Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          tsJZeZtbVtzMrMBJSWgdqWaE7NelSvX9UUEq0+i6J0g=
Subject key identifier:   E0:2C:6F:5E:A4:40:3C:95:79:DB:6C:19:B4:13:CD:FA:03:95:2E:7B
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       019D39099494D0CFD5FFD678BE27611AB6E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          0849
Signing time:             Sun 29 Mar 2026 10:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:22 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: bKNLmYeHN79cYmft+2HI76g+f95fJNUVpI6i9KngCvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:94:94:d0:cf:d5:ff:d6:78:be:27:61:1a:b6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: Mar 29 10:00:22 2026 GMT
            Not After : Mar 30 10:00:22 2026 GMT
        Subject: CN=e02c6f5ea4403c9579db6c19b413cdfa03952e7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:13:63:74:ee:06:ad:5f:93:87:73:f4:57:6d:
                    b0:6f:1b:f5:3b:1d:7d:a4:43:da:16:a6:23:57:2d:
                    f0:a7:13:cc:d6:dd:c2:e2:b9:18:11:02:b9:cd:f0:
                    7d:f7:43:28:7e:63:f0:23:0d:df:d1:46:1d:af:46:
                    46:18:1c:f7:0e:1d:39:b1:f0:7d:e6:82:a2:41:d8:
                    a2:3d:82:29:bc:98:07:77:42:50:5b:e8:da:a6:48:
                    1f:b9:04:5f:74:ce:1f:ab:2e:65:5f:af:28:43:13:
                    e6:60:23:c3:aa:88:a7:dd:31:85:f5:90:2e:60:9d:
                    77:88:cd:86:39:99:3d:c1:49:c3:66:b8:47:1e:db:
                    39:20:85:40:0a:4b:b4:17:ea:75:7c:ee:ba:f6:bb:
                    52:c4:61:72:aa:40:0d:cc:eb:ff:f8:ad:a1:ee:de:
                    da:9b:9c:42:3a:46:d5:5c:c4:c2:36:5b:59:5b:6a:
                    d1:64:31:00:b0:fa:85:6c:0b:a8:e5:f3:32:12:ee:
                    a1:33:3f:33:dd:0b:6a:ac:55:59:87:66:ac:c1:9c:
                    24:af:d6:1b:09:f9:33:7f:d0:6d:1d:a5:56:fe:a5:
                    3f:cf:72:a5:19:a2:fd:2a:2c:8f:66:f7:5e:49:e8:
                    e4:e6:72:10:ed:d1:6a:89:07:6f:8e:33:df:dd:fa:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:6F:5E:A4:40:3C:95:79:DB:6C:19:B4:13:CD:FA:03:95:2E:7B
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ae:5e:a6:0f:cf:c2:4a:5e:4a:d7:1e:fc:57:4e:de:4c:82:
         94:e0:b1:74:a8:25:3e:b3:0f:bc:ab:3f:66:1e:e2:f6:89:3e:
         88:34:c0:63:71:86:71:49:eb:81:36:7b:9c:57:ce:7a:c4:be:
         bb:97:48:db:88:ce:cb:f2:94:77:9c:b0:3d:74:53:7c:25:a2:
         7f:44:68:e3:ad:48:d2:70:00:c0:1b:fb:24:e4:4d:0d:c4:b7:
         83:6c:53:93:06:64:bc:47:b6:09:b8:6f:b3:f7:be:e4:d2:ae:
         d2:71:5d:99:d1:f6:80:72:f7:62:2b:55:66:71:c9:8a:62:6a:
         72:00:d6:8e:b8:03:84:0c:9c:cf:33:e2:3b:b3:1b:47:cb:d8:
         3d:26:fb:0e:28:56:83:95:1e:77:9b:3c:af:a3:12:64:6b:33:
         ce:99:7f:80:b8:19:35:cd:20:04:18:12:40:49:cd:36:9f:91:
         a2:9a:85:f1:bf:12:c0:50:c2:af:bb:e1:36:5e:a2:01:b1:0a:
         85:bf:d3:c4:57:cb:23:e6:a4:73:18:d8:84:5f:3f:2b:9d:f4:
         74:28:60:cc:4a:b8:29:cf:3b:ee:4b:53:6e:fa:f2:4e:e1:9a:
         67:0f:f5:01:b7:f9:62:6f:cb:30:94:54:1c:a3:2d:30:9b:27:
         b4:b1:32:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:20 2026 by rpki-client