Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          g++MgTzI/yYHsCJg7kYpB2mjwJbBuNTaAe6lGKUQ9P8=
Subject key identifier:   0C:EB:36:68:E9:04:EF:B8:B8:DE:0B:70:70:D0:A8:73:23:C3:C0:5D
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       019D389BFFBED5E2AEE063EA19657C69DD50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          18A7
Signing time:             Sun 29 Mar 2026 08:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:40 +0000
Files and hashes:         1: OeUkA-MxuBY0MCQq2lEXcd7LDp0.roa (hash: UNu3aGNU9iKX9W+pdSbXjn6MIdvAzU/dQ2Ruk579C2c=)
                          2: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: YX/Hax+ZEFgxbQxiqUbsfW04dDAbvqCSF2ZM+wLbV40=)
                          3: _LKma__zHFDMDJXCFflTJpsJLLo.roa (hash: d16O3qOwG02xNq1nLgFHuKeCvYDVgJiMUkRZsNPQaBE=)
                          4: klXMh69HPg_6eKMxQVgx6zhe1QE.roa (hash: vG86oygd0IFm9Rxuz3bX4pixPzbUrSLnke23ygFfpi4=)
                          5: p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa (hash: r27HfBWDMYwyRF//qyu0OtsF9qIPudC+kjCHFI00zPo=)
                          6: pgoXDP1h0nWBwbv9FG2W5mHI85k.roa (hash: OZdZQ/KCgv22adlJuUYrt3hL7fGkm6hBd3n3kVRfbgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:ff:be:d5:e2:ae:e0:63:ea:19:65:7c:69:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Mar 29 08:00:40 2026 GMT
            Not After : Mar 30 08:00:40 2026 GMT
        Subject: CN=0ceb3668e904efb8b8de0b7070d0a87323c3c05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:09:29:9c:53:b7:4e:77:6d:d3:5f:00:c9:45:
                    15:c7:67:bf:d3:79:a5:89:81:9a:74:f9:8d:db:9b:
                    f2:e1:8f:cf:65:30:7f:29:d8:11:20:ae:4f:c8:f5:
                    5f:4e:66:34:75:fa:cb:5f:9b:9e:8c:1f:f4:a6:ac:
                    4d:93:db:ee:de:83:c6:da:4f:f6:5e:a8:95:a8:1b:
                    4a:ec:7b:ff:14:f2:0c:6f:5d:ff:ef:75:3a:00:0b:
                    42:2c:69:e9:69:36:8e:c4:e7:a8:18:c7:a8:28:ad:
                    10:56:9e:b3:f3:59:3a:ad:65:77:94:8e:9f:49:1b:
                    c0:40:e2:f8:5b:72:de:82:30:1c:e5:68:14:dd:2f:
                    8a:b4:b7:85:9f:ca:b3:75:d5:4d:ad:19:6e:c9:e9:
                    d2:37:e9:b3:dc:bc:6a:82:e5:39:f5:1d:6e:4b:09:
                    f7:ea:02:e4:4b:52:2b:59:ab:00:15:f0:cf:8d:66:
                    fb:a4:8f:c2:a0:7b:41:a7:37:d7:28:da:21:54:63:
                    30:bb:ab:23:ae:7c:cd:66:b9:35:a3:63:90:98:c9:
                    7f:97:47:69:b7:e5:b7:e8:09:0f:bd:4e:74:2c:e6:
                    bb:3c:56:2b:71:87:b6:57:98:5c:29:89:d7:e2:72:
                    ac:97:ed:d0:a0:cf:e6:47:09:4e:e9:29:0f:03:5a:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EB:36:68:E9:04:EF:B8:B8:DE:0B:70:70:D0:A8:73:23:C3:C0:5D
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2c:01:1a:f5:58:22:57:28:db:41:85:63:ce:dd:7e:fc:e6:
         fb:ad:24:1f:82:fb:70:3c:19:55:74:85:a1:73:59:40:14:a5:
         9f:25:54:53:79:ad:46:c2:bf:e0:67:9b:0c:d1:69:3c:84:45:
         b4:47:22:94:3f:a8:66:58:e0:ae:03:bf:2c:05:08:c0:49:45:
         11:62:2c:e2:69:d9:bd:06:f4:d1:9a:a4:5c:08:92:a2:19:23:
         db:cf:f0:17:09:a5:a8:58:86:ce:a1:c8:71:35:4d:5e:bb:e2:
         1e:16:f1:b9:20:fb:a2:25:7c:52:fd:91:b9:5c:8e:20:79:dd:
         6d:1d:5e:e3:6b:db:30:f9:11:f1:04:ae:4a:f1:50:3f:85:74:
         ea:51:d2:8e:8e:ff:c0:ff:63:58:68:0f:a2:6e:77:f9:df:61:
         8c:74:d1:63:9d:d7:dd:e9:3b:a4:b3:08:9e:b0:b1:7b:35:a4:
         bc:bd:4c:4b:45:b0:f0:c0:72:92:a3:08:7e:a9:de:90:f6:d7:
         a6:89:84:b6:0d:af:20:34:fe:af:21:e4:ad:9c:2f:90:0e:bf:
         aa:73:32:4f:67:9c:51:ae:16:ce:bf:70:eb:a5:eb:25:bb:17:
         bb:a0:0d:f5:28:9d:a4:4d:25:96:32:c7:59:a4:c7:bb:1a:f6:
         87:ca:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:18 2026 by rpki-client