Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
File:                     WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft (raw, json)
Hash identifier:          fKnaLVTK05TILxUuGyLGNC3w2aIw3FisWOxizIOvuZE=
Subject key identifier:   42:AF:58:34:B9:F1:03:C7:37:42:03:8D:D7:D9:11:C0:8A:5E:CC:0B
Authority key identifier: 59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2
Certificate issuer:       /CN=594be5fa24fd67f4db4ae3fca9856ff0881539d2
Certificate serial:       019CE5C86D57C4E5A3EE8A3AD768EDB1CC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
Manifest number:          055B
Signing time:             Fri 13 Mar 2026 06:00:43 +0000
Manifest this update:     Fri 13 Mar 2026 06:00:43 +0000
Manifest next update:     Sat 14 Mar 2026 06:00:43 +0000
Files and hashes:         1: WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl (hash: wwwE8+UH1oOLTT0+b+evKkqmlcrcI1j3+toUC5jMhk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c8:6d:57:c4:e5:a3:ee:8a:3a:d7:68:ed:b1:cc:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594be5fa24fd67f4db4ae3fca9856ff0881539d2
        Validity
            Not Before: Mar 13 06:00:43 2026 GMT
            Not After : Mar 14 06:00:43 2026 GMT
        Subject: CN=42af5834b9f103c73742038dd7d911c08a5ecc0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ff:fc:82:d1:88:4f:4c:26:90:62:d2:91:71:
                    7a:54:7a:08:6c:8e:c1:5c:eb:e6:38:b5:79:0a:dc:
                    8d:11:77:cc:6d:4d:e7:fe:dc:ef:cc:21:ab:f4:7a:
                    b2:cf:c2:4a:22:e5:24:8e:11:9f:31:b1:d5:65:46:
                    99:47:25:6d:7a:23:ec:9c:af:04:bb:65:e4:0a:e9:
                    2d:c7:a3:17:f9:b0:43:23:fa:8a:66:04:f9:1e:e7:
                    41:5d:f8:1e:13:e4:da:46:85:68:d7:ba:eb:69:05:
                    a4:a1:8c:a2:1d:38:ae:98:db:4e:49:3e:c7:32:f2:
                    71:59:ff:ee:9e:27:73:4f:4e:e1:2e:b8:8f:3a:c8:
                    7c:da:e8:94:53:c0:e4:25:bf:d3:ea:21:38:57:97:
                    a4:f5:29:33:92:8c:94:91:b8:c9:f7:2f:53:20:b3:
                    81:97:3f:68:f9:7f:79:3f:9f:d5:bf:fe:4c:61:f3:
                    ad:48:45:13:75:a9:e9:b0:2d:cb:a1:a1:46:f9:ad:
                    11:32:d3:93:a3:63:4d:e2:4a:06:08:8d:36:8b:bd:
                    9f:11:7f:7d:9e:35:60:2d:20:9d:ed:1e:49:48:2d:
                    30:c5:9b:e9:60:81:bb:84:67:0f:da:7b:33:0e:28:
                    c5:31:92:a7:a3:0e:b6:df:93:a3:04:4f:e7:bb:e2:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:AF:58:34:B9:F1:03:C7:37:42:03:8D:D7:D9:11:C0:8A:5E:CC:0B
            X509v3 Authority Key Identifier:
