Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
File:                     WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json)
Hash identifier:          oAdOZxjwzXTp83tNfeBk8JD6spVWlCvwqex/zkfJ4i8=
Subject key identifier:   D4:17:0E:AF:7C:2B:A8:8E:DA:B6:E8:8D:3F:0F:EC:F2:2A:C5:3E:2B
Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59
Certificate issuer:       /CN=5941a406fdffee25938496be5ac9a53e1bb9c659
Certificate serial:       019D3A53FC96BFC773F9588AD11FD3AAB587
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
Manifest number:          053E
Signing time:             Sun 29 Mar 2026 16:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:15 +0000
Files and hashes:         1: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: ROSvU1blbg1MZdUuXCczcGewrh+z1xRXCJmD9PfxavQ=)
                          2: Xedx6t18K1lN2iVg6JylZsX90O8.roa (hash: rknrmpVMbPTrGouqD8ol7zOt5zIU+0aREZj+NOBKEmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:fc:96:bf:c7:73:f9:58:8a:d1:1f:d3:aa:b5:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659
        Validity
            Not Before: Mar 29 16:01:15 2026 GMT
            Not After : Mar 30 16:01:15 2026 GMT
        Subject: CN=d4170eaf7c2ba88edab6e88d3f0fecf22ac53e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:97:88:43:05:e5:88:04:de:85:56:98:91:88:
                    e1:46:0c:a7:26:57:33:7c:39:ef:25:71:59:e5:85:
                    b2:a4:01:28:a2:51:db:cb:77:93:09:97:d9:ad:d7:
                    70:71:9b:c2:31:d4:3e:5e:ca:cf:c7:f0:d6:fa:e0:
                    6c:31:3a:a3:cf:a2:e8:93:c4:bf:dc:b6:fe:59:a9:
                    95:66:0c:12:d6:1c:42:8e:6b:ea:1c:7f:02:50:b2:
                    46:4a:87:f1:a4:f8:a4:d2:7b:e0:61:98:3b:1d:37:
                    f9:56:2a:b5:0f:20:63:5c:73:e0:9e:ff:d4:a3:1a:
                    4c:55:32:48:37:e9:5a:13:94:f3:ac:60:49:29:83:
                    76:b7:e7:da:58:83:a2:a9:69:bb:d4:87:10:11:9c:
                    4e:f1:bd:95:b9:07:f7:eb:b4:c4:35:39:00:5d:77:
                    00:90:d8:10:33:61:30:76:29:68:f1:93:84:28:47:
                    96:fb:af:32:b9:20:49:42:61:dd:e2:3c:c4:ab:ae:
                    ed:a8:37:c2:ed:b5:b6:73:41:2d:45:64:69:1b:04:
                    95:36:0a:a4:c6:b8:87:7c:00:18:1b:c9:37:ed:f5:
                    4c:7d:4c:fc:0b:6d:2f:2b:9b:3a:cb:73:a9:48:a3:
                    a3:62:f7:27:3f:d7:ad:74:df:22:3f:85:dc:f7:08:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:17:0E:AF:7C:2B:A8:8E:DA:B6:E8:8D:3F:0F:EC:F2:2A:C5:3E:2B
            X509v3 Authority Key Identifier:
                keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b1:b8:84:5e:8e:c2:4a:fe:fc:70:f6:46:83:6c:2e:c0:1b:
         81:54:f2:d8:7d:22:4d:7b:de:92:db:d8:1f:95:80:da:f2:16:
         a8:6d:da:bc:e7:db:6b:a1:ef:ae:bf:01:d4:ee:3c:ce:ba:eb:
         f0:e0:b3:1b:60:b1:0c:e3:6b:7e:50:0b:84:bb:74:72:63:fc:
         9f:df:6f:25:d5:90:ac:07:23:98:ea:2c:02:f8:8c:c8:89:f7:
         3d:b7:44:37:07:bf:1e:72:51:71:0c:1e:d7:31:bb:83:02:ec:
         07:5e:38:d1:2b:45:70:fe:e5:52:1d:a1:e1:ce:02:e2:d6:3d:
         6b:55:de:d3:be:90:d7:f3:d7:17:2b:c8:b0:c1:eb:51:7f:df:
         bd:27:86:0f:b4:98:7e:c1:da:62:35:30:db:09:36:87:4b:2c:
         b8:b5:74:83:03:2e:71:c3:91:57:36:b7:ec:08:8f:4f:37:57:
         5e:7f:fe:35:61:ab:70:cc:df:60:30:7d:3b:a5:72:03:ed:f4:
         a3:1e:14:47:1b:01:c3:3a:d7:44:c7:ad:07:ca:1b:a0:f4:ec:
         c9:88:85:c5:49:3b:f1:8a:15:09:a6:69:9b:80:75:7a:60:8f:
         b0:11:a0:29:9f:6d:8b:e5:8f:06:e4:09:4d:c2:69:93:3b:30:
         e2:39:14:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:13 2026 by rpki-client