Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
File:                     WMV8B555WnlrR6ftMvBysFipOm4.mft (raw, json)
Hash identifier:          Hma1GYjOgpNsiylAjh+2/IBN0B6iddGh4YxJaGMjZrk=
Subject key identifier:   F4:78:46:80:55:BE:04:CF:DF:F1:D5:B3:6B:3E:D9:E1:8C:B8:16:AD
Authority key identifier: 58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E
Certificate issuer:       /CN=58c57c079e795a796b47a7ed32f072b058a93a6e
Certificate serial:       019D9AAC10547F499EA2E37B9BAB11964088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
Manifest number:          05E1
Signing time:             Fri 17 Apr 2026 09:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 09:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 09:01:00 +0000
Files and hashes:         1: WMV8B555WnlrR6ftMvBysFipOm4.crl (hash: 9E7eZrGzUM8M5k7OWLrWwQEznzllXd1GVM7wfAXMVN0=)
                          2: x_UrSzT5bnYolRGENmeVczVCPdU.roa (hash: IOsOmkSdTZ/QstJ06oa7GIebzAwZkncHJ9unnjr0BfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:ac:10:54:7f:49:9e:a2:e3:7b:9b:ab:11:96:40:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58c57c079e795a796b47a7ed32f072b058a93a6e
        Validity
            Not Before: Apr 17 09:01:00 2026 GMT
            Not After : Apr 18 09:01:00 2026 GMT
        Subject: CN=f478468055be04cfdff1d5b36b3ed9e18cb816ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:29:af:08:0a:71:6e:cf:73:e4:58:a6:4c:60:
                    bc:73:88:9a:f4:e5:27:c4:e2:4f:f6:66:92:1d:fb:
                    b8:b0:c3:82:6a:9f:58:ed:28:33:22:9a:1b:13:c2:
                    24:5f:a4:0c:59:47:ef:5c:2d:82:ac:3a:ae:58:e4:
                    cb:6e:83:cc:e9:c0:3a:80:8c:5d:23:71:c8:07:f4:
                    c4:15:10:ca:03:66:4d:41:58:bd:5e:82:ef:f4:35:
                    f9:fc:23:a2:b5:83:12:ec:51:62:91:74:ad:ca:b2:
                    d5:37:08:3f:e0:8b:d5:cc:91:30:f1:9f:d3:ee:33:
                    ed:79:22:b7:cb:33:1d:5f:a5:de:fe:91:17:06:15:
                    7c:54:ed:fc:32:ce:02:8e:5a:b8:cf:6e:84:92:18:
                    5d:f3:6c:db:31:0c:bb:80:c3:80:d7:8c:fd:68:11:
                    a5:47:df:36:8b:42:0c:e6:2a:3e:1b:c6:e4:f7:7b:
                    82:84:69:a2:7e:2e:10:9a:81:92:49:79:f9:96:70:
                    f0:b1:b2:d6:0d:88:fc:02:f6:e1:dc:04:5a:63:1b:
                    b4:e5:18:c8:fd:0d:b4:14:14:66:5e:7b:33:11:fa:
                    24:9b:18:d3:2b:6d:a7:59:f5:43:5c:f9:c8:ca:0e:
                    ea:80:92:e0:37:e5:d8:5a:1a:01:9d:1c:ed:82:e2:
                    58:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:78:46:80:55:BE:04:CF:DF:F1:D5:B3:6B:3E:D9:E1:8C:B8:16:AD
            X509v3 Authority Key Identifier:
                keyid:58:C5:7C:07:9E:79:5A:79:6B:47:A7:ED:32:F0:72:B0:58:A9:3A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMV8B555WnlrR6ftMvBysFipOm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b35746-8e42-4d80-b76d-575292bc3941/1/WMV8B555WnlrR6ftMvBysFipOm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:0c:d8:c2:74:26:52:0f:c1:25:0b:6c:f9:ad:c6:58:25:6e:
         9e:17:a5:17:a0:b4:4b:cf:73:72:e2:b4:ff:d6:83:ee:e3:e1:
         56:f5:0a:06:90:d1:a1:dd:3b:92:5b:d4:46:dc:b1:60:b0:ec:
         b6:b9:28:21:52:74:df:c1:5f:a6:51:80:18:ed:f4:bb:7c:1a:
         96:15:f4:95:52:69:d1:f3:64:b4:29:8d:7d:8d:0d:83:9e:13:
         fc:9c:6d:09:4d:66:e4:8f:f1:e5:61:ce:69:c1:be:98:8e:6a:
         12:ce:a5:8e:ff:1d:bf:6d:e8:30:44:61:b0:09:86:e5:75:53:
         63:e5:31:bb:4e:0d:32:4e:e1:4a:8f:b1:03:b6:af:c0:34:46:
         6c:25:26:92:53:c8:21:ae:f1:c6:66:e9:cb:df:70:b4:72:bf:
         67:6b:e8:75:b7:e3:5e:6c:74:83:a3:5e:31:03:fd:05:9f:5d:
         7f:bb:7a:15:78:35:2b:56:20:87:e0:8e:f6:95:8b:16:4a:b1:
         41:4a:e3:7d:cb:5e:3a:4d:e2:db:9c:ac:8c:76:42:16:53:28:
         00:41:e6:aa:65:d5:e2:e1:2e:14:df:5d:d2:b2:4e:2d:56:c6:
         40:3b:fd:a7:51:2b:61:19:cc:77:84:34:fc:b2:46:6d:a2:f4:
         d0:fb:8b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:46 2026 by rpki-client