Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File:                     WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier:          8ZKBh0wt/mmomy3/Ggg3UeW3nDX/q/wCT7efqGiXPs8=
Subject key identifier:   3F:3A:51:28:4C:58:B7:70:51:37:E8:52:18:19:98:0F:9C:EC:2E:23
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer:       /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial:       019F91DA4131406EF850F385A454D1B423E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number:          04CC
Signing time:             Fri 24 Jul 2026 02:00:27 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:27 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:27 +0000
Files and hashes:         1: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: uQalfh038ne8yi404Q7TrMdPjcEqA0fovgokwDOYOY8=)
                          2: ziF5LUxXxsiZsU2Zn5F9Vs8QBIU.roa (hash: JWHNPV4Q0ijWQ7FA9BlDGI8xfPLJfKs3pJXg1QGEDkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:41:31:40:6e:f8:50:f3:85:a4:54:d1:b4:23:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
        Validity
            Not Before: Jul 24 02:00:27 2026 GMT
            Not After : Jul 25 02:00:27 2026 GMT
        Subject: CN=3f3a51284c58b7705137e8521819980f9cec2e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2e:7f:4f:f8:6c:59:38:ac:99:1a:c6:b2:4e:
                    57:8f:6a:b6:87:a9:a8:52:11:15:d4:54:8d:8f:89:
                    8b:00:5d:11:23:89:71:48:0b:07:eb:0a:5e:44:96:
                    82:2a:3a:97:4c:65:f3:00:ee:e6:80:6d:f5:55:7a:
                    d8:74:92:ef:76:f3:4d:eb:21:13:f4:f2:4c:0e:b6:
                    8d:ea:75:3a:6b:d4:22:1d:cf:40:a3:fc:6d:c1:83:
                    c8:47:49:c7:79:f0:f2:cf:c9:7b:78:22:48:8a:78:
                    bf:3f:af:9d:64:9c:ff:6f:89:c5:f7:8b:ba:62:16:
                    0f:66:8b:68:8b:33:9a:c6:78:e1:64:36:68:f3:7d:
                    f8:03:58:8e:e7:fd:e6:11:c6:ae:6d:08:4f:9a:25:
                    20:2c:50:e8:37:e0:60:5e:b8:d0:cc:74:63:26:ff:
                    4b:d0:74:71:9e:0f:72:91:b4:6d:29:46:36:0d:91:
                    fe:0b:67:d4:a7:e0:0a:e0:70:7b:e9:fa:09:16:ca:
                    38:a9:22:ab:4d:5b:d7:e3:d7:11:91:3d:6c:ed:c9:
                    09:f1:94:07:e7:84:54:94:39:34:60:94:ac:f9:1f:
                    88:9c:ee:77:89:94:36:88:38:f1:3e:ab:3b:f2:e4:
                    b9:7c:39:0c:19:46:7f:e0:70:43:25:ee:41:9f:9f:
                    df:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3A:51:28:4C:58:B7:70:51:37:E8:52:18:19:98:0F:9C:EC:2E:23
            X509v3 Authority Key Identifier:
                keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5a:21:8b:d1:27:e0:99:46:69:7a:9e:a8:fe:99:06:49:00:
         83:0b:6c:61:34:50:ba:81:7e:55:a6:80:e5:00:bf:f7:7a:36:
         c9:79:1a:eb:5d:7f:28:ac:ad:62:83:ab:bb:1d:41:47:5d:07:
         1f:a0:13:91:0e:58:e9:5d:19:07:2f:4b:d8:f6:15:0f:03:96:
         3a:f6:d5:84:f3:29:7f:a2:2f:f1:9b:25:77:da:0b:55:f8:aa:
         e1:c8:b5:9a:01:5f:49:2b:72:c7:ff:6c:38:4d:26:42:a0:06:
         47:05:65:85:db:00:df:70:27:aa:4b:ef:f9:ed:ba:4d:f3:01:
         5c:5d:15:41:50:86:c2:df:80:4a:27:b7:60:4b:05:7c:f1:1d:
         a8:e3:c4:e2:02:35:ff:e8:63:72:8b:ad:2b:9d:68:39:1c:7c:
         49:57:e5:72:b6:b0:fb:16:6e:f4:9e:97:f7:cd:77:cc:cb:db:
         b7:cf:00:93:e5:49:b5:7a:ae:3d:9e:f0:84:dd:cd:bb:64:7f:
         7e:84:a7:aa:ca:27:03:43:84:a4:6b:ca:8a:20:c4:ab:c6:50:
         11:05:ec:2a:fd:d6:50:4b:99:57:91:d6:db:6c:e7:e6:a8:a7:
         1e:67:96:a0:d6:59:51:d4:50:68:e5:f0:ca:62:9f:ca:94:97:
         fd:ca:91:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:30 2026 by rpki-client