Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft
File:                     WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft (raw, json)
Hash identifier:          bzxR6hHrcLVRB0dvDpaNMuwalHFvVsKvaNH5ZR4BT4A=
Subject key identifier:   7E:1E:F5:AA:E5:93:0B:73:08:70:B2:A9:9B:A1:F3:67:63:F6:2A:74
Authority key identifier: 58:3F:AF:07:E3:EC:92:00:76:4F:27:3A:10:E7:B6:C4:B1:58:2E:A7
Certificate issuer:       /CN=583faf07e3ec9200764f273a10e7b6c4b1582ea7
Certificate serial:       019D996202C29214D3316A5B3052DC972E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft
Manifest number:          04D2
Signing time:             Fri 17 Apr 2026 03:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:30 +0000
Files and hashes:         1: KEe0DfowmHrAxvA0fwo8mIyP4gg.roa (hash: oYMGxUgCYMRovlwMfXITS66TqQt8BdKaT19d0oBTLho=)
                          2: WD-vB-PskgB2Tyc6EOe2xLFYLqc.crl (hash: MhY7LNDuPOxw/YriH5N9r9ok5frg0/P+vmzfkLYH0eE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:02:c2:92:14:d3:31:6a:5b:30:52:dc:97:2e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583faf07e3ec9200764f273a10e7b6c4b1582ea7
        Validity
            Not Before: Apr 17 03:00:30 2026 GMT
            Not After : Apr 18 03:00:30 2026 GMT
        Subject: CN=7e1ef5aae5930b730870b2a99ba1f36763f62a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:aa:8a:2c:14:07:55:91:7e:f0:1f:2a:4d:bc:
                    9e:6c:86:c5:52:e4:2d:1d:e0:77:fa:ab:a0:51:19:
                    c7:33:f1:e0:2c:a4:2e:9b:f6:59:de:2a:37:da:94:
                    87:dc:3f:cd:b0:78:49:15:95:70:e3:20:42:ee:7c:
                    38:3d:5f:c2:65:fc:b8:d7:9c:bf:b0:30:b2:6e:08:
                    ac:1c:6a:9e:c3:7d:31:aa:cb:0b:1c:8b:4f:6d:d7:
                    65:cb:f3:7a:4e:48:b5:9a:bf:8c:65:4e:5c:f4:4e:
                    dd:25:41:3a:45:d2:58:11:44:f2:f3:d2:b3:04:51:
                    3c:71:6f:40:8c:53:d2:df:d9:0a:27:4d:19:2c:40:
                    a1:33:fc:af:80:85:d0:19:c7:8b:0d:9f:a6:7e:7e:
                    5e:82:66:9b:6a:e0:cb:f8:1d:28:b7:b2:0c:cc:3e:
                    f3:c9:8a:51:b5:5c:11:15:1c:9b:69:af:f1:b9:a3:
                    02:d2:80:c3:12:08:4c:7f:02:14:92:c4:bc:bb:7b:
                    e4:d5:ea:b7:d9:58:57:f9:9d:af:cd:3a:ed:f5:a2:
                    d1:2d:45:38:7c:57:4b:08:39:b1:40:f6:fa:3a:70:
                    37:c5:37:54:ac:82:7a:ae:6e:9a:70:65:4e:33:5f:
                    b0:9f:c4:19:e0:94:38:74:ab:0a:cc:cb:83:4e:65:
                    ac:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1E:F5:AA:E5:93:0B:73:08:70:B2:A9:9B:A1:F3:67:63:F6:2A:74
            X509v3 Authority Key Identifier:
                keyid:58:3F:AF:07:E3:EC:92:00:76:4F:27:3A:10:E7:B6:C4:B1:58:2E:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:17:c5:59:96:e2:5c:37:98:18:d5:4c:31:18:ca:e4:21:68:
         94:61:d0:5c:61:19:ee:7f:e4:10:3b:58:91:f9:bd:a1:0e:66:
         4e:bb:85:76:1f:a6:3a:7b:dc:60:3d:70:d8:eb:32:70:17:bc:
         e2:26:82:7d:e2:04:52:ee:6b:b8:b7:a9:63:35:0e:1d:43:30:
         3f:ab:40:e6:88:d2:af:fa:53:dc:39:47:70:dc:d1:26:f5:c2:
         33:1e:3a:19:4a:3c:19:2c:0d:2a:ac:ec:e5:f6:56:8e:de:6c:
         be:c5:ea:68:30:01:d9:a3:08:f0:cd:9a:d9:61:77:48:ac:ce:
         89:62:bc:f9:97:74:db:94:28:fd:e6:0e:e6:8f:6f:d5:2b:fe:
         2b:79:38:f9:ef:59:82:95:27:9d:29:6b:ba:5a:68:e6:50:db:
         70:32:2d:3c:87:be:c1:da:97:33:61:d4:e2:2a:b0:e9:cb:1b:
         bd:ae:06:a1:a6:d9:b9:f5:c8:bc:01:a3:c0:63:35:de:7d:d5:
         eb:d0:e3:79:39:7f:7c:49:b9:fc:bf:47:1d:a6:18:ae:b8:d0:
         97:8a:fc:fd:44:68:e7:4e:48:3f:9a:67:ca:09:a9:35:4c:6e:
         52:9e:dd:e7:fa:fe:8e:d9:62:ab:e3:0c:a3:00:7a:c0:76:21:
         01:2f:8d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:47 2026 by rpki-client