Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File:                     Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier:          5HLpwqOue97AQuNOz9K25mvdmnt5jM9Poj1GSHBaQSw=
Subject key identifier:   50:B3:3A:1D:D6:5D:8A:8A:3C:7F:B0:59:B5:06:F3:28:5A:F1:BC:1F
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer:       /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial:       019E1ED9E51093BDBD35B9635075005D4669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number:          1902
Signing time:             Wed 13 May 2026 01:00:56 +0000
Manifest this update:     Wed 13 May 2026 01:00:56 +0000
Manifest next update:     Thu 14 May 2026 01:00:56 +0000
Files and hashes:         1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
                          2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: kgHWlqFeCVq8js4dIGz3s1LfHAX1AjPd0uaKnzk0W6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:e5:10:93:bd:bd:35:b9:63:50:75:00:5d:46:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
        Validity
            Not Before: May 13 01:00:56 2026 GMT
            Not After : May 14 01:00:56 2026 GMT
        Subject: CN=50b33a1dd65d8a8a3c7fb059b506f3285af1bc1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:74:a8:0e:3d:b7:71:b5:ac:b1:08:cd:8b:fb:
                    81:38:3e:ef:62:9d:5f:00:72:65:38:13:1d:e0:34:
                    a2:9f:17:60:59:9d:94:06:c7:3a:ac:50:a6:7b:2c:
                    32:96:24:5d:5a:3a:94:de:ba:aa:07:43:4d:89:3f:
                    ea:99:69:70:f3:36:41:1e:92:da:2c:04:bd:c4:4d:
                    8d:84:34:dd:3b:42:89:a8:b2:cc:bf:02:94:48:4c:
                    2b:dc:c6:79:59:5f:ca:9e:da:93:b4:c0:2f:93:49:
                    ea:8d:7a:5b:6e:ca:cc:0d:60:8f:bf:65:e6:7a:f2:
                    60:c0:04:0d:cc:af:d9:d5:45:00:cf:ab:04:c3:fe:
                    ab:a0:11:06:dd:7e:99:89:dd:0d:ea:16:c1:28:4f:
                    c5:0f:49:0b:a4:d1:f6:a1:b5:48:32:39:fb:49:6b:
                    50:fd:40:20:0b:d2:aa:7d:40:8b:5c:50:47:57:3c:
                    ae:77:a1:d4:ef:7b:21:db:b6:10:33:cd:8a:7b:91:
                    5c:21:0d:01:b9:0b:f5:ab:bd:45:52:54:9d:9a:6f:
                    c1:9d:2b:b4:c3:cd:3d:03:5e:e2:19:0f:aa:4c:ef:
                    d6:90:e1:79:66:ec:50:1b:74:2b:64:d4:73:95:73:
                    c0:5d:65:40:1b:3a:55:d2:bf:15:21:84:6b:90:e4:
                    7c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B3:3A:1D:D6:5D:8A:8A:3C:7F:B0:59:B5:06:F3:28:5A:F1:BC:1F
            X509v3 Authority Key Identifier:
                keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:91:9a:8e:77:f2:12:62:e4:33:98:0d:3d:ac:31:c5:6d:b4:
         ae:48:9f:1a:36:bb:8d:4d:87:56:47:0f:79:09:10:31:95:25:
         f7:b2:6e:fe:7c:24:f7:9c:da:fc:44:a5:12:42:2b:ee:cc:f2:
         88:35:b1:65:c6:df:2b:ca:fe:f9:67:4f:41:f2:74:5a:05:c6:
         8b:05:78:e8:bb:d9:2c:71:6b:32:24:a4:b7:8f:ff:ce:be:3a:
         82:2f:47:01:54:39:e4:1d:cb:40:f0:d7:62:c2:71:f5:ae:ef:
         69:f4:e0:38:37:0a:84:39:f9:d6:a8:3e:2b:43:ae:bf:43:28:
         f0:39:96:34:19:9c:fd:50:b5:bf:45:43:e9:57:21:32:cb:18:
         65:1c:e4:b1:9f:21:40:a2:57:a6:b8:47:0a:63:f6:b6:fc:4b:
         1d:34:95:af:ed:a4:9a:7f:3d:f2:03:89:ec:9c:7a:c7:5b:3f:
         01:50:b8:f5:e9:a7:43:71:af:31:c1:d6:4c:85:d2:70:b7:74:
         42:04:6f:ef:77:37:5e:ee:a8:34:d4:67:1a:2d:31:0c:1c:fe:
         15:3f:02:34:8e:f9:da:99:bd:df:33:d8:f9:8e:09:3f:f5:46:
         05:c9:10:43:2e:5e:2b:5d:8c:da:62:9b:c5:2b:2f:50:0b:52:
         73:87:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:19:43 2026 by rpki-client