Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
File:                     WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json)
Hash identifier:          n5MSFdC1TbVFRp/RyxCZMOL9AKCwxH7lwoAId6HOGcg=
Subject key identifier:   6F:E3:F5:E1:C1:C9:2D:B0:38:FD:3B:1A:A6:F0:A1:C9:73:AE:57:70
Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A
Certificate issuer:       /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
Certificate serial:       019D99D0868AD501E0834BAFA9DA6985A242
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
Manifest number:          1284
Signing time:             Fri 17 Apr 2026 05:01:13 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:13 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:13 +0000
Files and hashes:         1: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: 85Mqx3ypTdCWq30B1kXrePT6jg/S0Kt89rcs5o35f0s=)
                          2: uSTOG5hPdGAJ8tKDlqGT_j-Wz90.roa (hash: K1kjwbswlvDhq+X0b+wPq3xckmUou+CcfH9LmHS/rpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:86:8a:d5:01:e0:83:4b:af:a9:da:69:85:a2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a
        Validity
            Not Before: Apr 17 05:01:13 2026 GMT
            Not After : Apr 18 05:01:13 2026 GMT
        Subject: CN=6fe3f5e1c1c92db038fd3b1aa6f0a1c973ae5770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:36:3f:e7:c5:47:6d:98:b9:e9:c4:42:26:e9:
                    2a:c6:f0:1b:7b:55:d7:f8:2e:4b:1f:24:78:73:25:
                    bd:19:d2:80:67:28:b6:c0:fe:93:73:cc:ac:08:89:
                    d2:eb:f9:ca:f6:92:7c:eb:ff:8c:43:55:a4:d4:ef:
                    68:b6:fe:2e:b0:d0:09:d2:10:18:b7:95:66:c4:f1:
                    e3:fb:8a:70:73:20:d8:9f:4a:5a:23:fa:1e:e7:40:
                    ff:95:85:5e:e2:60:f9:a8:f5:45:49:6a:ce:28:ce:
                    46:e4:99:7d:5a:b3:84:cf:2d:c5:02:2a:9c:74:ef:
                    a5:54:b8:57:8a:eb:d5:ad:e9:1e:12:f4:b1:1e:e0:
                    c2:c7:0f:71:a7:ac:51:ca:5e:71:8d:51:b0:de:7b:
                    8f:ce:82:55:06:25:ae:d8:31:f9:66:e0:dc:70:55:
                    5f:6a:5e:28:ad:8e:2b:4a:d9:84:60:0c:a1:bd:f3:
                    bc:47:9a:a3:ec:55:99:8d:a1:bc:2d:6a:c1:27:dc:
                    c7:7b:2b:89:c6:ed:38:5e:90:7e:22:cd:66:30:c7:
                    9c:32:44:51:dc:40:19:b8:af:f4:6e:65:fa:3d:32:
                    af:94:41:c7:9b:86:39:ff:d7:aa:f5:ac:cd:be:53:
                    61:c2:12:60:74:68:52:23:bc:cf:89:4b:cb:01:71:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E3:F5:E1:C1:C9:2D:B0:38:FD:3B:1A:A6:F0:A1:C9:73:AE:57:70
            X509v3 Authority Key Identifier:
                keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:14:41:56:17:63:aa:95:84:a9:4a:c3:fb:67:6a:27:84:6f:
         20:27:f6:40:7d:44:10:b6:2d:64:42:dc:d3:d1:18:ab:af:44:
         af:a6:55:27:06:e4:bd:29:a7:c5:b0:82:dd:99:ca:c1:bb:7a:
         15:05:48:d3:b3:59:d6:5f:e1:e2:91:28:3a:bb:fa:78:f0:65:
         86:5d:80:a7:1a:af:cf:ea:80:90:b1:87:e0:ec:02:72:4a:b7:
         50:fd:20:22:88:9f:44:5e:40:57:22:0c:a1:4f:bc:64:a1:21:
         88:20:34:6a:0d:5c:85:f7:47:3b:66:20:c3:a7:e8:c8:d0:cb:
         b4:de:b5:72:a6:ec:02:57:9e:8b:73:fd:b9:d8:79:08:e5:d5:
         44:fa:1c:5f:35:ff:7e:47:44:3b:7c:c5:be:5d:02:f1:12:f1:
         65:6d:7e:25:3b:37:c4:bb:ab:8f:4b:36:09:41:18:d6:9e:8b:
         66:17:af:ed:e8:b6:c3:1b:9d:ed:38:8b:a1:10:41:c7:60:bd:
         9f:56:a5:d6:83:99:e2:07:c5:d1:b1:cc:52:f1:4e:aa:4c:28:
         8b:27:c5:23:32:03:2e:f0:90:1f:dc:de:35:13:82:14:e1:ac:
         ab:74:10:d9:c5:bc:ed:c6:3b:8d:b6:d0:4c:05:5c:2b:29:4d:
         96:65:8e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:49 2026 by rpki-client