Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
File:                     WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json)
Hash identifier:          DhBuXoYCGLBy+In52qfacfPpFDQrFr/DS3q/fxuifZc=
Subject key identifier:   7A:E2:2B:71:D7:B4:3B:8C:BC:A6:48:81:AF:C8:1D:1C:2F:41:E8:12
Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23
Certificate issuer:       /CN=58a681c71beb464e01d5b68e19ca566da9930e23
Certificate serial:       019E1C7DA5299DD26D04EAAE3D6D864B37DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
Manifest number:          020C
Signing time:             Tue 12 May 2026 14:00:56 +0000
Manifest this update:     Tue 12 May 2026 14:00:56 +0000
Manifest next update:     Wed 13 May 2026 14:00:56 +0000
Files and hashes:         1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: EuUFhAd+o/exKMvwmSaSR15+0AcGPym7MPeayp1iyzA=)
                          2: aVR1DGlOpMImv1P3m-JsR94bIGc.roa (hash: tbwolDJwQ7h6KJzx4qAPP8SgaZe4LSSKXZP0YAxibg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:a5:29:9d:d2:6d:04:ea:ae:3d:6d:86:4b:37:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23
        Validity
            Not Before: May 12 14:00:56 2026 GMT
            Not After : May 13 14:00:56 2026 GMT
        Subject: CN=7ae22b71d7b43b8cbca64881afc81d1c2f41e812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5f:1d:20:d4:0c:40:06:37:81:c4:87:55:2e:
                    fe:61:08:dd:73:af:5c:bc:36:98:99:db:86:36:9b:
                    62:46:01:9a:45:7d:4e:ff:42:98:b2:24:f5:86:87:
                    04:b0:b0:80:45:b4:56:5d:91:f1:a1:53:0d:ed:c4:
                    ec:23:04:7c:4d:8c:29:4f:4d:f6:64:fe:87:80:12:
                    34:3d:a9:c8:da:27:e9:0a:b2:ab:cf:38:1b:14:b8:
                    07:cb:33:73:6b:32:ec:f4:18:97:2a:fc:72:69:5b:
                    f2:ad:e6:06:b7:db:84:4c:c0:96:c5:29:74:51:ee:
                    5e:50:58:ec:fc:72:43:92:4a:4b:70:41:72:e8:a1:
                    c3:b2:33:9f:70:4d:54:f0:02:21:ba:63:19:73:f2:
                    52:13:a8:f7:1c:e9:09:ed:dc:ba:1e:f2:ce:85:7f:
                    99:fc:50:ec:ef:29:32:8b:30:ba:f3:65:4e:a7:03:
                    d9:53:b1:bf:30:50:91:8d:af:d8:ac:c2:38:fe:92:
                    9d:a6:d5:43:0e:9d:9e:15:2e:d3:27:0a:60:1a:ff:
                    f8:db:ee:f2:c5:18:eb:d0:30:b2:e4:07:3e:cf:a8:
                    2d:dc:27:7d:8f:64:67:29:2c:80:13:00:07:b8:d4:
                    71:40:d8:d4:d3:e0:97:90:01:95:aa:94:d3:bd:be:
                    ee:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:2B:71:D7:B4:3B:8C:BC:A6:48:81:AF:C8:1D:1C:2F:41:E8:12
            X509v3 Authority Key Identifier:
                keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f3:c8:1a:25:1c:95:f4:d1:b6:01:47:e1:d8:a4:c7:c4:33:
         f8:ab:9d:59:01:57:de:77:fb:8c:15:79:5d:3b:a7:4f:72:62:
         eb:dd:b9:3b:9a:76:55:f9:10:b4:5d:61:25:53:6e:3b:4a:7a:
         d0:b2:1a:5f:bb:6d:1b:66:66:3a:63:7f:92:56:4e:6e:e5:00:
         e5:ee:04:b9:e0:d7:5d:16:31:e6:e4:8d:ba:1b:36:5b:58:dd:
         e5:a6:71:8e:8b:e1:14:fa:b1:11:39:68:4a:06:81:9b:4b:6a:
         27:61:5e:59:0a:67:1a:15:5f:de:dc:3c:68:65:d5:73:f7:47:
         31:27:55:25:d7:4e:37:81:af:c6:43:37:2d:7c:cc:59:5e:51:
         a5:04:4a:1c:f6:90:52:6f:a9:95:32:ce:a9:08:03:bb:fa:6d:
         b3:14:ea:89:ae:39:24:47:88:4b:4e:d9:6b:18:63:fb:25:a7:
         89:bc:a6:28:15:b4:f4:0b:93:4a:55:d1:9f:b1:63:53:e5:a2:
         22:c5:fb:ed:9f:a1:67:75:9b:9d:54:ae:52:81:77:7a:fe:86:
         86:8c:36:99:e1:d8:76:d1:a0:57:51:ff:f5:8d:55:d0:41:da:
         68:20:be:b1:74:12:a5:6c:0e:ac:a3:07:c2:b8:da:82:82:49:
         24:43:22:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:18:03 2026 by rpki-client