                keyid:59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d5:d8:ba:53:ac:d1:80:47:a6:b8:e8:c7:9a:63:6b:f1:50:
         77:39:a2:32:f2:43:7a:eb:e6:a7:c9:be:4f:2d:99:83:83:25:
         21:2e:7c:d4:a2:8c:af:b3:82:9c:08:17:20:b5:7f:a4:12:92:
         bf:76:3f:fb:af:f8:e0:97:68:65:61:9d:a0:a0:2e:40:ed:e7:
         00:db:0d:bf:64:ac:24:40:e4:fd:20:4b:d3:fc:b8:37:ce:65:
         09:3f:7e:dd:b8:04:98:c3:6b:94:bc:f6:2a:a7:8d:a4:ef:1b:
         1f:aa:e0:b9:81:64:55:c8:43:07:f3:e1:dc:8f:59:6a:a7:0a:
         06:b2:35:04:0d:4f:f6:09:7d:12:83:b7:da:7f:51:ac:b4:dd:
         b1:a1:da:5a:b4:09:c8:34:b2:cc:46:d6:65:01:5b:fc:5c:ff:
         a4:97:78:5a:ad:54:35:ec:b8:7f:a6:43:ae:c9:07:a0:6c:71:
         72:34:e0:df:92:cf:6a:52:c8:6b:a8:4b:5c:40:1f:8c:9a:ab:
         a9:84:ca:29:bb:ce:ba:2b:da:21:17:e1:37:e9:36:0b:a4:ee:
         4c:5e:32:77:64:a5:c4:57:6e:ec:4e:41:84:b8:98:cd:f9:f0:
         c0:39:1f:73:76:f2:86:ac:83:8e:ad:44:ed:81:d9:d1:ad:3b:
         61:0f:ad:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzlyG1XxOWj7oo612jtscw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NGJlNWZhMjRmZDY3ZjRkYjRhZTNmY2E5ODU2ZmYwODgx
NTM5ZDIwHhcNMjYwMzEzMDYwMDQzWhcNMjYwMzE0MDYwMDQzWjAzMTEwLwYDVQQD
Eyg0MmFmNTgzNGI5ZjEwM2M3Mzc0MjAzOGRkN2Q5MTFjMDhhNWVjYzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7//8gtGIT0wmkGLSkXF6VHoIbI7B
XOvmOLV5CtyNEXfMbU3n/tzvzCGr9Hqyz8JKIuUkjhGfMbHVZUaZRyVteiPsnK8E
u2XkCuktx6MX+bBDI/qKZgT5HudBXfgeE+TaRoVo17rraQWkoYyiHTiumNtOST7H
MvJxWf/unidzT07hLriPOsh82uiUU8DkJb/T6iE4V5ek9SkzkoyUkbjJ9y9TILOB
lz9o+X95P5/Vv/5MYfOtSEUTdanpsC3LoaFG+a0RMtOTo2NN4koGCI02i72fEX99
njVgLSCd7R5JSC0wxZvpYIG7hGcP2nszDijFMZKnow6235OjBE/nu+IhRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKvWDS58QPHN0IDjdfZEcCKXswLMB8GA1UdIwQY
MBaAFFlL5fok/Wf020rj/KmFb/CIFTnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1V2bC1pVDlaX1RiU3VQOHFZVnY4SWdWT2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80ZGQxNTEtNmYyZC00YTYyLTg4NjIt
MTNkOTMwMWY3YzBhLzEvV1V2bC1pVDlaX1RiU3VQOHFZVnY4SWdWT2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80ZGQxNTEtNmYyZC00YTYyLTg4NjItMTNkOTMwMWY3YzBh
LzEvV1V2bC1pVDlaX1RiU3VQOHFZVnY4SWdWT2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNXYulOs
0YBHprjox5pja/FQdzmiMvJDeuvmp8m+Ty2Zg4MlIS581KKMr7OCnAgXILV/pBKS
v3Y/+6/44JdoZWGdoKAuQO3nANsNv2SsJEDk/SBL0/y4N85lCT9+3bgEmMNrlLz2
KqeNpO8bH6rguYFkVchDB/Ph3I9ZaqcKBrI1BA1P9gl9EoO32n9RrLTdsaHaWrQJ
yDSyzEbWZQFb/Fz/pJd4Wq1UNey4f6ZDrskHoGxxcjTg35LPalLIa6hLXEAfjJqr
qYTKKbvOuivaIRfhN+k2C6TuTF4yd2SlxFdu7E5BhLiYzfnwwDkfc3byhqyDjq1E
7YHZ0a07YQ+tVA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 13:16:17 2026 by rpki-client