Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
File:                     WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json)
Hash identifier:          2xyx+qom/YRE+oszpprEfrMEVQ0/oDyiWHinxLvgW3o=
Subject key identifier:   92:A4:FB:FD:C0:4D:AD:B5:28:CE:83:19:41:4C:47:26:81:32:44:86
Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6
Certificate issuer:       /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
Certificate serial:       019D3AC152C4A9199EA53184B48F60157F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
Manifest number:          0E39
Signing time:             Sun 29 Mar 2026 18:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 18:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 18:00:41 +0000
Files and hashes:         1: 0J1Bc7T3_t7yJTtYF6gyqQOIoEY.roa (hash: 3ugWvtC3e0ymV2WWg87hGLJ6EMMogW9erVq2BTyhB5Y=)
                          2: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: 6AxIJBiSbV978gLVm4go/HgSH9i+KSBluWGANNHjYtk=)
                          3: YI0pCgu2ykn3yzVOtlSfyJA849I.roa (hash: EahNolpQ9StYuOrtKhWwzZ1bxJLzeXPdTxQKSkepaik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:c1:52:c4:a9:19:9e:a5:31:84:b4:8f:60:15:7f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6
        Validity
            Not Before: Mar 29 18:00:41 2026 GMT
            Not After : Mar 30 18:00:41 2026 GMT
        Subject: CN=92a4fbfdc04dadb528ce8319414c472681324486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a9:90:d3:44:fc:fb:55:12:e5:80:29:54:1a:
                    6d:c1:8e:84:ed:37:30:6e:a2:79:17:36:3e:4f:da:
                    31:e9:4d:96:e4:f9:2f:e3:68:36:fb:44:f1:bb:17:
                    8a:b2:59:83:13:85:4f:a2:6f:2a:9a:aa:82:f3:c3:
                    b9:9f:de:4c:e7:08:71:80:44:58:0c:86:a4:8a:1e:
                    6e:6b:36:03:f9:2c:6d:76:58:40:93:7f:89:fc:6f:
                    4c:64:84:4b:87:0e:1a:2d:e3:94:36:7a:03:ae:80:
                    24:19:d2:ec:0d:59:4f:34:af:67:d3:33:ea:18:d2:
                    95:90:1d:6a:88:93:83:4c:8a:a2:60:09:20:13:98:
                    58:c0:cf:3c:85:3c:1a:2f:db:9f:8d:b5:5a:f4:62:
                    90:58:71:3b:f0:25:2e:7d:9c:30:9d:e9:15:cc:a8:
                    66:1c:78:c1:c7:9a:58:e1:75:3a:eb:a7:ab:14:9b:
                    92:59:d2:5c:35:b6:bd:02:7a:67:e4:23:ec:4f:c9:
                    b3:af:f5:5c:ad:94:22:e3:9e:03:0a:ee:1c:ff:8b:
                    ef:65:c0:12:c5:2e:b5:78:93:dc:a6:1e:5e:c4:99:
                    86:37:52:f1:19:2c:d5:31:61:0c:ff:88:05:9c:04:
                    cd:5a:81:0f:8f:38:e5:a1:a8:3b:a0:d1:98:37:78:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A4:FB:FD:C0:4D:AD:B5:28:CE:83:19:41:4C:47:26:81:32:44:86
            X509v3 Authority Key Identifier:
                keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a8:77:05:45:30:f6:5e:5b:72:0d:28:c2:62:ef:cb:90:95:
         34:6a:35:ae:6d:27:d0:fa:9b:d7:13:fd:38:bf:20:8a:5f:d6:
         2f:27:88:3a:b9:6f:91:40:d3:e3:d2:1a:05:05:41:eb:89:8b:
         35:1e:39:89:2a:a4:90:01:8b:51:06:90:42:ac:fc:a2:71:57:
         83:4c:29:7b:a6:bd:95:4b:54:87:3e:bf:b9:87:2a:df:e1:d8:
         fa:66:04:e0:4e:09:f9:5b:00:20:97:ca:97:34:1d:bd:41:e2:
         65:8a:00:b9:47:e6:44:0e:97:30:4d:3e:1b:3a:22:e8:57:9b:
         76:d8:7b:b8:12:40:d1:6c:0f:d5:ba:3c:08:b6:93:7f:81:81:
         21:87:b9:e9:21:35:74:73:a7:52:aa:5b:38:da:3d:4d:55:c9:
         25:ec:bb:e6:54:bd:6a:3a:4a:9d:22:df:c3:4e:1e:ad:1c:30:
         a4:66:e3:1d:02:b3:bc:5c:2e:7d:c6:be:38:19:82:74:e1:94:
         34:10:3e:06:c9:69:9e:17:98:e1:cd:89:b9:d5:e7:16:fa:be:
         7d:91:fe:74:a1:1d:5f:ee:1e:c5:77:f4:67:3a:a9:2f:86:cb:
         4b:ac:7e:28:33:4a:54:9d:64:8c:98:dc:b0:89:de:46:e1:c8:
         36:31:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:34 2026 by rpki-client