Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File:                     WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier:          OL1FIuevzRr2T2FiU658muvXL1dJ/moppsOgKTIYLOs=
Subject key identifier:   84:B6:46:92:F4:F5:A5:C9:08:69:C7:8A:2C:68:C2:74:A3:48:19:3D
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer:       /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial:       019E3260D11760E0F6E57E69E5A11553622C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number:          128F
Signing time:             Sat 16 May 2026 20:01:06 +0000
Manifest this update:     Sat 16 May 2026 20:01:06 +0000
Manifest next update:     Sun 17 May 2026 20:01:06 +0000
Files and hashes:         1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: dVwZtFYl2vFAuLlARQFkFX15TrWOZOnBrWuDNP1PwNM=)
                          2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:32:60:d1:17:60:e0:f6:e5:7e:69:e5:a1:15:53:62:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
        Validity
            Not Before: May 16 20:01:06 2026 GMT
            Not After : May 17 20:01:06 2026 GMT
        Subject: CN=84b64692f4f5a5c90869c78a2c68c274a348193d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:24:81:71:aa:8e:04:19:82:5c:ec:97:ef:5e:
                    a5:a3:7b:8f:cc:e0:4c:3e:f7:29:6b:a5:65:30:3e:
                    04:1e:06:4e:c0:30:7f:21:2b:60:9f:88:c4:04:f0:
                    6b:de:15:42:e7:95:f9:e6:3b:b1:f8:4c:aa:ff:0e:
                    79:94:fa:0a:f9:30:e2:6d:9a:c7:be:47:20:4e:39:
                    fa:d0:ba:b3:b2:fc:7a:df:86:92:66:0a:9c:0d:8b:
                    a6:58:b3:07:90:c5:ec:b4:76:7b:8b:12:37:3a:86:
                    47:cf:14:d3:17:3c:08:24:50:0a:d5:76:bb:5a:0e:
                    ea:48:69:40:7b:58:59:8f:47:d6:19:aa:8c:33:0b:
                    a1:6a:cd:60:2c:5d:8c:09:30:c9:95:bf:f1:2d:60:
                    84:bc:8c:90:52:f2:66:60:20:32:28:09:05:25:28:
                    a6:93:bc:52:81:b6:e8:78:26:5c:7b:1f:28:20:32:
                    b1:34:33:47:ff:b7:85:8f:f4:e3:10:e6:10:a5:30:
                    08:1d:bd:c3:50:84:d8:90:67:49:8c:ca:cb:d1:99:
                    e8:39:7b:1d:1b:d3:64:73:bc:26:ed:9a:3d:41:20:
                    1c:99:80:15:a5:c8:45:b7:fa:5b:18:54:5a:08:57:
                    67:8e:91:43:bd:08:41:74:52:ca:00:09:51:fb:9d:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B6:46:92:F4:F5:A5:C9:08:69:C7:8A:2C:68:C2:74:A3:48:19:3D
            X509v3 Authority Key Identifier:
                keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:2f:05:e9:26:f1:c3:b2:09:bd:1f:e3:f2:6a:ae:71:da:3b:
         23:6f:a4:84:79:33:cf:29:ad:6c:07:fd:b5:69:54:ce:6d:11:
         81:02:c6:41:42:45:99:fa:2c:a8:6f:4b:b4:16:68:a3:c1:be:
         ee:2a:95:10:46:6b:95:06:65:1e:e6:3c:cc:91:b0:d3:3a:a9:
         54:4d:71:71:e4:ff:3e:d3:7e:ab:04:b6:14:45:35:08:7d:0d:
         d8:0f:6f:69:c4:6c:61:d2:81:b4:d2:e9:df:e2:49:3c:56:93:
         e2:61:38:23:29:82:b5:9b:50:7b:6e:0b:d0:37:4f:60:26:bd:
         13:9d:3d:ec:de:22:f2:47:ad:6f:2d:44:e1:36:63:27:81:8b:
         71:1b:5d:31:f6:c6:e6:0b:c3:13:f2:dc:86:7d:07:26:72:7c:
         8c:81:06:a5:50:75:50:94:a0:e6:57:26:4b:a2:08:4c:08:8d:
         74:6a:6d:9c:a6:1f:4e:58:35:18:60:4f:47:d0:46:18:a1:44:
         cc:e0:aa:36:a1:87:bc:70:75:15:6e:9b:ba:55:1e:66:35:af:
         0b:bb:87:28:3c:76:ef:ac:c3:69:ea:7c:91:b6:e3:21:f6:f6:
         f5:fe:33:99:77:5a:33:c7:87:9f:c5:6a:61:a7:ad:7f:d6:24:
         0e:16:4d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:49 2026 by rpki-client