Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          KVC6+LgA6HWrAHjV77ipWw4dAzOf7rJItpyfTXU1uzY=
Subject key identifier:   63:EE:E1:D8:61:E8:5E:15:E5:8A:C6:82:4E:33:07:2A:F5:7A:F2:29
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       019CABD926D7175B542D79A9A8292CB94550
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          070F
Signing time:             Mon 02 Mar 2026 00:01:01 +0000
Manifest this update:     Mon 02 Mar 2026 00:01:01 +0000
Manifest next update:     Tue 03 Mar 2026 00:01:01 +0000
Files and hashes:         1: FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa (hash: cK6XeGopFBU42xQOw3pXSfyyWEVVyNojCMYqWc1ytZU=)
                          2: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: Eu5gQy8HgCd9+fY5dHEK2kKDy7/68LLu8Zm6xUS0y2k=)
                          3: nGiD_VuUEB-534WjNRVtjKrImS4.roa (hash: bHtWWwpySfNp2/DWZty3G/IOwsGExDDGytrN6bgjIio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:d9:26:d7:17:5b:54:2d:79:a9:a8:29:2c:b9:45:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Mar  2 00:01:01 2026 GMT
            Not After : Mar  3 00:01:01 2026 GMT
        Subject: CN=63eee1d861e85e15e58ac6824e33072af57af229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3a:8c:2d:d0:47:60:37:69:ca:bc:41:bf:e5:
                    39:16:6e:5b:85:1d:8c:ed:ea:ee:41:cf:cf:c4:3e:
                    ad:c6:e3:3f:36:a5:76:71:08:db:06:50:44:d7:64:
                    22:54:24:f9:9b:b3:ca:5f:8a:c6:df:e0:2e:b5:dd:
                    ff:e5:79:b7:1c:15:70:22:cf:7b:4f:ab:f8:dc:c2:
                    ba:31:41:81:d1:90:ae:8b:85:ee:84:8d:d8:7b:a2:
                    d8:33:ec:cd:1e:9f:6d:d7:6d:8b:ee:b6:b5:3d:ac:
                    00:e0:4e:25:fa:0e:7f:95:72:45:84:1a:9e:c2:16:
                    29:20:48:c4:f3:da:7a:2f:b6:b9:b9:ee:e3:d3:2e:
                    fd:61:f6:60:d2:9a:82:d3:de:33:c7:81:27:94:3a:
                    bb:81:08:70:70:e4:a2:81:29:61:ff:18:2a:ca:b2:
                    8b:63:ef:40:22:a5:c6:96:33:55:01:41:a6:8e:fa:
                    f6:cf:d1:69:7f:45:9c:01:ad:8f:e7:83:10:23:1e:
                    d9:41:7f:ba:b2:8d:6e:24:89:66:7b:0d:7d:47:ad:
                    79:dd:f7:e2:25:f0:e5:f8:cc:c5:d3:18:15:92:81:
                    7d:57:a8:79:38:80:52:fd:0d:4b:0c:16:06:f0:61:
                    96:19:d0:3c:68:82:20:1b:5c:e6:8d:87:a8:d7:51:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EE:E1:D8:61:E8:5E:15:E5:8A:C6:82:4E:33:07:2A:F5:7A:F2:29
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:05:41:b0:2d:12:c8:3a:c4:3f:f6:87:fd:a6:b7:a9:97:c8:
         a9:5d:1b:a8:ef:b0:f0:ac:37:1d:6a:d9:80:07:38:65:81:f1:
         47:e0:36:3b:1e:0d:04:d7:83:5c:32:d2:96:1c:82:9e:b1:08:
         9a:b8:4e:3a:5a:38:a7:a4:d5:50:fe:0d:02:51:5a:ab:7a:75:
         a6:78:66:5d:bc:0d:fa:ea:9e:95:1b:59:f9:8c:ae:c4:88:bf:
         25:27:43:34:ce:6e:e6:98:5a:b7:b9:2f:79:cd:71:30:f7:2e:
         be:e7:af:40:32:ec:6e:9f:10:97:38:7f:70:43:78:be:cb:0c:
         56:0e:41:db:95:1d:ef:12:3b:18:ec:85:56:48:4c:5b:e8:19:
         fe:d5:c7:6a:a5:57:83:b7:1e:89:14:54:32:d3:9b:28:5c:0a:
         e1:de:41:f3:f8:83:9c:7b:ea:fa:cd:1d:e2:41:4e:fb:89:29:
         11:d7:57:ef:9e:88:c1:79:0b:02:e3:03:fa:8a:6b:46:8e:b8:
         26:b5:29:ca:b0:55:68:33:c2:bc:6f:ce:fa:50:fe:de:f2:ae:
         a3:38:d0:a0:0d:36:ed:a1:08:61:c5:65:a3:dd:42:28:91:13:
         c5:cf:a2:84:26:90:52:7c:d3:d1:01:79:81:de:26:e2:19:ca:
         8f:7f:09:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:10 2026 by rpki-client