Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
File:                     WBU_sgucj4zPbDmPTWGyFwfhu-I.mft (raw, json)
Hash identifier:          SjkWKPi3+Ci1XY0sQy3RMMeGFVEddbmkboFQvL3ML10=
Subject key identifier:   82:B8:CD:C8:70:D9:02:75:42:3C:E5:98:0E:32:35:28:A6:21:DD:0D
Authority key identifier: 58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2
Certificate issuer:       /CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
Certificate serial:       019D27726EE9CD5A541F4438A3F383EC021E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
Manifest number:          0805
Signing time:             Thu 26 Mar 2026 00:01:44 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:44 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:44 +0000
Files and hashes:         1: WBU_sgucj4zPbDmPTWGyFwfhu-I.crl (hash: dGPvPCt9fnoPS9+eT+LLM5etC34xGd9rH3r8MV+aumA=)
                          2: biFYfGEt_Sg8rijjxJ6DqtLWVZk.roa (hash: ddjvzrJ1e/qRb2wbsjCppOUHOPYeJ/wiL1J9mlqJh5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:6e:e9:cd:5a:54:1f:44:38:a3:f3:83:ec:02:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
        Validity
            Not Before: Mar 26 00:01:44 2026 GMT
            Not After : Mar 27 00:01:44 2026 GMT
        Subject: CN=82b8cdc870d90275423ce5980e323528a621dd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:05:aa:1c:d0:ae:b5:95:d3:37:6b:cb:7d:
                    68:08:91:5a:ff:9c:6c:fb:54:29:38:e3:21:a0:e9:
                    cf:e9:6b:dd:0d:94:44:68:7f:0d:c4:ba:cd:5e:9a:
                    dd:be:fa:5a:24:ca:7c:e0:82:2d:3f:ea:da:e7:4a:
                    c6:35:a0:c3:55:30:96:1a:d1:42:fa:5d:15:2a:5b:
                    1f:0a:d1:28:df:a4:52:4b:2f:98:b6:7e:10:58:ac:
                    2f:9d:ad:ec:e3:6c:c7:05:89:79:0b:ea:96:6c:2e:
                    c1:5f:d8:25:a9:e3:cb:1d:64:ff:3a:4a:b5:6f:b1:
                    00:df:91:65:8d:1c:84:43:cb:b4:6f:25:8b:d1:48:
                    fe:be:04:92:34:f2:40:90:fc:cd:65:a4:3f:a8:f1:
                    a1:3e:b2:9e:c1:b5:ef:28:30:6e:bc:4a:f7:72:dd:
                    c3:32:f0:9a:1d:1c:04:5b:62:c7:9d:f2:77:af:a3:
                    a2:c6:51:70:f7:bf:26:26:fa:6c:ec:17:9f:c3:d0:
                    4f:96:5c:2d:e3:7e:11:34:c9:bc:47:e1:4a:a5:45:
                    23:b8:1d:de:9a:87:ce:86:4c:ec:56:b2:fd:f3:3a:
                    ea:be:d9:fc:17:c6:13:e9:33:a0:f0:78:e0:bb:c2:
                    30:c9:20:46:55:37:61:21:18:80:78:97:ab:71:4e:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B8:CD:C8:70:D9:02:75:42:3C:E5:98:0E:32:35:28:A6:21:DD:0D
            X509v3 Authority Key Identifier:
                keyid:58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d2:52:7d:1a:9a:e6:14:61:c6:d6:ab:1a:0c:b5:f9:cf:ff:
         97:bf:f5:87:9d:46:9b:b1:3e:93:42:d2:5a:65:2b:ad:33:1c:
         68:be:ff:fd:25:64:cc:52:65:25:56:24:97:95:c5:f2:65:bf:
         6e:06:01:5d:fa:76:bb:50:5a:9c:02:70:2b:b8:da:3b:03:3a:
         c7:d0:8a:a2:19:28:03:08:79:de:71:67:cc:03:3f:fc:39:c1:
         d6:fd:79:3d:4b:a0:1a:99:bf:23:74:86:1e:ca:f2:d2:7c:a2:
         15:9f:8a:12:57:26:74:7c:25:d2:c6:ec:5d:1c:72:0c:c9:a3:
         7e:fa:76:02:bf:fe:64:a6:9e:fa:96:c4:16:3f:7b:3c:07:6e:
         23:34:6b:a0:14:44:9a:aa:b3:03:56:81:a4:9e:ff:e1:3c:cd:
         6e:2f:19:c3:e2:4e:7d:3e:c3:51:8f:b3:6e:24:ea:7d:c9:9e:
         cc:19:5b:5e:0f:0c:8c:5d:35:df:bf:f7:77:75:cf:bc:2c:5c:
         ca:6b:cc:a8:f6:89:49:94:08:8b:14:05:3a:64:56:fd:e0:0d:
         ff:56:e4:91:27:44:ab:21:83:07:33:dd:d0:19:71:5e:c9:00:
         ed:d9:65:1e:bd:5d:b2:a0:96:63:a0:bb:19:56:74:b8:8f:dc:
         8d:ff:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:49 2026 by rpki-client