Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
File:                     WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json)
Hash identifier:          C8zDRsAIjkro3gSeJtdDk8/gPu4x2arWxWGaOGpfC3E=
Subject key identifier:   3D:49:92:88:AF:E3:7B:5A:57:E8:8A:3E:85:56:7F:87:A1:69:83:23
Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
Certificate issuer:       /CN=59287513f49eb1408ee41b281c8b2773307a8910
Certificate serial:       019D9B508F31B6F50334BC404AFC8F04309A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
Manifest number:          18BF
Signing time:             Fri 17 Apr 2026 12:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 12:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 12:00:41 +0000
Files and hashes:         1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: /I+QgxXE1l8MqL0cbgOtxyw8o1ZN+hr7ChlljlUUlME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:50:8f:31:b6:f5:03:34:bc:40:4a:fc:8f:04:30:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910
        Validity
            Not Before: Apr 17 12:00:41 2026 GMT
            Not After : Apr 18 12:00:41 2026 GMT
        Subject: CN=3d499288afe37b5a57e88a3e85567f87a1698323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:02:1f:d7:5c:59:c1:62:6e:58:9d:8c:73:
                    19:9e:79:f7:2d:24:bf:22:7e:69:36:de:97:8f:b8:
                    04:bf:f7:8c:ba:7e:29:32:0c:83:c7:2f:8f:0e:df:
                    e1:7e:a7:ed:3a:24:29:dc:f7:ee:5d:0b:76:e2:62:
                    ba:c7:2e:06:06:c3:2e:36:86:1f:12:53:72:bb:6d:
                    0e:a6:6e:49:1a:a7:00:be:d0:fd:06:61:5f:72:42:
                    dc:dc:2e:25:23:59:ae:77:ee:e4:5b:a3:26:5a:53:
                    70:80:63:92:2a:ba:ac:39:e1:dd:ff:0f:72:99:de:
                    53:35:74:c6:4d:0e:39:e9:e8:b4:14:f9:14:11:75:
                    10:28:e0:1e:fa:cf:26:ee:29:57:a6:cd:59:f4:ca:
                    d7:fa:3c:66:65:30:ef:18:b9:24:39:6f:2b:29:e8:
                    b9:c9:86:fc:08:ca:72:48:25:eb:04:87:9d:c6:4b:
                    c0:20:6c:ab:3f:7f:bb:7b:ea:20:74:b2:0f:c5:81:
                    79:d0:8e:83:62:24:8e:a9:cf:7d:65:40:7c:07:19:
                    d5:d0:4b:3a:5f:88:6f:2e:51:31:93:23:aa:49:3c:
                    b3:c8:e2:f8:cd:c3:9f:7d:d6:80:e4:c4:b0:32:c9:
                    eb:12:76:38:70:24:62:e7:5e:a8:6b:c0:da:73:c7:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:49:92:88:AF:E3:7B:5A:57:E8:8A:3E:85:56:7F:87:A1:69:83:23
            X509v3 Authority Key Identifier:
                keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:a4:7f:ae:cf:52:3d:55:bd:08:9d:e5:c6:ab:ef:00:71:
         1e:c5:14:24:da:de:85:58:c6:09:e5:c6:c3:2f:c0:f8:de:e0:
         f3:b7:6d:5d:24:2b:c5:2e:a5:e4:83:cc:a8:dd:3d:95:00:2d:
         1c:65:7f:58:95:e5:7a:52:f7:58:84:15:95:56:ac:c4:62:3d:
         62:ce:74:c4:c2:9d:7e:d9:87:13:4d:14:dd:14:2f:82:a1:8d:
         61:b2:65:5a:87:c4:c3:19:12:b4:fb:30:60:24:b3:24:da:b5:
         db:89:12:a1:26:3f:0a:2a:1e:bd:35:bc:83:ef:09:4d:38:ff:
         60:59:b2:25:8e:95:f2:f2:cc:f7:15:6f:c3:fb:4e:74:ca:ba:
         a8:40:99:c9:88:c0:2b:17:5f:59:d5:95:27:10:3c:f3:1b:d1:
         1f:27:b3:fe:ce:d6:89:0b:ab:38:5c:f8:de:a3:1d:48:71:2f:
         b8:03:18:03:11:4c:98:79:38:cd:7b:60:41:79:f2:4f:3b:3a:
         28:cf:17:37:93:3e:3e:9a:c5:58:55:38:97:ab:ab:77:f4:a2:
         59:cc:a4:98:d7:28:c4:ad:08:ed:37:59:1f:89:48:15:bf:84:
         b6:8c:07:e2:e1:70:d9:5a:95:96:fd:e9:b5:3c:c9:b8:3b:e2:
         65:29:51:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:08:46 2026 by rpki-client