Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
File:                     wlZYX2ctCeHXfOXq9OPhUfhgroY.mft (raw, json)
Hash identifier:          n01qypiYhKLEu/W5YUd7RRxjga8zQrpLGnq5dg5pTuc=
Subject key identifier:   B3:70:43:15:09:C5:D9:51:B7:C9:5C:22:08:7C:6E:0E:E2:CE:6E:C5
Authority key identifier: C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86
Certificate issuer:       /CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
Certificate serial:       019D371BA3D6D77F4EEC28E349FFF327B639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
Manifest number:          17A1
Signing time:             Sun 29 Mar 2026 01:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:51 +0000
Files and hashes:         1: wlZYX2ctCeHXfOXq9OPhUfhgroY.crl (hash: uTGSCcFVKRo27Su3F29YaIbOwpgwODJNH4rhbWPljvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:a3:d6:d7:7f:4e:ec:28:e3:49:ff:f3:27:b6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86
        Validity
            Not Before: Mar 29 01:00:51 2026 GMT
            Not After : Mar 30 01:00:51 2026 GMT
        Subject: CN=b370431509c5d951b7c95c22087c6e0ee2ce6ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:95:74:d2:91:52:ed:7f:1f:20:d7:6f:45:96:
                    a2:7e:7e:65:9a:02:ae:19:89:ee:64:86:1b:3d:85:
                    ee:16:e4:a4:d9:dc:d2:ee:b2:65:8c:ea:e4:fa:62:
                    48:d9:6b:4a:19:42:c7:a8:ce:d9:c9:82:43:df:63:
                    70:84:3d:66:43:84:43:ba:23:23:9a:c4:53:9b:f8:
                    8f:d0:c1:3f:6d:34:ed:a2:b3:15:8b:07:89:81:6e:
                    40:6a:1f:4f:19:1c:64:f3:fa:2f:33:c1:f1:05:89:
                    5a:98:3c:93:87:00:72:bb:9b:66:6b:e7:a6:fa:1a:
                    53:0c:1a:18:2d:91:ed:65:77:4e:9c:a3:0f:30:83:
                    a2:1f:2a:de:06:28:39:94:f7:85:7e:7c:5e:55:d7:
                    c7:60:eb:e8:0e:b6:6f:71:95:1d:55:6c:cc:3f:7c:
                    e6:f5:90:1a:31:7e:b6:32:9e:76:a9:8d:3d:91:f6:
                    10:cd:57:a2:97:08:cc:ef:1d:24:f3:41:52:e9:90:
                    ef:df:80:d6:94:e3:df:a7:92:b5:54:90:a0:3c:11:
                    50:f8:a5:41:db:b1:e2:c2:e3:cd:0a:3a:41:81:08:
                    1d:0f:bf:63:fe:c9:81:8e:2b:d0:9c:64:d2:15:fd:
                    bb:e9:70:c0:78:d3:5b:32:a7:93:6e:0e:f5:02:78:
                    f6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:70:43:15:09:C5:D9:51:B7:C9:5C:22:08:7C:6E:0E:E2:CE:6E:C5
            X509v3 Authority Key Identifier:
                keyid:C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f2:4e:2d:d1:14:42:2e:9c:1d:4d:fa:68:5d:51:68:25:33:
         c0:35:f5:d6:40:0f:92:53:63:5b:e7:3f:ad:63:ba:71:d8:6c:
         ef:c6:1a:5d:d0:dd:6b:d1:d9:c2:ab:c6:88:d4:64:25:c5:98:
         02:85:c0:73:db:81:55:95:b1:dd:6b:e5:fc:f7:fc:7e:37:53:
         6b:53:d8:c2:11:3c:af:b7:dd:ef:65:e1:d0:2d:04:bd:81:c0:
         b1:2a:54:fe:8f:bd:f3:dc:a3:29:59:ab:2e:b2:74:26:b3:7c:
         a9:ec:c7:92:4d:fa:96:78:2b:12:fd:f5:7b:98:ac:65:86:cc:
         70:59:1c:10:72:81:49:55:d0:93:cc:0a:0e:52:45:93:6e:29:
         07:e7:d2:f2:0f:d1:79:b9:cb:13:0c:3b:95:7b:16:34:da:01:
         6f:7a:fa:a3:97:1f:4e:39:de:bf:88:fb:2b:2f:73:48:04:cc:
         c4:00:ad:a8:6a:18:ba:fe:e7:6a:c5:b1:82:2a:53:67:82:e9:
         32:3f:3e:d4:99:6d:a6:3a:50:4d:2d:6c:7a:d9:d0:7a:82:f2:
         55:21:06:12:9a:36:bb:cc:44:a8:7c:a5:5d:4d:50:0c:3b:c7:
         fe:dc:56:6c:29:e8:83:b4:9d:30:86:76:69:ed:5d:d6:c2:65:
         30:2b:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:18 2026 by rpki-client