Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          Bt3GoMEskmFdpxPGk51RoYpWG9rY/mEEfUqRclUu7b4=
Subject key identifier:   B3:38:38:E7:04:91:70:A5:25:C4:90:CB:24:77:66:77:F1:A2:4D:BA
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       019DA3414778948EFA2EEECF9CA5454E8754
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          0880
Signing time:             Sun 19 Apr 2026 01:00:57 +0000
Manifest this update:     Sun 19 Apr 2026 01:00:57 +0000
Manifest next update:     Mon 20 Apr 2026 01:00:57 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: +IL2pckFPa6vWIFTEKGaUMMCsEjxmhpgvazdj1ZkIdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:47:78:94:8e:fa:2e:ee:cf:9c:a5:45:4e:87:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: Apr 19 01:00:57 2026 GMT
            Not After : Apr 20 01:00:57 2026 GMT
        Subject: CN=b33838e7049170a525c490cb24776677f1a24dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ab:15:21:5e:f7:83:1f:84:a9:44:41:87:82:
                    a9:cd:6e:7b:c1:95:c0:2d:f9:2c:1f:c4:58:73:98:
                    85:f3:d2:9e:31:24:5f:42:89:79:3c:d1:70:37:cc:
                    23:e7:8f:d8:53:22:52:af:62:06:d7:aa:01:17:20:
                    a9:fb:ed:92:55:de:93:36:c8:3b:57:74:11:e7:d6:
                    54:b2:7a:fa:93:76:ed:05:b4:75:ec:40:cf:49:26:
                    00:33:df:28:8e:5a:44:d7:f6:15:ac:35:f9:e7:74:
                    71:cd:07:71:06:df:9f:94:d6:fe:49:6c:f0:8f:7b:
                    4d:5f:30:fa:d2:2a:14:aa:66:8f:7a:3d:bf:a4:7a:
                    6f:56:19:43:a5:5a:03:92:02:03:74:c2:57:d1:23:
                    30:04:3f:ff:95:71:8d:67:06:09:d3:63:c1:f9:5b:
                    e1:f7:49:53:a2:71:59:50:8e:cf:0b:43:8e:c0:61:
                    5e:8f:7b:bb:52:e8:48:61:19:83:a3:4a:31:85:ac:
                    ab:78:51:84:11:01:44:08:c1:d3:2d:ff:97:bb:d2:
                    fd:7e:dd:05:d5:32:a7:23:ce:8c:78:91:29:f8:15:
                    78:3f:d3:c5:04:e3:5b:cf:55:5a:e5:3a:18:51:ea:
                    cd:20:e8:d1:70:9c:df:2a:db:7e:cf:dd:e0:0d:60:
                    7a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:38:38:E7:04:91:70:A5:25:C4:90:CB:24:77:66:77:F1:A2:4D:BA
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ee:ae:a7:6d:50:6c:01:33:f4:65:2d:63:cc:b3:8b:0f:9d:
         be:9b:95:4f:14:c7:42:6d:f9:78:11:4c:a5:03:b6:e7:a0:47:
         7c:2c:87:18:09:38:7e:63:95:64:8b:68:91:8a:fe:15:4f:01:
         ce:43:b1:22:dd:34:49:5c:63:b2:fe:43:cb:3a:93:c3:79:4f:
         ca:cb:e8:09:2b:22:ec:19:83:60:e2:8b:55:2a:2e:e7:ed:92:
         cc:59:d5:3a:56:53:e6:9e:7b:fb:76:bb:4e:87:5c:22:ad:db:
         18:82:b2:4c:42:23:ce:67:e6:91:3e:a9:cb:9e:dc:b6:38:af:
         17:5b:58:57:28:66:fe:26:6f:7e:d9:db:8f:b3:85:6e:34:d6:
         6c:43:c7:9f:9e:ad:07:ca:fc:07:89:94:bc:b4:da:a2:3e:0a:
         7b:37:9a:0a:b7:46:3d:50:03:f8:64:13:7c:0f:51:8e:ac:f5:
         65:b1:11:29:58:52:15:7f:28:fc:5e:94:75:73:c5:5d:fd:22:
         47:59:ee:51:87:58:44:ae:76:d3:4f:d6:15:6d:61:d2:36:71:
         4d:40:b0:e8:cd:e9:88:7b:92:5c:36:39:45:50:1b:00:9f:20:
         6f:9f:e7:f3:b0:95:f7:31:78:7c:59:40:c2:b5:3c:c1:6a:c8:
         8b:8f:72:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:18 2026 by rpki-client