Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          jYSXFIrn2ezjUfOkcXC69S1E2zKPXTg/Tr+FybcgN+A=
Subject key identifier:   5C:8A:41:05:EF:5D:4E:4A:5A:D0:27:33:7B:2B:53:D7:E7:1A:4A:5D
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       019F84C37ECD4DD7636C2190E3D7531CB3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          0520
Signing time:             Tue 21 Jul 2026 13:00:32 +0000
Manifest this update:     Tue 21 Jul 2026 13:00:32 +0000
Manifest next update:     Wed 22 Jul 2026 13:00:32 +0000
Files and hashes:         1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: 8ZX9sfNcEjAQNjc6MKQTxqYoHJjdBsXIQPYEwHNEhcs=)
                          2: aeNtIymZwUKQWOeTccyVT7TBHRo.roa (hash: NRVVzMkO6SHCR3USmlXWQHKPaFtABXw2LsRv66QEVsc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c3:7e:cd:4d:d7:63:6c:21:90:e3:d7:53:1c:b3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Jul 21 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=5c8a4105ef5d4e4a5ad027337b2b53d7e71a4a5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:42:4a:1f:b6:ef:4b:91:f3:00:81:a6:8c:45:
                    01:9d:7f:68:0c:b1:cf:93:a2:e1:ba:76:fa:4f:8b:
                    e7:83:42:f2:3e:a0:f5:d3:69:45:24:87:34:bd:d5:
                    8d:ba:c0:08:02:2f:93:b1:60:4b:31:0a:cf:c3:6e:
                    74:63:fe:39:61:36:86:e5:37:00:31:e2:98:df:81:
                    df:e9:98:b9:4c:b2:a1:58:00:aa:48:d2:96:92:97:
                    08:4e:5e:ed:c7:6e:d6:b3:67:f9:66:a8:01:b4:21:
                    32:70:53:79:b3:a5:6f:16:61:d9:1c:ea:37:28:ac:
                    94:58:53:ad:32:c7:56:da:10:17:30:7b:0e:8b:58:
                    d5:67:80:ac:9f:1d:8f:a3:7a:ea:10:23:8a:c4:d1:
                    01:71:e7:86:c8:10:e7:51:48:68:bb:4a:73:f9:a7:
                    d1:d1:4f:05:e1:d0:9d:da:d1:cb:8c:80:7a:71:56:
                    2f:e2:52:76:df:5f:4f:20:d4:49:62:21:5d:9e:e9:
                    67:2d:75:b3:6f:8b:c3:d5:09:4d:8c:d0:00:46:45:
                    1e:8f:8c:08:7e:54:16:b0:e2:ec:f1:27:fa:68:9a:
                    0b:60:97:39:02:6d:9d:4c:34:b4:b0:8e:32:62:67:
                    4d:cf:cc:22:f2:1d:a5:4d:77:7f:f0:9e:1d:9b:d0:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8A:41:05:EF:5D:4E:4A:5A:D0:27:33:7B:2B:53:D7:E7:1A:4A:5D
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:56:c5:5c:e2:6d:fd:d9:34:53:39:f2:4b:29:ce:54:eb:15:
         40:1f:e0:7b:f7:24:a8:57:2a:ef:99:12:07:d5:82:54:28:17:
         b2:aa:07:ee:27:2d:1c:c8:22:73:06:11:62:3f:7a:a6:b5:b6:
         58:b5:f3:ba:63:e3:36:2b:ea:8c:5d:7f:08:36:2b:1f:34:48:
         82:27:b4:ac:13:9b:80:00:b4:d3:42:d4:c2:97:12:02:66:ec:
         5f:9d:80:7e:83:5c:da:3a:94:ab:60:d2:09:32:7d:8a:30:18:
         78:3b:d9:a9:1c:0e:bc:12:e7:58:c6:96:62:c9:b1:dd:1a:70:
         18:14:02:3f:ed:93:54:de:b6:66:c4:58:ad:af:67:a3:9a:8a:
         98:43:1f:39:75:a5:4e:a8:94:7b:b1:84:5c:9f:9c:96:51:78:
         f2:55:b7:ab:ea:b1:bf:6d:12:30:c8:58:6c:7d:e2:10:bd:dd:
         6f:11:1d:a4:33:03:23:14:5c:f8:fa:f9:9b:73:db:e1:69:47:
         a5:1f:e9:ff:88:64:f7:9c:ca:55:73:7f:27:f0:4b:0c:3e:f5:
         cd:d1:b1:fd:00:66:21:15:f9:12:e3:32:82:4d:f0:24:79:ee:
         be:8e:0e:e2:ce:26:c6:9e:81:94:e7:39:65:95:72:db:45:0d:
         95:b3:b5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:04:59 2026 by rpki-client