Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
File:                     WL58UZyUIEI80vkGQL1RyYtKFTY.mft (raw, json)
Hash identifier:          6zYBFfIFapq5Q+94Ez+unEzmZ6Qlykprzj83YIGixSs=
Subject key identifier:   A2:F1:6B:32:A1:14:B4:6A:6B:17:1B:76:BD:77:46:BF:C6:96:38:F5
Authority key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
Certificate issuer:       /CN=58be7c519c9420423cd2f90640bd51c98b4a1536
Certificate serial:       019D3A1C33B3E26B27FCE660B6F2017E557A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
Manifest number:          1031
Signing time:             Sun 29 Mar 2026 15:00:19 +0000
Manifest this update:     Sun 29 Mar 2026 15:00:19 +0000
Manifest next update:     Mon 30 Mar 2026 15:00:19 +0000
Files and hashes:         1: WL58UZyUIEI80vkGQL1RyYtKFTY.crl (hash: EizYnVPjCF0fwNmvqPW67IjAKsKA7hadOhate0CXfTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:1c:33:b3:e2:6b:27:fc:e6:60:b6:f2:01:7e:55:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58be7c519c9420423cd2f90640bd51c98b4a1536
        Validity
            Not Before: Mar 29 15:00:19 2026 GMT
            Not After : Mar 30 15:00:19 2026 GMT
        Subject: CN=a2f16b32a114b46a6b171b76bd7746bfc69638f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e5:b7:ed:24:e2:ca:d3:9c:9c:62:e6:79:fa:
                    62:fb:4d:e1:81:2f:46:ac:4a:ec:c5:00:0b:4a:0b:
                    35:87:82:30:2f:f1:6e:e7:01:61:71:2f:0c:fd:23:
                    55:5c:31:90:75:ce:47:d4:c3:26:01:69:b9:08:3d:
                    6a:f0:21:86:bc:e4:52:0e:24:db:5a:af:25:2b:ff:
                    3f:0c:f2:ae:da:27:ec:ba:a0:99:05:05:7c:cf:4c:
                    42:e7:38:c2:43:ce:a8:3f:22:29:e3:f1:79:43:59:
                    77:ec:d8:43:ec:e7:da:5b:bf:4d:54:64:e4:bc:f7:
                    1c:39:9b:75:10:d2:c5:5d:ac:8d:e2:d9:41:6e:68:
                    f9:2f:02:e6:4b:8e:75:3b:31:1f:9f:80:b2:8e:ea:
                    c1:46:be:3b:09:67:e5:b5:ca:8d:3d:42:51:c0:99:
                    50:ba:de:61:1e:e9:af:0b:58:ac:a7:49:41:3b:26:
                    5c:cd:5e:9c:76:0e:4e:35:5b:f9:88:80:9e:09:ca:
                    35:aa:a4:22:b0:48:ee:c8:67:23:40:5b:0b:5b:4f:
                    ed:af:c7:26:c3:ed:e7:f7:94:d7:3b:cb:b0:1c:e1:
                    c8:13:34:6b:b4:6a:45:43:fe:88:90:b2:7a:53:08:
                    29:5b:d2:8d:27:4b:64:91:b3:5f:2a:20:1f:54:d6:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F1:6B:32:A1:14:B4:6A:6B:17:1B:76:BD:77:46:BF:C6:96:38:F5
            X509v3 Authority Key Identifier:
                keyid:58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:78:32:29:26:23:d9:27:45:48:ac:16:3a:ec:bb:6f:a4:31:
         03:5a:4e:55:21:9e:c5:fe:87:4b:16:39:cb:5a:40:cc:64:c0:
         9d:ea:ab:db:f0:1a:49:a6:03:d2:88:4b:29:64:df:3c:48:88:
         68:08:4c:c2:42:29:7b:5e:3a:40:3b:1d:2a:4c:e0:43:89:b7:
         0a:16:a7:d1:52:66:11:03:88:69:31:ae:73:29:9d:03:e7:5e:
         4c:99:9e:0c:cc:62:61:ea:ce:8c:13:9c:64:35:6e:79:ea:15:
         f7:70:07:48:9d:ae:6c:15:75:cf:ed:18:ab:bf:3d:ed:0d:cb:
         82:f1:5c:8a:90:ee:a2:f5:88:75:19:98:06:ca:e0:ea:0a:9a:
         c8:58:a9:0c:17:88:84:09:60:bd:f6:91:96:7d:5f:52:56:58:
         1c:12:c6:5a:36:e9:58:85:1b:a7:b7:9d:c5:d5:d7:42:74:bc:
         37:b9:3a:0d:3d:2c:74:69:d7:74:e5:2b:51:60:bb:f5:74:cc:
         ba:bd:86:8c:8f:3d:e7:80:ad:42:0c:19:38:87:66:5f:ed:a6:
         18:72:84:11:e2:42:86:f2:90:3e:54:cd:71:35:38:02:a7:ea:
         70:a0:03:7d:da:d1:d7:5e:45:cc:8f:82:c2:ed:36:06:8d:30:
         4a:00:f7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:00 2026 by rpki-client