Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
File:                     WpeXnbcm_j5pPbktT6GP10G-dpk.mft (raw, json)
Hash identifier:          0MigeP1AalJWV0LAhmEcAjawbdmURpfvjvWnSPP4xoc=
Subject key identifier:   5A:F2:1B:B7:31:18:59:CB:8B:3C:2B:7D:D4:45:2F:D6:CF:5F:EB:CA
Authority key identifier: 5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
Certificate issuer:       /CN=5a97979db726fe3e693db92d4fa18fd741be7699
Certificate serial:       019D270407AEBECDA3EC7D337D87B1BB7A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
Manifest number:          0C77
Signing time:             Wed 25 Mar 2026 22:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:08 +0000
Files and hashes:         1: 71rpb9A6oSyWjH1Ez1_SDP2up9Q.roa (hash: XnY4NGsT7Bo6w/NGCnzHnoGUjpW6DPDgDsPDpxpxnJY=)
                          2: WpeXnbcm_j5pPbktT6GP10G-dpk.crl (hash: l2ELTYMnc1aZoVJ5L9lNvmtMdpmmCPm4UpK1xYb5RyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:07:ae:be:cd:a3:ec:7d:33:7d:87:b1:bb:7a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a97979db726fe3e693db92d4fa18fd741be7699
        Validity
            Not Before: Mar 25 22:01:08 2026 GMT
            Not After : Mar 26 22:01:08 2026 GMT
        Subject: CN=5af21bb7311859cb8b3c2b7dd4452fd6cf5febca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7a:57:65:7f:26:18:43:89:e1:81:5c:bc:b4:
                    ae:00:e6:b3:02:16:ba:18:66:b1:68:7d:21:57:b8:
                    c0:2f:48:fb:09:5b:96:28:e8:5a:6f:18:9a:34:64:
                    7a:57:9b:f9:17:12:ae:5c:2e:e2:4b:3a:39:64:40:
                    a1:0f:11:1f:c5:ab:81:88:53:33:9a:43:1a:5f:fc:
                    f8:0c:20:4b:c8:71:8c:b2:47:5f:bf:78:91:56:9f:
                    ed:91:48:36:68:3e:cd:41:9c:69:0b:53:05:a7:ca:
                    f8:9e:62:a5:65:38:c9:da:6f:8b:17:53:d5:ab:40:
                    e6:ad:50:7b:57:b8:a5:a4:91:65:1f:a2:25:13:2b:
                    77:a7:30:0b:56:2a:34:9f:48:e6:e1:74:ce:63:12:
                    08:cf:16:85:4e:1a:85:39:68:9f:c7:05:34:99:e8:
                    0d:00:99:29:54:43:cb:9b:f6:30:35:dd:e9:4e:3e:
                    46:ed:75:78:67:a4:1a:83:9b:5c:36:78:d1:02:6e:
                    45:63:a2:25:f2:59:1a:44:7a:36:8c:1a:3c:d0:ba:
                    71:5b:2b:c0:96:82:f6:f2:0f:64:df:b4:01:8b:ed:
                    56:c6:78:45:a0:15:aa:b6:a2:d0:28:c2:a7:ea:cd:
                    5d:76:1b:eb:74:d7:c6:bb:62:20:0e:7a:83:d6:90:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:1B:B7:31:18:59:CB:8B:3C:2B:7D:D4:45:2F:D6:CF:5F:EB:CA
            X509v3 Authority Key Identifier:
                keyid:5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:99:9e:3d:9e:a8:5a:6b:9a:78:07:f4:c4:fa:03:0a:d3:96:
         64:ff:48:1c:ee:e0:25:10:c7:a2:90:66:e3:53:b1:c7:ec:c5:
         fb:93:d9:cd:5c:29:0a:34:2e:f0:94:a1:17:f4:55:c6:9e:d2:
         cd:4c:91:a8:ce:b7:ad:4d:c0:50:3c:e3:cf:81:53:2e:3f:6d:
         a6:d4:e0:5e:8d:60:78:98:67:a4:27:70:ad:66:7e:32:79:2a:
         2f:89:a6:c7:56:1d:24:1d:64:8d:ab:71:86:80:0c:cb:3e:ae:
         ed:38:2a:85:69:e9:91:93:eb:de:7b:12:3c:ff:75:11:ec:8c:
         a6:71:7b:12:b9:19:e9:c3:72:79:0d:b2:ac:7c:e9:fb:00:6e:
         fd:a9:60:48:de:78:cc:41:8d:3c:f1:cd:a9:53:88:9a:be:0e:
         83:c2:aa:b7:ac:3f:5a:70:44:2e:10:d7:2c:a0:ed:e0:ff:92:
         f3:19:99:8d:80:bd:ff:12:12:6a:0b:1c:f7:dc:54:37:95:be:
         4a:48:87:1f:d4:76:f0:8f:62:59:12:bb:1c:45:69:70:0f:dc:
         6e:a6:49:fe:1f:83:25:6f:df:2b:3d:fe:92:30:08:82:c7:67:
         d7:56:9c:6b:6d:5f:75:e2:42:df:76:cb:73:a1:8c:6b:ba:0f:
         0d:c1:74:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:46 2026 by rpki-client