Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          sig9U4V/CQySGC2GRnOg7ebQK8J5HOO3eu15KXG8LIg=
Subject key identifier:   B0:53:41:73:6E:7E:53:03:CF:76:1C:7C:9C:33:98:12:99:45:2D:B1
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       019F3E2B4DFF3788F036E91086889261A938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          19B3
Signing time:             Tue 07 Jul 2026 20:00:52 +0000
Manifest this update:     Tue 07 Jul 2026 20:00:52 +0000
Manifest next update:     Wed 08 Jul 2026 20:00:52 +0000
Files and hashes:         1: OeUkA-MxuBY0MCQq2lEXcd7LDp0.roa (hash: UNu3aGNU9iKX9W+pdSbXjn6MIdvAzU/dQ2Ruk579C2c=)
                          2: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: BALsgH4Q6GHuX2CwR6cE2zVgBKDrYxqKp6qTVNfCmFY=)
                          3: _LKma__zHFDMDJXCFflTJpsJLLo.roa (hash: d16O3qOwG02xNq1nLgFHuKeCvYDVgJiMUkRZsNPQaBE=)
                          4: klXMh69HPg_6eKMxQVgx6zhe1QE.roa (hash: vG86oygd0IFm9Rxuz3bX4pixPzbUrSLnke23ygFfpi4=)
                          5: p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa (hash: r27HfBWDMYwyRF//qyu0OtsF9qIPudC+kjCHFI00zPo=)
                          6: pgoXDP1h0nWBwbv9FG2W5mHI85k.roa (hash: OZdZQ/KCgv22adlJuUYrt3hL7fGkm6hBd3n3kVRfbgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3e:2b:4d:ff:37:88:f0:36:e9:10:86:88:92:61:a9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Jul  7 20:00:52 2026 GMT
            Not After : Jul  8 20:00:52 2026 GMT
        Subject: CN=b05341736e7e5303cf761c7c9c33981299452db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:18:b3:70:33:f4:d1:c9:8f:6b:70:18:88:
                    6e:0d:e5:47:38:39:c5:42:b7:f1:ae:46:13:7e:cb:
                    ec:2a:3d:78:ee:df:59:23:bf:4a:57:ae:37:09:ba:
                    23:15:bf:88:3e:56:fe:63:9c:18:07:50:d0:cd:99:
                    13:72:6b:92:e2:a9:02:ed:9e:67:e7:58:de:06:15:
                    bc:17:e3:11:fa:a3:df:6b:a1:d7:96:23:2e:8f:09:
                    06:4b:8d:af:e1:b6:fb:04:8a:c3:da:db:05:67:45:
                    4d:ca:0a:20:17:36:4a:b0:cd:84:a1:8b:ed:4d:84:
                    61:0d:1e:ec:a6:05:b0:73:99:e1:e3:e1:16:91:5c:
                    aa:12:32:a8:27:3a:bb:5a:43:3e:3e:22:c7:9c:d0:
                    bc:8d:3e:28:1e:92:dd:ed:36:0c:8b:d4:80:58:1c:
                    c8:70:d1:f6:7c:77:61:e9:38:42:f0:58:cc:5e:14:
                    e0:d7:05:35:e5:1f:27:9a:06:61:aa:2c:2d:98:a7:
                    72:9c:2e:11:f5:53:1d:62:a9:91:c4:e4:53:2b:da:
                    71:0d:51:45:1c:02:7c:4d:12:e7:e1:49:29:36:28:
                    b1:26:71:06:75:db:05:0a:df:90:ab:96:f4:39:1e:
                    a5:5f:3f:a4:9c:25:1b:20:86:74:55:58:76:bb:52:
                    ac:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:53:41:73:6E:7E:53:03:CF:76:1C:7C:9C:33:98:12:99:45:2D:B1
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:99:7c:d8:ae:44:bb:f8:16:dd:95:55:35:e3:c1:43:fb:ed:
         fa:ef:ad:82:8f:b9:52:9c:0d:0a:37:74:b9:f8:d0:c0:39:fa:
         bf:9e:1d:18:bb:1d:84:f3:3d:bf:4f:19:b3:d8:58:29:70:ce:
         cd:c7:c9:b3:03:17:3b:40:08:3c:49:83:45:0b:51:00:cd:19:
         34:ad:a0:f6:a5:05:25:7a:39:a3:40:1c:da:fb:9e:75:7e:d2:
         2e:47:1f:fa:0b:3b:34:c6:28:46:02:52:98:df:d9:2c:76:bb:
         90:86:ee:bc:0b:a9:55:2d:60:b4:21:bd:eb:b3:71:73:ed:a5:
         2b:fb:3f:7c:87:4c:3d:2b:0a:37:eb:c8:91:ec:3d:b5:03:5b:
         df:3e:8e:69:65:fe:3e:f4:5d:16:9b:53:37:25:da:f9:cd:2f:
         87:79:00:b9:ff:20:28:d6:09:43:2c:67:5b:76:18:89:a3:8d:
         97:4f:6d:39:04:c5:dc:94:48:e8:5a:95:cd:21:f9:ad:92:00:
         ac:b2:9e:d3:bd:e8:3a:b6:d6:75:f7:26:6a:ff:6d:95:d4:a8:
         90:b1:f4:b4:87:6a:4e:7b:57:a0:d3:71:b8:6f:2e:e5:da:51:
         ce:64:8a:40:eb:63:98:ee:bb:f9:e3:a4:37:2e:df:a4:4a:30:
         f6:cf:e1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 23:12:47 2026 by rpki-client