Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
File:                     WP3E4ivstTWhxX9LjcRBtTMWd-M.mft (raw, json)
Hash identifier:          cUN7HQMmW7QeTVbRIbBrjXn7oXfzgg8bupkAGiKxYuk=
Subject key identifier:   B9:F3:B0:8E:79:E7:B4:C0:6F:54:2E:87:34:38:9D:38:BA:8A:48:84
Authority key identifier: 58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3
Certificate issuer:       /CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
Certificate serial:       019D99D0B78A29F4C6AA264BD11410110DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
Manifest number:          1605
Signing time:             Fri 17 Apr 2026 05:01:25 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:25 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:25 +0000
Files and hashes:         1: CL5vgG8h2b9NiWwfbyTtqZf0yaM.roa (hash: R85d1yKqIezVVA7/iS4hXDWK5iZ8vOcLojDLQ5Lal/A=)
                          2: WP3E4ivstTWhxX9LjcRBtTMWd-M.crl (hash: XkVigGHG8fzYAwnMYe9YCO1wTl7NG/gw9n690ij/LAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:b7:8a:29:f4:c6:aa:26:4b:d1:14:10:11:0d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3
        Validity
            Not Before: Apr 17 05:01:25 2026 GMT
            Not After : Apr 18 05:01:25 2026 GMT
        Subject: CN=b9f3b08e79e7b4c06f542e8734389d38ba8a4884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:70:33:6b:62:42:11:96:fb:1e:23:03:41:0d:
                    6f:ba:ca:45:cd:8c:eb:7b:f2:56:a5:95:7e:c5:26:
                    62:9e:1b:d0:02:ce:7f:34:36:b0:25:f0:99:f7:40:
                    83:97:d5:8e:96:f2:ac:29:8f:0a:d1:44:c0:10:e2:
                    d2:39:70:98:72:8f:64:5a:65:ea:84:7f:57:4e:51:
                    8b:a9:36:e9:39:47:c5:4a:ed:ff:05:bd:a5:f7:f7:
                    07:b2:2e:47:c0:18:c8:98:a8:76:35:85:ce:20:01:
                    57:77:16:a2:fa:6f:c8:a7:e8:53:6a:6a:a1:30:e8:
                    5e:95:32:88:c2:38:58:39:62:9d:a1:09:82:12:54:
                    ab:64:19:cc:e0:8a:6e:54:c1:e6:f5:f7:29:09:b1:
                    c2:32:de:d8:95:27:95:60:8c:4e:8b:1c:fb:f4:0e:
                    f5:75:ff:5b:da:04:53:f0:0d:62:29:e7:92:2c:dd:
                    57:57:10:6e:57:9b:3d:74:99:9d:e0:25:52:9a:3e:
                    f3:91:bf:e1:51:7c:1c:48:03:2c:0b:9d:82:52:9f:
                    60:78:a1:c8:f8:c9:26:80:30:ea:3b:93:4b:63:01:
                    dd:ec:4e:44:58:01:86:5e:ce:2f:04:9a:59:65:5f:
                    66:45:0c:24:44:2d:83:f9:5c:82:b4:52:e8:78:75:
                    3d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F3:B0:8E:79:E7:B4:C0:6F:54:2E:87:34:38:9D:38:BA:8A:48:84
            X509v3 Authority Key Identifier:
                keyid:58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d3:a9:8c:22:d5:9d:a0:3e:31:59:5d:d4:ce:ee:1e:af:a0:
         bf:58:c1:44:0a:81:5c:89:19:70:72:c3:c4:4f:cf:95:52:ca:
         a6:a0:fb:80:86:38:e3:6a:2e:b2:c7:65:09:5e:d5:ae:b8:d9:
         48:db:20:84:53:01:9e:39:9f:2a:af:1d:e6:46:57:ba:3f:3a:
         c5:cc:71:3a:32:0d:56:67:6e:7f:85:94:ba:96:8c:2b:cf:f7:
         24:6d:73:2a:31:00:4d:71:6b:eb:84:ef:7b:dd:98:a8:42:64:
         5d:7e:00:b7:df:aa:dc:5e:54:14:24:72:91:db:06:5b:79:98:
         48:13:fd:9d:52:24:fc:c9:96:c8:25:2b:95:c0:e2:57:1a:0d:
         bd:2c:ab:99:db:75:87:b4:7f:c7:e0:9f:0c:0d:22:c1:5f:82:
         b6:9c:84:b2:9b:27:8d:83:24:24:d4:92:18:d4:8d:97:77:3d:
         9c:47:79:e4:43:bc:dc:37:8b:cb:8d:f0:64:d2:72:e3:af:50:
         3b:e1:46:ab:d3:6d:03:0a:97:d2:50:b5:26:0a:f1:cd:13:33:
         fc:85:5f:56:14:47:71:74:cc:bf:af:c1:c3:f1:01:7a:5a:35:
         0e:84:12:6e:f5:1c:fc:e1:17:9c:fd:5a:36:4b:42:ad:55:5c:
         34:f2:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:38 2026 by rpki-client