Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
File:                     WSxpn4_svshH0zkLRljdPLIcUrM.mft (raw, json)
Hash identifier:          nQ/1S/xLP84JmLuU0rhyqj8xS5ZvcmcVx8jPUVcU54I=
Subject key identifier:   51:82:39:C5:6B:61:62:F2:7E:01:B2:3F:84:93:C9:57:74:35:0F:B4
Authority key identifier: 59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3
Certificate issuer:       /CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
Certificate serial:       019D98BD2ACF4264882AE189CE171DF377F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
Manifest number:          0670
Signing time:             Fri 17 Apr 2026 00:00:27 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:27 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:27 +0000
Files and hashes:         1: WSxpn4_svshH0zkLRljdPLIcUrM.crl (hash: wKhRjTDdxr9U8n5knrnP30HZCFNaICfDwISbvDvHkTg=)
                          2: ekH1YvPD-YZnP0TGaeNVBU9uPwA.roa (hash: yhXaGcbJjLQcOeY+d/XbKfWIjxXbIlwUIiih7HIWhjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:2a:cf:42:64:88:2a:e1:89:ce:17:1d:f3:77:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592c699f8fecbec847d3390b4658dd3cb21c52b3
        Validity
            Not Before: Apr 17 00:00:27 2026 GMT
            Not After : Apr 18 00:00:27 2026 GMT
        Subject: CN=518239c56b6162f27e01b23f8493c95774350fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:b8:9a:47:f4:5d:45:27:3d:05:20:f6:5d:
                    2f:42:a0:6e:8e:39:83:e1:29:c7:7b:59:aa:8b:bb:
                    a6:b4:32:46:eb:3d:a8:e2:93:9c:a0:41:3c:a9:0a:
                    94:38:d9:c3:6f:cc:5c:6b:c8:23:ec:90:49:ec:e5:
                    ce:e7:68:ae:4c:ae:3e:26:d1:33:ac:f1:5a:49:74:
                    38:f5:21:e2:e7:d3:89:14:92:08:2e:6d:db:c4:6b:
                    09:99:f8:c4:63:1b:77:40:a2:c0:19:bd:47:1d:b1:
                    b5:8d:2a:68:53:57:b8:0b:90:a2:04:fe:93:39:d8:
                    2f:37:89:e1:17:75:9b:7a:f7:f6:bf:93:e4:dd:31:
                    6f:22:16:0d:14:7b:64:29:f9:e9:c2:6c:ad:cc:1e:
                    4d:3b:c4:26:6e:51:67:dd:06:0d:d2:08:0a:82:a8:
                    98:4a:cd:80:bf:f8:98:64:9f:c5:f7:73:e6:d7:2b:
                    a9:a4:cc:bc:02:1c:bd:57:91:37:3c:f1:ce:5a:ef:
                    2e:fd:09:f4:da:76:77:86:2f:ba:0f:f2:b6:81:2b:
                    7f:f7:8d:4d:2c:69:37:bf:5f:ff:ad:ea:f1:61:df:
                    33:c4:99:46:4f:88:aa:7c:38:62:6a:b0:74:33:bf:
                    9f:1b:d0:ed:03:11:2f:f2:66:ee:ee:a2:89:85:cd:
                    85:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:82:39:C5:6B:61:62:F2:7E:01:B2:3F:84:93:C9:57:74:35:0F:B4
            X509v3 Authority Key Identifier:
                keyid:59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:82:68:51:c7:c0:7a:10:28:25:35:e3:17:03:d6:5d:9e:aa:
         65:65:1a:91:0a:33:2e:34:f0:0a:70:2c:a0:08:30:fa:cf:69:
         95:31:69:f3:24:b8:0f:2a:77:72:f5:ba:40:b3:cf:0c:c8:da:
         05:fc:2f:c4:9d:be:f4:8a:c5:0f:21:75:12:8b:f5:f3:01:6a:
         ce:f6:f5:a8:7d:ed:67:8f:a5:ad:4a:7f:1a:aa:b9:30:74:ea:
         75:dd:ce:f3:92:52:87:cc:b2:fc:f0:21:eb:2a:7e:a1:26:87:
         9e:ff:ff:a1:b6:3a:b8:12:b1:f7:ec:73:ac:5f:17:25:cf:62:
         4c:0c:fc:3e:d0:87:ad:a1:0c:c7:6e:0f:d3:c8:38:f6:b9:db:
         8b:a5:ea:57:6f:fb:9e:eb:07:e1:7e:47:9f:c3:9c:9d:99:7e:
         05:28:2c:03:14:13:62:bb:ad:13:0e:43:33:97:a0:b9:ce:30:
         75:04:6b:60:c8:1e:0f:fa:c1:98:e5:71:87:9a:2b:54:7c:7f:
         84:44:ab:1d:9c:b5:3f:a0:33:d1:08:ef:4d:d9:d5:af:46:c7:
         5e:b3:30:70:eb:df:70:6b:0b:28:da:88:98:f1:1d:f3:f5:2f:
         e0:8f:ea:68:e6:3d:6f:bf:3d:e2:0b:59:4d:ce:4a:3f:1b:e5:
         16:8b:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:09 2026 by rpki-client