Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File:                     WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier:          RXwA5rQEPtEzN7LRsEYTZ/AR3HnlGtvAhSkwGPmqg+E=
Subject key identifier:   AC:0A:CF:23:E2:76:6A:16:76:2E:DF:77:0D:4F:58:E2:1B:98:0B:EB
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer:       /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial:       019D265ED5C426C200A275CB4D8FEC7CD73D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 19:00:42 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:42 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:42 +0000
Files and hashes:         1: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: HTFpcZKz/n/M6Wt4VeoqEy2uNwY5OsN1eIYcm+5HNQo=)
                          2: dh3-sHMeGbUF9c787oQeIrR3cvo.roa (hash: cq7zvKxoUoXgAO8e6Ng0dFBUcSjnfzShtC4FRcWx5UI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5e:d5:c4:26:c2:00:a2:75:cb:4d:8f:ec:7c:d7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
        Validity
            Not Before: Mar 25 19:00:42 2026 GMT
            Not After : Mar 26 19:00:42 2026 GMT
        Subject: CN=ac0acf23e2766a16762edf770d4f58e21b980beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:30:35:31:80:a7:30:b9:48:7e:71:ce:2e:7a:
                    b2:49:75:7a:01:d1:65:67:ee:32:15:7b:cc:24:2b:
                    db:0d:c5:be:7a:39:15:12:fb:c6:c5:c0:98:46:b3:
                    36:e3:89:56:04:fe:15:f4:d7:e0:37:a9:95:7c:af:
                    f4:f8:c0:19:3c:be:75:24:aa:34:d2:c0:96:21:45:
                    77:a6:79:3a:19:44:49:ab:ad:2c:c5:4a:64:a3:ac:
                    6b:2d:26:a2:bc:90:8f:6e:df:f7:f2:49:e5:04:21:
                    f0:47:f8:63:42:2d:de:85:e5:ba:83:81:a0:be:7b:
                    d0:70:dc:80:5e:f4:9c:92:65:4e:d2:17:0b:c3:78:
                    b9:08:58:36:5e:90:f3:f2:c2:b4:bd:90:0a:f0:67:
                    c4:fd:d4:dd:8c:80:e0:fa:6f:84:23:40:b0:3d:a5:
                    74:85:ed:53:d3:53:5e:7c:03:33:a7:44:04:c0:3c:
                    ba:97:99:5d:85:90:ad:10:72:37:92:c3:4c:34:ea:
                    b3:91:cd:e0:82:cd:0e:fc:c5:1a:30:ef:b8:31:fb:
                    d6:f3:20:b7:40:cf:4a:41:15:8b:97:2c:f3:5e:37:
                    6e:19:7f:ca:c4:a8:d4:c6:9f:5f:fe:98:51:d7:d2:
                    9b:de:2f:07:86:21:5d:9f:10:df:00:71:e5:74:50:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0A:CF:23:E2:76:6A:16:76:2E:DF:77:0D:4F:58:E2:1B:98:0B:EB
            X509v3 Authority Key Identifier:
                keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3c:dc:d7:d7:92:19:1e:ce:28:cd:1c:a4:82:88:cb:8f:26:
         2f:48:c9:eb:14:dd:52:d4:22:fa:25:f4:bf:93:73:a7:93:db:
         10:0e:12:81:c5:88:f6:a4:ba:18:e7:57:28:de:8a:30:0c:9d:
         4c:19:65:85:98:31:db:88:f1:12:f3:2e:a6:96:73:71:f2:93:
         6f:79:fe:99:15:29:29:97:1c:5b:3b:31:f0:0c:8f:b1:95:8e:
         05:b9:e4:0e:6a:64:40:ba:d7:81:17:49:fa:67:f7:30:3f:65:
         4a:5c:ad:69:90:7e:46:31:a0:44:2f:ee:80:c7:e6:7d:af:92:
         20:0a:fc:7f:7d:93:bc:c2:7a:2b:24:0a:1e:1a:e5:52:8c:03:
         d1:d4:88:e8:ff:54:e5:7c:6a:48:6f:47:4a:97:82:9d:57:a3:
         6b:ef:0e:3b:2a:9d:2c:46:ee:c8:5b:e8:99:cc:fa:5c:c3:6e:
         cc:95:d3:5f:4e:6d:1e:02:19:9a:18:44:cb:e9:64:ff:b1:bd:
         2d:6d:55:d5:3b:a3:b3:94:a5:d6:f1:2c:1c:4e:5e:4c:d5:90:
         f0:e4:4c:e1:4a:02:31:8a:7c:70:6f:c5:5f:60:83:d5:71:4b:
         8e:97:57:c5:ed:52:17:d5:6e:8c:3d:1c:73:b2:e4:a0:d4:11:
         62:9f:6a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:22 2026 by rpki-client