Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
File:                     wb_RnDPps9MzU8_rZBee9z0yMys.mft (raw, json)
Hash identifier:          vX5FpEC9OTLAxHDFWSpADQaOrJsRZv6705d93YbCoiU=
Subject key identifier:   40:FA:C0:66:68:89:BF:D2:C7:AA:87:24:DF:45:05:09:10:6E:C5:7E
Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Certificate issuer:       /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Certificate serial:       019D37C0BE26FA310286F69DAF284C1C1AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 04:01:11 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:11 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:11 +0000
Files and hashes:         1: 61mqPCCWhNbX67BIUF71mtqBCdI.roa (hash: 0DCVdUX6gKmCd0/r1uVqZ3Z8KDhNYPwW1WvEER9Boj0=)
                          2: wb_RnDPps9MzU8_rZBee9z0yMys.crl (hash: W/+3ajv8+S5wbhz3nP+5AglG7S7sz636KLel4fhBW6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:be:26:fa:31:02:86:f6:9d:af:28:4c:1c:1a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
        Validity
            Not Before: Mar 29 04:01:11 2026 GMT
            Not After : Mar 30 04:01:11 2026 GMT
        Subject: CN=40fac0666889bfd2c7aa8724df450509106ec57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:9c:42:47:64:61:5b:8a:97:1c:06:6a:f2:
                    76:8d:a4:91:76:cb:75:4d:17:54:d8:93:de:c2:4f:
                    3f:04:42:8c:14:29:12:d7:01:ef:74:51:77:ed:69:
                    ca:0c:95:d2:00:08:52:bf:ae:63:e8:7c:10:f4:f6:
                    cd:f3:7a:a8:a3:37:47:74:88:33:16:54:8b:7c:3b:
                    44:2c:6a:eb:62:bd:f3:d3:b2:55:ee:a0:2f:9b:63:
                    1f:ef:b1:c5:eb:5c:d8:78:5c:26:ee:ef:91:5a:a4:
                    1e:05:a9:c1:f9:73:f7:15:2c:4d:ff:f9:31:a5:ed:
                    eb:04:70:13:10:0d:21:d4:7a:0d:67:5e:67:7d:21:
                    c6:12:23:c7:95:c1:37:a9:bc:8a:d8:a7:5a:4b:fb:
                    d2:12:0c:5b:99:ba:66:bc:6f:64:61:33:76:01:ba:
                    8d:1f:ec:28:d2:c5:4e:59:17:8b:66:21:7f:39:80:
                    4b:8a:11:e9:97:14:9a:4a:c2:c7:9c:18:22:4e:9a:
                    dc:81:bd:0e:ab:f6:1d:80:c4:d2:f4:fa:7b:a2:37:
                    d6:69:57:96:ef:b6:1b:5c:c9:26:19:77:74:1b:69:
                    86:1e:af:69:a9:c4:62:e6:78:e0:86:02:da:56:c7:
                    6c:e9:c6:a7:b3:71:06:69:e7:04:86:1d:10:1f:96:
                    de:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FA:C0:66:68:89:BF:D2:C7:AA:87:24:DF:45:05:09:10:6E:C5:7E
            X509v3 Authority Key Identifier:
                keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5b:7a:4b:c2:f2:28:25:4c:57:97:69:ed:71:2f:48:37:bd:
         fe:fe:6d:ab:5e:79:73:74:5b:13:98:db:74:c6:f2:8d:6d:36:
         53:e8:53:fd:d2:0e:50:66:ed:ea:97:e9:7a:b3:eb:b4:ee:5f:
         af:a8:1f:29:87:4b:c8:6c:3e:07:6a:ce:3f:44:b0:0c:54:3d:
         a7:10:c8:8f:a5:bd:c5:6b:d8:42:8e:06:61:68:8d:88:db:32:
         4e:80:ef:fd:62:7e:a3:48:73:b9:07:fa:72:be:4e:20:b7:81:
         ed:23:68:d8:8f:b7:fb:26:b7:57:58:5e:62:8c:3b:f6:d2:e2:
         25:e5:79:d3:73:70:cc:82:9f:a7:ab:b4:43:56:07:f8:0b:40:
         6c:d6:25:d3:9d:dc:be:83:df:89:3a:88:62:4f:9b:11:a4:b5:
         58:59:0e:a8:9d:be:f7:d0:6d:37:06:6b:29:59:f9:d3:5a:40:
         7d:ed:a9:5c:f3:10:8d:19:79:7a:80:be:58:d8:80:29:7a:11:
         ae:81:60:c7:58:a4:eb:ba:29:58:55:75:60:c9:fd:77:f7:02:
         70:42:1e:98:fb:b0:6f:f5:cf:f3:84:56:9a:8d:22:e8:97:fb:
         ac:cb:83:1c:59:18:a2:46:52:c8:06:fa:14:da:9b:5e:96:f7:
         8e:fa:ab:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:37 2026 by rpki-client