Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
File:                     WLPteKcQZof2-2jvIG7dzw696bM.mft (raw, json)
Hash identifier:          1vS8KTtAFyLrEcxMvcue6GXhlTc7hnyyZbhvp9LEeOc=
Subject key identifier:   6A:3B:3C:EE:1D:BD:2B:B2:E2:00:20:25:B8:CF:A0:30:99:22:DD:50
Authority key identifier: 58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3
Certificate issuer:       /CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
Certificate serial:       019D284D333B5DB5DB98A75D089451F0A553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
Manifest number:          0D81
Signing time:             Thu 26 Mar 2026 04:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 04:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 04:00:41 +0000
Files and hashes:         1: WLPteKcQZof2-2jvIG7dzw696bM.crl (hash: VvOpxdHEn98hV5d/qzWlM7Yr6HlJN2eJlXGpLL7TN8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:33:3b:5d:b5:db:98:a7:5d:08:94:51:f0:a5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
        Validity
            Not Before: Mar 26 04:00:41 2026 GMT
            Not After : Mar 27 04:00:41 2026 GMT
        Subject: CN=6a3b3cee1dbd2bb2e2002025b8cfa0309922dd50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:2e:15:e1:14:ab:f6:8d:be:ac:33:f7:3c:
                    08:6e:c5:d1:e7:cf:63:2b:a9:23:4f:ac:51:e3:aa:
                    24:d7:36:cf:89:5d:20:de:d0:0b:fc:19:96:23:dd:
                    f3:e4:18:3f:89:45:65:cb:cd:12:ff:e1:72:7d:9f:
                    8a:40:7d:96:15:d9:f4:f5:3c:7f:97:23:a3:4d:b4:
                    1b:4c:03:83:37:37:73:21:8e:f9:30:5f:96:0f:94:
                    2f:bd:d1:fd:da:ab:23:a5:50:a9:9e:0b:2b:7b:2e:
                    dd:4c:05:c9:ac:3f:cf:73:ef:4f:cf:d0:e9:8a:1d:
                    6c:70:d4:7e:79:25:f5:f0:b3:fb:08:c4:d5:32:79:
                    4b:c4:98:98:c6:cb:4a:dc:74:8b:ea:29:8c:a1:ee:
                    03:55:1e:80:05:4f:0c:52:2c:7c:5e:d1:da:ff:38:
                    d3:f5:ab:e5:42:81:ea:2e:d5:d7:eb:c3:23:b2:c2:
                    13:86:31:c9:28:6a:a1:31:7e:05:db:fe:d6:66:b9:
                    51:e4:56:af:b0:ff:99:e7:93:ee:d7:61:1a:e3:a3:
                    a9:27:69:29:8f:2e:76:36:f4:cf:5b:c5:32:dc:ec:
                    58:26:d7:2b:78:d7:be:90:05:27:43:48:7c:86:00:
                    2d:c1:e4:e4:39:fb:56:bb:ee:38:e6:c1:18:25:2a:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3B:3C:EE:1D:BD:2B:B2:E2:00:20:25:B8:CF:A0:30:99:22:DD:50
            X509v3 Authority Key Identifier:
                keyid:58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:b0:b2:b8:02:ed:03:55:67:53:89:13:be:70:15:19:55:
         cc:db:82:92:de:d5:53:91:05:59:a6:06:13:d9:d5:86:65:9c:
         cd:29:80:7c:db:f2:ed:8e:d5:1c:9d:7e:f2:69:06:dc:17:8b:
         74:a4:2d:38:9a:f8:93:d3:96:b4:14:af:98:17:cc:cc:8f:9b:
         8c:51:8f:63:3f:bb:1c:91:70:5d:e3:a6:b8:5f:1c:04:aa:16:
         ba:7c:8d:20:75:33:e7:fe:3d:7c:44:3e:ab:9f:83:cc:22:fd:
         ab:8a:c1:c2:cf:d1:39:8e:78:ae:be:13:14:8e:f6:fe:d3:16:
         9d:6d:6b:01:c3:c0:f7:0c:43:18:53:a2:65:da:55:fc:ad:53:
         20:50:a2:e0:12:53:26:cb:e5:af:cb:7b:93:8f:da:b5:7d:16:
         5a:2e:a4:aa:ba:cb:53:69:5b:08:15:bf:bc:43:ff:92:37:f9:
         84:da:0a:7b:ed:0b:ba:16:c3:be:89:c9:14:5b:60:73:db:ee:
         4d:75:48:57:a3:35:a4:ba:ae:29:84:f6:53:18:02:9a:1d:95:
         68:d3:11:b7:c9:74:2f:66:a3:13:e6:0d:4c:b9:36:31:6e:ae:
         8f:cd:22:8f:b0:f9:a3:7d:ba:64:94:f7:b0:26:e4:81:d9:bb:
         4e:28:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:52:44 2026 by rpki-client