Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
File:                     WL58UZyUIEI80vkGQL1RyYtKFTY.mft (raw, json)
Hash identifier:          aH+pI9Cw9gBQB28+/PgMnxiyFPXd+t/el1boNkepLcA=
Subject key identifier:   08:43:83:A0:F6:94:A2:DB:F0:06:80:4E:C8:4F:4C:C8:AD:56:06:7D
Authority key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
Certificate issuer:       /CN=58be7c519c9420423cd2f90640bd51c98b4a1536
Certificate serial:       01A17F2A88410CF2ECD4C9A9445A6ABD2C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
Manifest number:          1267
Signing time:             Tue 27 Oct 2026 21:00:56 +0000
Manifest this update:     Tue 27 Oct 2026 21:00:56 +0000
Manifest next update:     Wed 28 Oct 2026 21:00:56 +0000
Files and hashes:         1: WL58UZyUIEI80vkGQL1RyYtKFTY.crl (hash: Cee24UqSb+01gSK0rvwuaSnYDG0I2+QbZ8pGhhg1Lo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:2a:88:41:0c:f2:ec:d4:c9:a9:44:5a:6a:bd:2c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58be7c519c9420423cd2f90640bd51c98b4a1536
        Validity
            Not Before: Oct 27 21:00:56 2026 GMT
            Not After : Oct 28 21:00:56 2026 GMT
        Subject: CN=084383a0f694a2dbf006804ec84f4cc8ad56067d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1a:26:3a:85:f3:6c:f7:97:f0:f3:d4:1b:bf:
                    2e:e4:b0:35:50:5a:f1:a3:8b:1a:7d:7d:7f:68:e9:
                    cc:58:7c:c6:aa:af:60:29:13:2c:d8:b2:dd:b9:bc:
                    c4:d4:07:77:b3:c6:5b:71:ba:07:d8:b7:18:0c:22:
                    0b:9c:6e:6f:19:53:fd:7d:be:51:cd:54:24:0f:80:
                    da:91:7c:87:12:c8:2f:d6:20:df:b6:fd:3c:2d:a2:
                    2e:ef:29:c9:2f:1a:60:2c:23:5f:1e:b3:8e:0d:d6:
                    7f:a6:a5:ae:66:9a:05:60:de:ac:7a:b4:9b:ba:ef:
                    5d:b2:a5:3f:0c:66:bd:dc:9a:67:0e:df:d2:6d:90:
                    56:2d:7d:3b:b4:91:d9:5e:05:a8:d9:31:0a:59:50:
                    85:3f:84:26:90:af:54:7d:f4:08:6e:76:53:67:d1:
                    45:d2:6b:4e:fa:08:c3:54:32:3e:46:2f:95:24:51:
                    9e:91:80:82:62:fc:ee:e5:88:1c:d7:99:c6:dd:0c:
                    6e:91:87:b5:75:ec:8e:2c:e8:16:37:cd:26:ac:a3:
                    e2:82:3b:31:28:32:da:49:3a:22:0e:a0:37:be:12:
                    ea:c8:05:24:0e:38:3f:5b:d1:26:2b:62:8a:1a:8f:
                    60:75:15:ea:e6:7f:ad:31:98:0f:ea:23:b7:db:be:
                    18:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:43:83:A0:F6:94:A2:DB:F0:06:80:4E:C8:4F:4C:C8:AD:56:06:7D
            X509v3 Authority Key Identifier:
                keyid:58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:be:60:ad:33:2a:bf:8f:71:d5:54:5a:d5:f9:95:ce:ae:c6:
         38:0c:d5:53:13:25:59:f9:24:8c:53:70:e4:65:2a:c7:cc:40:
         f1:fe:48:c2:56:c6:14:9e:88:af:25:fb:da:66:a2:bb:66:2c:
         0f:ea:b8:f2:e8:e6:35:4f:ff:6e:c0:ea:e7:1c:df:40:e2:4f:
         54:67:f7:91:0a:1b:8a:fe:99:4e:13:50:85:c5:3c:90:91:a3:
         71:06:0e:04:10:b0:96:6e:98:ac:4f:ef:5d:b3:ce:c7:e3:2f:
         1e:d0:e9:91:a2:9f:d3:ed:4a:fc:3f:fb:55:61:14:f0:55:18:
         26:be:cc:ef:8b:2c:4c:a1:0c:98:31:49:f4:c8:2b:d8:c8:f3:
         e5:6d:e9:1e:5a:b5:aa:32:27:ce:58:1f:b6:47:12:76:db:57:
         6c:07:4f:3c:45:0b:2a:2f:df:25:53:51:8a:20:de:cd:af:7f:
         bf:fa:fb:be:5d:c7:5f:25:0c:87:4f:73:cb:24:d4:57:74:5d:
         b4:cd:71:57:c4:c4:ea:34:c6:2a:cf:fb:07:1d:fe:4c:36:dd:
         45:37:4a:85:45:aa:a4:ce:80:bb:08:9e:9d:5f:20:bf:28:0b:
         f8:31:70:32:be:e0:61:e0:2e:b9:92:6e:26:b9:fa:64:13:4c:
         0c:90:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:21:50 2026 by rpki-client