Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          UAJyf3z/OrsGl1NkSlt8KSFNgduN/axsPGDh22DSK9w=
Subject key identifier:   AE:B9:3A:E4:82:B8:BE:2F:45:D1:B5:FA:F2:C9:21:12:B9:E4:B4:F2
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       019CE5C8A593E3AFFE2E586430BBAF18C873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          072D
Signing time:             Fri 13 Mar 2026 06:00:57 +0000
Manifest this update:     Fri 13 Mar 2026 06:00:57 +0000
Manifest next update:     Sat 14 Mar 2026 06:00:57 +0000
Files and hashes:         1: FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa (hash: cK6XeGopFBU42xQOw3pXSfyyWEVVyNojCMYqWc1ytZU=)
                          2: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: qwK6W8+LB+FseBBHDsvVclXJapQNgCyArV403exkKs8=)
                          3: nGiD_VuUEB-534WjNRVtjKrImS4.roa (hash: bHtWWwpySfNp2/DWZty3G/IOwsGExDDGytrN6bgjIio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:a5:93:e3:af:fe:2e:58:64:30:bb:af:18:c8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Mar 13 06:00:57 2026 GMT
            Not After : Mar 14 06:00:57 2026 GMT
        Subject: CN=aeb93ae482b8be2f45d1b5faf2c92112b9e4b4f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:6b:65:14:a3:e3:09:14:a9:f8:5d:2d:e9:
                    8c:6f:7d:34:ec:ff:c8:97:bc:44:a4:9d:c5:9c:7e:
                    71:fd:1b:ae:89:49:24:b7:9e:fd:87:c6:0e:62:8f:
                    70:6a:60:af:6f:de:8d:d0:cc:f4:ad:13:5f:65:1d:
                    ae:5c:87:13:b9:8f:b3:7e:4c:98:e8:c7:81:86:a5:
                    2d:21:42:ee:4e:78:29:0a:2f:48:85:9e:4b:69:5d:
                    30:ce:03:13:fc:87:2a:0a:27:6d:62:d1:0c:d1:d1:
                    42:fc:67:3e:18:ac:e1:d9:84:91:4d:f8:b5:fd:79:
                    e2:bb:df:25:3f:bd:66:9a:58:b0:e6:94:39:84:64:
                    5b:d1:0a:1a:2f:0c:64:91:4d:98:9e:fc:78:d6:c6:
                    bd:ff:75:d1:7c:ee:c7:8b:f6:5e:19:b9:02:9d:2f:
                    11:bd:b2:5e:95:23:5c:ef:1a:26:6d:30:e7:26:4d:
                    b3:32:f0:72:ae:3f:85:c6:31:37:4d:f5:42:68:c6:
                    75:76:df:c1:d5:cb:f0:1f:b2:3d:1e:72:c1:e8:52:
                    b0:16:83:3b:40:77:43:7c:1a:fa:8e:69:07:b3:58:
                    e0:a3:f8:82:a7:c4:8f:e8:95:e8:89:c8:62:14:0f:
                    28:b4:7b:a5:aa:1a:29:fa:6c:31:c6:61:b1:cf:46:
                    69:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B9:3A:E4:82:B8:BE:2F:45:D1:B5:FA:F2:C9:21:12:B9:E4:B4:F2
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a5:54:f6:99:2a:81:ff:f5:cf:6f:b8:32:b5:a1:a3:5e:04:
         89:e7:c5:13:97:a8:06:60:7e:01:ef:15:ad:5f:d2:43:d5:64:
         ad:7b:ec:4d:a3:89:b3:ad:4f:2f:5a:0a:0a:e6:c5:74:2d:48:
         23:1a:8c:12:91:fa:93:04:00:e8:c9:2b:f1:01:f6:69:66:b9:
         85:f9:eb:f9:51:8d:45:12:78:3a:fb:06:27:e9:3d:ce:31:16:
         4c:4c:54:2b:fa:43:27:1b:52:19:fe:56:28:d9:a6:85:4d:fc:
         b6:06:b4:b2:96:11:aa:ea:0c:45:19:bd:84:97:f9:11:79:6d:
         8f:1c:c8:a0:2f:75:15:2c:98:10:c6:0f:11:f2:c1:42:2d:6f:
         e5:34:84:58:9e:34:e8:cc:6a:10:a7:e8:05:56:f5:37:3b:0e:
         22:8b:c3:f8:4b:5d:87:71:b4:1d:cd:28:86:bc:5f:b1:e2:3e:
         f7:98:81:b3:57:ab:37:02:5f:da:49:9f:6f:0c:9b:5d:57:92:
         63:1f:7d:cd:ee:47:c6:1a:1e:ca:b6:0b:39:18:3d:5e:d8:f6:
         50:c7:13:ea:11:d8:c2:f4:10:8c:2a:46:2a:72:01:09:f2:73:
         fa:42:a9:b3:13:a8:da:6c:05:05:95:15:e1:ba:fa:11:b9:5c:
         35:2a:b3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:48:43 2026 by rpki-client