Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
File:                     WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft (raw, json)
Hash identifier:          oqFvbhrbKTED/MjWvPePbeyzBTfSJS57Hry/unzNGJ8=
Subject key identifier:   83:D5:B7:3D:C9:E8:3D:17:7D:B4:63:DC:3D:CA:83:F6:79:F9:11:D0
Authority key identifier: 58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74
Certificate issuer:       /CN=5812db6bf70652bfb45bebfb25054a57f9799f74
Certificate serial:       019DA4C1A98542B6BBB93750F2A3CAE567E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
Manifest number:          D9
Signing time:             Sun 19 Apr 2026 08:00:48 +0000
Manifest this update:     Sun 19 Apr 2026 08:00:48 +0000
Manifest next update:     Mon 20 Apr 2026 08:00:48 +0000
Files and hashes:         1: WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl (hash: fI0Kh3eaz+Z53s0sFRIjfQleciOavb2MNomJecR8MLs=)
                          2: XrTneSBYqqy106mabxkh4w7evJo.roa (hash: m5E5vycsGrzxgE4v1Xbbf+YHA1i0THF2g2GCWtHz6u8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 08:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:c1:a9:85:42:b6:bb:b9:37:50:f2:a3:ca:e5:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5812db6bf70652bfb45bebfb25054a57f9799f74
        Validity
            Not Before: Apr 19 08:00:48 2026 GMT
            Not After : Apr 20 08:00:48 2026 GMT
        Subject: CN=83d5b73dc9e83d177db463dc3dca83f679f911d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:69:1e:9a:aa:00:f0:c3:c1:83:b7:ac:36:90:
                    b5:88:92:e5:05:54:65:fe:27:59:8f:9c:f8:4f:27:
                    1d:ab:58:26:07:2d:49:f4:97:d1:6f:94:ec:dd:ff:
                    7e:ca:5c:80:d9:4d:cc:93:2c:11:41:19:fb:47:35:
                    e3:b0:71:af:03:87:ca:c3:7e:e3:09:72:14:72:b5:
                    f5:4c:8b:b2:e0:28:6e:56:d6:e3:da:c7:99:c8:f4:
                    a1:f4:ba:83:cb:ce:12:e2:33:dc:f7:77:5f:87:5a:
                    38:7e:25:e9:3d:44:80:3e:48:62:2a:b8:08:c9:b1:
                    4b:59:e1:b5:33:27:82:63:48:53:18:f6:28:81:e5:
                    00:98:81:a7:2e:7f:10:52:4f:6e:a9:c9:50:b2:76:
                    06:10:06:fa:77:33:df:5c:6a:ed:0e:49:bd:75:9a:
                    87:33:0e:7a:8c:c3:06:71:2a:fb:43:d6:17:9a:c3:
                    66:c2:78:a5:ff:dd:5d:d7:79:71:b8:c6:b5:26:35:
                    8d:1e:46:93:5c:23:e8:bc:12:23:f6:27:db:50:69:
                    89:36:16:6e:5c:93:1b:53:96:d6:93:8b:bb:34:cc:
                    db:e8:d3:7c:c1:69:6a:6f:d2:1f:7b:61:db:44:51:
                    70:89:c5:99:46:dd:7f:3d:61:28:5b:1a:07:3b:4d:
                    ed:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D5:B7:3D:C9:E8:3D:17:7D:B4:63:DC:3D:CA:83:F6:79:F9:11:D0
            X509v3 Authority Key Identifier:
                keyid:58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:f6:17:f4:df:9d:dd:3e:e3:6e:d7:53:42:15:a2:08:97:
         b8:32:23:f4:63:c1:10:14:2f:ea:fa:f3:76:cf:0a:70:81:48:
         e1:6d:84:8a:3c:af:f0:bc:6a:98:70:46:16:8f:2a:f0:7c:15:
         ad:6a:cf:28:b6:00:34:ed:8d:bd:a9:59:fa:89:4d:00:58:ca:
         08:45:43:a1:bc:65:4d:a8:61:bf:a1:ce:cc:80:63:b9:f9:4c:
         22:e2:a3:a3:9c:82:1d:7c:0a:9e:19:f9:a7:58:82:36:33:fa:
         c6:b5:94:c1:83:66:a5:93:78:f0:2a:a1:b5:c9:60:cb:fc:4a:
         90:bb:de:fc:ec:98:df:ce:2f:19:96:de:b0:b0:b7:06:9d:c5:
         75:04:03:fb:3c:0e:4e:a0:8e:bb:52:3a:b9:e9:31:9d:c4:fc:
         7e:54:a0:16:25:f2:1c:66:3f:0f:88:80:24:05:9c:5f:8e:98:
         d9:85:49:93:ba:0f:a8:90:a1:72:e0:0c:71:4c:32:a0:4c:9e:
         85:90:09:47:b1:c3:b5:98:42:21:61:cf:9f:d5:9a:db:78:59:
         37:1e:ff:9a:1e:6b:c1:c4:9a:5d:ea:96:81:7c:3b:1a:62:a6:
         de:74:1b:1a:ab:19:23:8b:ad:24:ac:ce:de:84:8a:a5:65:7f:
         a0:80:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:36:07 2026 by rpki-client