Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
File:                     WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft (raw, json)
Hash identifier:          FNjL1QcwMrE6vel4qyGgvcfGvSSTa4O4iW8Mk457vAI=
Subject key identifier:   5C:75:85:02:17:DD:CF:85:3D:B3:42:89:8B:22:94:DB:EA:04:3D:67
Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22
Certificate issuer:       /CN=58f7d27ebc269bf14b8d6895791affd429f70222
Certificate serial:       019D2703CA2D52A3B8070BFB34CEEFD980CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 22:00:52 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:52 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:52 +0000
Files and hashes:         1: 5cl4Z6asyPqRl4z3J4ySouDyEeE.roa (hash: PzM5l6ACiLTk3VlfamE9R6T8MML28IE4R3kgNFrFOdE=)
                          2: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl (hash: ciyfPyaycllBguiMxe9uB5rvJ0rqZEjTtm/eLsltQfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:ca:2d:52:a3:b8:07:0b:fb:34:ce:ef:d9:80:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222
        Validity
            Not Before: Mar 25 22:00:52 2026 GMT
            Not After : Mar 26 22:00:52 2026 GMT
        Subject: CN=5c75850217ddcf853db342898b2294dbea043d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0c:cb:2d:f9:cd:a3:06:e6:fc:54:20:61:0b:
                    93:52:d7:6f:0d:2e:ee:01:45:11:64:2a:05:51:b0:
                    8e:e5:b8:68:08:be:cf:ab:ef:2f:3f:3c:68:99:e1:
                    d0:34:7c:3d:b5:87:2a:27:ce:30:74:24:d2:09:ee:
                    c7:0f:3b:99:c5:d3:3d:2d:aa:f4:9b:7e:8b:f7:30:
                    e8:16:03:95:b1:de:08:43:50:26:2c:78:10:0c:29:
                    51:2a:09:25:25:1b:a9:f3:35:79:48:f2:97:f4:63:
                    47:64:a4:94:e1:42:72:c4:d7:6d:d1:8a:a0:ae:45:
                    81:6c:ab:ed:46:77:66:d7:28:cf:54:cc:9f:74:9c:
                    a5:7a:6b:eb:1c:ba:24:af:ee:4f:0d:64:43:ff:94:
                    9a:23:5d:38:7d:fc:97:b4:b4:18:20:0f:d6:3f:a6:
                    db:a1:26:38:0d:f5:cb:a7:34:48:09:cc:fa:f3:9f:
                    8e:7a:76:73:18:84:05:f2:c7:46:96:e6:fa:d0:1d:
                    e2:2d:45:30:48:fd:e8:7a:fb:1b:97:34:67:10:7b:
                    d0:52:8d:84:5d:10:ee:16:26:77:5e:b7:04:44:6c:
                    04:6f:9d:6e:c7:26:82:ce:9d:0f:79:8d:20:df:02:
                    85:b1:8b:a8:96:b4:10:fd:f1:e4:b8:74:61:ad:db:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:75:85:02:17:DD:CF:85:3D:B3:42:89:8B:22:94:DB:EA:04:3D:67
            X509v3 Authority Key Identifier:
                keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4a:c0:86:de:33:37:43:97:42:bb:2b:81:f6:01:e0:be:71:
         6d:4e:2d:3e:26:07:eb:1c:43:f6:3d:4b:c0:88:90:03:d0:17:
         7a:db:aa:5e:87:f8:e5:65:4f:9e:48:a3:11:83:8f:9b:08:52:
         2d:58:3b:b4:cb:e4:c3:8b:e9:df:74:39:26:19:2c:c5:66:84:
         c4:f1:df:f4:60:3e:f4:ad:a2:36:c8:ed:b5:17:12:5b:88:78:
         46:07:e0:f5:34:3f:81:de:61:ab:da:4d:dd:60:27:ff:c6:93:
         2b:d2:b3:32:3c:2e:49:35:8c:85:ae:db:99:b6:db:bb:9a:ff:
         b9:7d:ac:ef:d5:1c:b4:a6:e7:ba:c3:a6:35:6f:45:eb:79:61:
         8b:15:6c:6f:1e:f1:d8:b8:ab:20:8e:fd:e5:64:0b:ab:44:92:
         78:f5:c1:7f:99:a2:a1:4e:77:34:a8:66:7d:37:df:0d:70:68:
         d9:72:16:14:d3:af:32:cc:71:e9:cc:53:9a:3b:b6:73:80:04:
         65:fd:ed:43:1b:e9:df:68:f3:b8:2c:f9:ca:4d:89:d7:b2:75:
         f2:c8:90:b0:83:5f:c3:88:f8:20:e8:bf:dd:14:12:f4:a6:ef:
         84:6a:c4:2d:3e:34:07:ff:a0:e7:f5:6b:18:44:8f:f7:95:b0:
         2a:a7:8f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:52 2026 by rpki-client