d4:a8:b5:61:95:6f:b9:d6:e4:
         21:4f:8b:62:c0:21:01:eb:a8:22:a4:d8:20:35:70:2b:5b:0a:
         23:67:f8:fc:c3:13:36:f9:e2:27:d6:cf:1a:b4:d1:61:cb:e7:
         89:db:e7:22:5f:3b:fd:09:ab:1e:29:65:fe:c1:07:cf:85:b7:
         c9:40:46:84:72:49:0e:8e:57:a6:1b:07:4b:17:1a:b3:9a:74:
         84:4d:7d:cc:0b:26:f8:e8:60:71:d5:06:f0:de:b8:53:a6:f4:
         c3:fb:0b:41:3b:75:e5:67:1b:67:c9:69:df:da:8b:e6:ff:9b:
         8b:35:00:f2:56:7b:3b:4e:6c:c1:b3:c6:d9:0f:48:a3:70:08:
         71:1b:5c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:13 2026 by rpki-client