Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File:                     WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier:          roFa9JPZwRQuckqxySgZcamjcD6uGx1YdXg1ycTqVA8=
Subject key identifier:   1B:B6:E2:7E:F4:26:63:AF:C9:83:E8:BD:41:2E:F4:7B:F7:D4:A4:A6
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer:       /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial:       019D3A53791E6A23B8D36D7DECAA656938F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number:          188C
Signing time:             Sun 29 Mar 2026 16:00:42 +0000
Manifest this update:     Sun 29 Mar 2026 16:00:42 +0000
Manifest next update:     Mon 30 Mar 2026 16:00:42 +0000
Files and hashes:         1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: eyeefV9XvQ7L8yYIgkeB5J0o5xkaZsES3T4CNDi6xBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:53:79:1e:6a:23:b8:d3:6d:7d:ec:aa:65:69:38:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
        Validity
            Not Before: Mar 29 16:00:42 2026 GMT
            Not After : Mar 30 16:00:42 2026 GMT
        Subject: CN=1bb6e27ef42663afc983e8bd412ef47bf7d4a4a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:c2:02:73:05:cd:be:de:8c:f5:9b:2f:31:
                    ba:f8:bb:2e:7c:1e:1b:13:20:b8:58:b4:58:3f:bf:
                    fa:4a:3c:6a:8f:16:89:d5:be:75:8e:30:5f:e9:63:
                    ae:c5:3a:0a:17:e1:0d:58:19:b9:6e:0e:e3:04:d1:
                    b0:3c:28:a3:1f:58:eb:59:27:08:ad:0a:bb:49:21:
                    6e:79:b3:92:79:2e:85:ee:87:3b:74:9b:1c:0c:5b:
                    07:e5:11:be:e4:25:13:30:6b:64:a7:ed:9b:fb:60:
                    1f:49:17:b2:57:9c:ec:9f:ed:7f:b9:b9:e4:c1:fe:
                    82:bb:f4:22:37:72:0f:dc:1c:c2:49:24:65:68:2c:
                    f8:24:0a:a9:66:aa:5e:5a:5b:d8:a5:d9:24:35:f4:
                    05:9d:55:8a:c2:45:dc:b2:ff:6c:c1:2a:d5:27:27:
                    b1:a3:a2:6b:e5:59:76:a6:90:42:59:fa:b1:35:38:
                    ef:e3:2e:2f:80:44:61:04:7c:b4:38:87:40:2e:7e:
                    0f:7f:8d:b4:7e:a1:e1:d1:14:4a:65:da:de:e0:d3:
                    a3:f7:13:87:27:b1:73:38:46:a2:a7:41:c9:6b:3d:
                    de:9f:f8:05:35:69:c6:73:95:ca:6c:53:b2:6a:28:
                    24:e2:a4:cb:dd:a7:6a:51:fe:be:a8:85:b5:17:ff:
                    0d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B6:E2:7E:F4:26:63:AF:C9:83:E8:BD:41:2E:F4:7B:F7:D4:A4:A6
            X509v3 Authority Key Identifier:
                keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:3f:68:99:d7:ba:c4:e6:ec:ca:c4:f3:af:d3:6d:35:1f:66:
         68:2a:f6:2e:4a:0e:74:d7:63:b8:e3:6c:54:37:c7:5b:7c:97:
         45:f3:a3:fe:df:0e:b4:ce:69:0f:8a:26:2e:9e:21:b1:26:81:
         f1:6e:95:ce:ac:63:e1:9f:cf:25:82:b7:03:cb:bd:95:02:7d:
         14:67:4d:28:78:e6:97:ab:f6:49:62:52:3a:e6:c1:86:bc:0a:
         9c:f5:ee:de:a4:57:23:4a:87:ae:87:2b:b1:6b:23:db:6a:44:
         ba:79:4a:16:c0:0c:f1:97:f8:da:42:66:4e:03:e5:60:2c:11:
         c0:a4:22:11:cc:c6:2f:db:8a:1d:7d:c0:22:47:44:87:db:a2:
         bc:6e:14:d6:f9:25:16:2e:5c:a1:f5:a7:4e:e5:da:3a:27:14:
         61:e3:4d:a8:ef:38:dd:4b:6c:58:af:f9:5e:4b:0d:42:01:eb:
         30:7d:5e:2e:b2:48:4c:f1:6a:98:77:eb:c5:05:00:88:e8:3b:
         c7:0a:40:2b:6e:99:a4:fa:ce:20:51:c6:37:13:59:9f:13:f9:
         ce:80:2b:76:a7:1e:8d:f0:20:a2:d3:28:25:b3:e2:44:14:cb:
         9a:a8:77:9f:1d:11:da:82:2f:80:44:40:9b:5c:15:54:85:2c:
         0d:ab:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:27 2026 by rpki-client