Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
File:                     WP-hTfKonLZwljbysLVwq8z4uEs.mft (raw, json)
Hash identifier:          rdHmiKIsHpQvv6gOk/uSTUrpqTCDXYnQPiLxzlyVmEc=
Subject key identifier:   D9:52:CF:9F:0F:FD:C2:E9:AC:7F:84:83:82:1E:EF:7E:3E:EB:EE:D5
Authority key identifier: 58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B
Certificate issuer:       /CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
Certificate serial:       019CAC472CC0911CD9F7A4A034EC787F8661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
Manifest number:          0E43
Signing time:             Mon 02 Mar 2026 02:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:11 +0000
Files and hashes:         1: WP-hTfKonLZwljbysLVwq8z4uEs.crl (hash: T6cOMw2ySC1VXonBtzUrdp8TYPSf9o5MM7OEEsM3f9E=)
                          2: hG4a79V4no1d_RNh-MvVJ0RwdRY.roa (hash: 03AXjMNUx9Pj+KWkDOfShpsuL+deAZNIFF1GbK07I4U=)
                          3: yMoUDAy0kWtoL_t9nqHRBCB21C8.roa (hash: xKN2sSx0pr5QZ1TQbINSKjUEf4y0JlgK8D6NnMM9OcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:2c:c0:91:1c:d9:f7:a4:a0:34:ec:78:7f:86:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ffa14df2a89cb6709636f2b0b570abccf8b84b
        Validity
            Not Before: Mar  2 02:01:11 2026 GMT
            Not After : Mar  3 02:01:11 2026 GMT
        Subject: CN=d952cf9f0ffdc2e9ac7f8483821eef7e3eebeed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:2a:7e:d0:9a:87:a1:4c:d8:19:7b:46:6f:
                    2f:b2:2c:df:19:b1:5e:3d:33:c2:6b:95:1b:88:e9:
                    86:b4:d7:10:f5:fa:8b:b1:6e:87:d0:c1:bf:a2:77:
                    d3:88:ad:88:3e:2a:15:c3:fa:33:c7:17:5a:08:88:
                    ac:68:18:14:9d:e6:c4:1c:9e:0c:f9:98:1e:d9:8e:
                    2a:27:f2:5e:5e:c5:e9:ea:d9:d7:67:39:af:b1:92:
                    b9:90:ba:4d:fe:b5:ce:dd:3b:52:54:ab:28:d2:8d:
                    fd:48:a0:0d:a5:ac:67:08:1f:39:19:23:9a:14:2e:
                    d7:df:16:4c:a1:a3:c0:fa:ca:34:f2:d4:5b:e2:c4:
                    c0:43:7c:97:60:77:aa:19:b5:e2:59:8d:67:59:5b:
                    57:a4:5f:c7:0c:8c:1c:65:39:c5:b5:f5:b2:83:60:
                    1c:32:af:b1:ff:86:c4:9f:92:b7:79:cb:d8:d0:ee:
                    a0:54:53:60:40:72:c8:1b:0e:82:1f:8c:3a:ca:1b:
                    e5:4e:57:5d:6b:78:a8:03:7c:ca:d4:45:1e:de:af:
                    09:f1:50:a2:f1:ab:cd:9c:6e:53:bd:b5:4f:1b:f3:
                    a2:b4:05:39:d3:b5:91:18:c8:a6:24:b7:fa:c7:c2:
                    bb:bd:8c:6c:40:37:d2:15:7f:f5:a8:76:1f:1a:2d:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:52:CF:9F:0F:FD:C2:E9:AC:7F:84:83:82:1E:EF:7E:3E:EB:EE:D5
            X509v3 Authority Key Identifier:
                keyid:58:FF:A1:4D:F2:A8:9C:B6:70:96:36:F2:B0:B5:70:AB:CC:F8:B8:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-hTfKonLZwljbysLVwq8z4uEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0b06bc-b8c7-4f75-b29e-c107a7ac0488/1/WP-hTfKonLZwljbysLVwq8z4uEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0b:1f:3f:da:f4:df:c5:53:21:ca:aa:09:2a:cc:cd:0e:fc:
         dc:3e:dd:67:11:02:0a:dd:75:32:cc:44:a3:8c:b7:9f:b1:1f:
         4b:2e:a2:b9:37:40:a5:e8:ae:46:f9:e9:9e:dd:d9:f8:93:32:
         38:35:a5:e3:7a:90:ef:f5:83:6f:a4:4b:04:aa:71:fd:70:51:
         a5:c2:66:b3:dd:be:d6:89:25:ca:f2:72:09:f0:ba:9a:b9:28:
         54:eb:b4:fa:e8:fd:44:6d:f8:c4:92:bb:ba:57:4a:32:14:51:
         8c:85:db:4a:49:f4:fb:91:26:50:6d:7b:ce:1e:e6:f0:df:e3:
         84:76:d5:56:87:0f:e0:a4:86:df:f4:02:ad:7a:8b:2a:86:51:
         87:c9:5f:8f:54:22:a7:ec:d2:10:0b:83:78:c9:a0:95:b0:87:
         43:8a:82:2e:07:f2:f8:02:23:c9:28:19:b3:f0:66:95:0f:05:
         1a:4d:66:c9:3f:69:3b:af:0e:04:d3:74:b4:3c:f6:0d:e3:a5:
         cb:a1:24:17:c7:1e:bf:c3:00:1f:2f:e5:59:34:15:07:81:5b:
         5a:31:bd:6d:3c:bc:a8:44:f4:ed:b5:4d:d1:48:44:5c:a6:85:
         44:a4:14:d0:61:78:3b:18:25:c4:b6:b6:0d:4b:a8:ab:60:c0:
         2f:b6:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:42 2026 by rpki-client