Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
File:                     WLPteKcQZof2-2jvIG7dzw696bM.mft (raw, json)
Hash identifier:          g8nNP4uZGkC5BBKx6LXD04rBlxm9E+XvLBVtuXya4Xk=
Subject key identifier:   67:9E:08:B8:4C:F0:F9:70:2A:44:A9:5B:66:CC:59:2C:5B:C0:2E:0E
Authority key identifier: 58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3
Certificate issuer:       /CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
Certificate serial:       019D37C0A1766C5F4D830F62EA828EB39714
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
Manifest number:          0D89
Signing time:             Sun 29 Mar 2026 04:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:04 +0000
Files and hashes:         1: WLPteKcQZof2-2jvIG7dzw696bM.crl (hash: VavpY854uzpz97VeEXhzjNd+NOMfy32KQfJr2aS1n7s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:a1:76:6c:5f:4d:83:0f:62:ea:82:8e:b3:97:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3
        Validity
            Not Before: Mar 29 04:01:04 2026 GMT
            Not After : Mar 30 04:01:04 2026 GMT
        Subject: CN=679e08b84cf0f9702a44a95b66cc592c5bc02e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:1c:d3:e1:ec:98:6d:f5:6e:11:4b:f2:d9:
                    93:f1:f6:b3:63:0d:1c:e8:e0:ee:2e:7d:6a:46:aa:
                    15:e8:dc:76:ff:ac:37:2a:7d:8a:af:ee:62:73:9f:
                    8d:24:35:12:c9:eb:5e:af:59:73:de:f4:5e:38:27:
                    db:b9:b6:73:39:5d:b7:61:0a:1a:0f:70:4c:ca:3f:
                    c9:39:bc:f7:6e:26:65:f9:8a:f8:97:a7:f7:e5:45:
                    e4:21:de:04:06:a2:83:7f:2f:a3:a7:c6:3f:fd:16:
                    29:e1:ed:9b:33:14:9c:46:6d:1a:05:9f:5d:71:36:
                    9d:ec:be:90:cc:51:bf:04:98:a5:46:4e:ef:c1:3e:
                    e4:f4:3b:69:7d:e2:ea:f3:75:e0:d4:35:dc:67:dd:
                    bf:ec:7b:e9:12:6f:87:10:9f:b1:3c:2a:53:68:9f:
                    e8:7d:65:01:da:7d:b6:9d:e7:22:e6:4a:38:11:6c:
                    06:e4:bb:41:d0:34:c4:13:ca:49:d9:73:4d:9b:16:
                    2d:0f:c4:c2:a4:30:1a:ee:76:b0:c7:40:b6:12:2e:
                    e1:b8:67:06:1c:3b:c5:ea:bc:be:50:c2:6f:8a:e2:
                    7a:62:a1:05:f4:98:9d:34:85:e7:a1:93:65:de:4b:
                    80:bc:27:e4:75:bb:5d:6e:bc:01:d2:46:e1:f3:b7:
                    4d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9E:08:B8:4C:F0:F9:70:2A:44:A9:5B:66:CC:59:2C:5B:C0:2E:0E
            X509v3 Authority Key Identifier:
                keyid:58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:72:89:de:61:05:ba:86:4f:10:97:11:f3:93:24:b5:54:0d:
         48:e8:94:c6:cd:9e:b8:62:d7:82:54:79:f1:e5:57:a9:28:21:
         6e:b5:d5:0a:2e:5b:b0:15:b7:a1:6c:2b:53:4f:a2:84:46:9f:
         84:db:23:9a:b3:2e:58:5f:a4:d2:e5:92:71:71:6f:03:88:61:
         bf:e7:53:d7:ac:b2:4c:ce:1d:1a:58:4e:f2:e2:0b:6a:11:ee:
         98:47:e8:02:df:a1:15:03:46:73:ef:e1:eb:40:d8:95:26:50:
         c1:10:c1:5e:4c:36:9b:90:63:fe:60:26:07:c3:bb:42:e1:d7:
         31:82:74:58:be:f0:6d:9a:4c:d3:0d:28:48:d4:69:b1:f7:c9:
         4b:9f:6b:68:7a:92:ee:f1:87:aa:b0:ca:6e:0b:f1:2c:6e:7a:
         84:5b:7c:8f:f1:82:c9:49:81:1d:5d:17:b7:b8:c7:74:5a:a6:
         3d:81:68:d4:c9:52:6d:36:40:c5:42:b7:4b:20:0c:62:9d:8a:
         3c:72:39:c7:c4:6d:89:c9:cb:77:e1:eb:d1:96:44:8e:c3:5f:
         67:4b:f4:68:c5:15:52:19:53:01:b1:1a:85:c8:34:d7:b5:7b:
         77:48:4d:1b:ed:4b:28:25:f8:8c:8e:ae:02:50:cc:4a:7c:a9:
         7b:73:8a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:28 2026 by rpki-client