Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
File:                     wmsHYHZubMcjnCdVotDTn74U7Xg.mft (raw, json)
Hash identifier:          BUqGh/AsdmULBMU+v3sirXmZ9/5TTjglBoU9bWAeuks=
Subject key identifier:   D2:32:72:60:DF:D0:17:FA:00:E0:F8:EA:56:72:A3:25:0E:CB:03:D8
Authority key identifier: C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
Certificate issuer:       /CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Certificate serial:       019CE36C501E149EE82CE4023097508C80B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
Manifest number:          0C1D
Signing time:             Thu 12 Mar 2026 19:00:52 +0000
Manifest this update:     Thu 12 Mar 2026 19:00:52 +0000
Manifest next update:     Fri 13 Mar 2026 19:00:52 +0000
Files and hashes:         1: wmsHYHZubMcjnCdVotDTn74U7Xg.crl (hash: rqYzZCVNpPMkLwMbDtVrlz4cwlivVJ5z7rM+AuQMGZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 19:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:6c:50:1e:14:9e:e8:2c:e4:02:30:97:50:8c:80:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
        Validity
            Not Before: Mar 12 19:00:52 2026 GMT
            Not After : Mar 13 19:00:52 2026 GMT
        Subject: CN=d2327260dfd017fa00e0f8ea5672a3250ecb03d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0d:31:87:30:21:ba:8d:01:c1:e9:4c:0e:be:
                    84:8d:da:09:60:7a:18:e1:9e:e5:c5:ce:d4:cc:3b:
                    cd:01:a1:d8:c3:5d:ba:52:85:12:4e:b1:6b:b2:b5:
                    67:b2:8c:5a:b4:6e:e2:8f:d0:19:ab:92:c9:b9:24:
                    59:0b:09:1a:2d:73:cf:62:e0:44:27:7d:ba:b2:b9:
                    0f:c2:7d:62:8c:18:7a:f7:25:1b:5f:e1:02:a9:80:
                    8f:f6:a7:c2:39:a0:84:6e:54:9a:77:b7:51:a7:4c:
                    22:51:71:e5:18:3c:ff:46:e9:34:95:99:e4:ce:0f:
                    a3:e6:48:cd:6c:4b:14:0e:05:c9:f8:d6:d1:3a:3f:
                    85:17:b4:de:c1:18:2c:27:14:3b:ef:cf:d8:74:02:
                    79:88:33:e6:4d:30:73:d2:28:5d:fc:bf:90:4c:11:
                    da:2e:a5:02:ad:d3:e0:b7:70:7d:13:43:f1:51:7c:
                    f6:a5:b7:d3:74:c1:38:1a:84:11:8a:80:b8:d6:6d:
                    26:16:aa:bf:58:ff:1b:25:b8:53:94:a1:35:81:9d:
                    ec:6e:7f:e2:f5:b3:c0:b9:0f:47:4a:ee:89:d3:7c:
                    dc:dd:93:d5:e1:d3:e4:de:71:c1:c2:97:89:6a:e7:
                    cc:12:f6:35:9d:c4:bd:05:82:3c:3d:85:53:5f:b5:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:32:72:60:DF:D0:17:FA:00:E0:F8:EA:56:72:A3:25:0E:CB:03:D8
            X509v3 Authority Key Identifier:
                keyid:C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4f:1a:51:65:9e:62:c5:e8:85:d0:ac:fd:05:e0:3c:b1:bb:
         1b:c0:d4:35:e6:5a:48:59:8e:db:c6:65:16:45:e5:26:fc:f4:
         8d:f5:b0:26:9d:de:53:db:16:89:d6:bf:a6:14:aa:b3:d2:19:
         fa:28:ca:3e:f3:16:46:cf:2c:e0:c8:3f:fe:74:02:53:9d:7f:
         fe:d9:5d:d9:65:92:07:29:1c:a5:31:97:61:82:9a:c6:19:6e:
         07:bb:3e:d0:ca:92:c6:d0:2e:b9:08:2c:e2:2d:67:20:41:ed:
         e5:35:11:ac:f8:06:2a:5f:3c:76:f6:e3:6c:05:c8:36:2e:6a:
         ea:74:01:4d:92:a0:6d:0c:4d:cd:de:6a:e3:ef:31:c2:c7:c3:
         c0:8a:59:db:fd:cf:77:ae:0f:da:98:78:c5:04:0e:df:26:6c:
         1a:47:d1:79:64:89:d1:c5:40:e3:16:a7:22:83:a7:91:bb:08:
         7b:ab:8e:15:56:f8:0b:35:bd:30:fd:72:a4:86:ab:e1:f0:cb:
         22:89:65:0e:4a:72:2c:08:1c:c5:ce:48:b5:38:1c:92:c1:3c:
         83:ec:f6:8d:f6:ff:2b:5c:e7:12:a8:01:00:b2:91:c8:6b:17:
         d6:67:ba:0b:fb:3c:1d:03:ad:c8:29:e4:00:66:2d:1f:81:cb:
         0f:c9:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:21:44 2026 by rpki-client