Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft
File:                     Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft (raw, json)
Hash identifier:          frUXdgcjILaBHg1errrpo8vijEWdChVFXw8HkGaNLKs=
Subject key identifier:   E2:34:14:CF:BE:DE:E3:F8:A8:CC:31:97:20:A9:CB:5B:57:93:B2:6D
Authority key identifier: 59:AF:A0:C3:F2:81:13:AC:67:A1:E8:19:20:80:CD:E1:C3:58:30:F0
Certificate issuer:       /CN=59afa0c3f28113ac67a1e8192080cde1c35830f0
Certificate serial:       019E31175236FC5F10D65FCC555546AA95FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wa-gw_KBE6xnoegZIIDN4cNYMPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft
Manifest number:          8D
Signing time:             Sat 16 May 2026 14:01:12 +0000
Manifest this update:     Sat 16 May 2026 14:01:12 +0000
Manifest next update:     Sun 17 May 2026 14:01:12 +0000
Files and hashes:         1: Wa-gw_KBE6xnoegZIIDN4cNYMPA.crl (hash: kLsB+Tt3OZTHYXVYUvqr4eNDYQpG9S93G8zOeIJBebo=)
                          2: ypii_wNcb-AwsNun99iVhbi3Qn8.roa (hash: 8vPnAsYHQ7w1UcsG/vmQIGbDPUOOaSicezwJeTgu3gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wa-gw_KBE6xnoegZIIDN4cNYMPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:52:36:fc:5f:10:d6:5f:cc:55:55:46:aa:95:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59afa0c3f28113ac67a1e8192080cde1c35830f0
        Validity
            Not Before: May 16 14:01:12 2026 GMT
            Not After : May 17 14:01:12 2026 GMT
        Subject: CN=e23414cfbedee3f8a8cc319720a9cb5b5793b26d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:50:81:21:35:44:e9:1c:6d:4b:f9:c3:56:bf:
                    e6:cf:06:13:d2:84:1c:f5:fe:5c:8e:46:f7:a3:f0:
                    71:4b:f5:ed:a9:f8:dd:86:fa:89:36:d9:e3:bd:43:
                    b4:84:d7:78:e6:9f:7b:af:8c:cd:30:89:46:eb:cf:
                    52:dc:56:bb:1f:2d:9d:00:ea:98:2f:19:d4:ce:b6:
                    52:1f:3e:36:28:55:ac:3a:66:85:68:46:ac:93:62:
                    30:38:62:39:8d:b0:a0:cc:90:8d:d5:56:0f:55:44:
                    bb:8f:db:66:fd:b2:63:bf:64:59:aa:59:90:8c:e8:
                    5e:50:d6:43:e6:e7:79:9b:b0:37:a7:d8:f5:d0:b3:
                    a9:90:d7:03:43:0d:97:23:a2:f6:53:46:92:3e:bf:
                    4a:32:c4:69:50:90:71:43:3f:c8:04:8c:a0:96:39:
                    5e:72:04:81:db:54:ad:61:6d:fc:c6:c9:64:32:87:
                    1d:4d:d9:4b:b2:98:0a:66:ea:98:51:48:83:30:73:
                    6e:f9:0a:41:e0:2d:c5:4a:91:5e:27:c9:8e:18:85:
                    4d:26:25:ea:ab:63:b2:99:95:3d:09:59:40:8b:c0:
                    9f:5b:e3:17:02:3b:d1:7a:ca:bc:d6:1b:5b:93:ae:
                    ca:3d:86:aa:1d:c6:44:19:16:15:87:aa:fb:cf:3a:
                    ac:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:34:14:CF:BE:DE:E3:F8:A8:CC:31:97:20:A9:CB:5B:57:93:B2:6D
            X509v3 Authority Key Identifier:
                keyid:59:AF:A0:C3:F2:81:13:AC:67:A1:E8:19:20:80:CD:E1:C3:58:30:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wa-gw_KBE6xnoegZIIDN4cNYMPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:56:be:81:31:a9:84:82:29:a8:b5:eb:b6:b5:07:6b:c4:21:
         35:50:e6:30:9f:2c:e4:30:ee:18:eb:19:02:f9:ab:d1:ef:f8:
         5b:f9:89:63:70:7b:f9:c6:6a:68:42:00:4e:a7:08:f6:7e:3f:
         8b:5e:ba:07:ec:2a:06:b9:68:d4:d8:09:e3:e3:fb:f8:a4:5f:
         88:9f:e0:ab:6c:0d:2d:93:d0:6c:f5:e4:54:eb:f3:6e:0f:d6:
         ff:6e:30:50:c1:d5:56:a5:69:80:0e:b0:dd:f0:be:96:ec:6e:
         fa:75:1a:5a:0a:c0:54:e2:2c:d2:d4:33:ce:2e:01:ee:1c:33:
         6d:8e:e6:a9:da:54:49:44:c0:df:8d:21:5b:4c:58:a9:3e:b1:
         40:74:13:ab:da:91:91:60:11:a8:20:99:2c:d4:a0:e7:7a:3f:
         3f:bd:a6:b9:ef:e2:19:7a:cc:48:b4:b4:1e:32:d6:40:e8:14:
         e6:dc:84:ee:18:4e:1e:cb:6d:72:d2:55:74:70:71:dd:ff:6c:
         1a:51:de:11:70:dd:f4:5b:8c:3a:a9:50:c1:d8:f5:36:0f:5f:
         8f:79:36:c5:fd:58:4c:78:41:bd:f1:81:06:16:d3:cf:59:fd:
         b9:cf:57:c1:2b:ca:1e:9b:d7:a4:b4:be:8f:f9:99:14:71:8c:
         0c:5c:36:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:19 2026 by rpki-client