Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
File:                     WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json)
Hash identifier:          /qmEsvi45ih91p6TqWIIN2Jhr7rN1TpNulWFplEx+SI=
Subject key identifier:   CD:E2:DA:3C:FD:4C:31:11:19:5A:FC:0A:AC:2E:D2:58:B2:3A:A5:0B
Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10
Certificate issuer:       /CN=59287513f49eb1408ee41b281c8b2773307a8910
Certificate serial:       019CA9EADAAE82DBC68CC4060ED853094F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
Manifest number:          1842
Signing time:             Sun 01 Mar 2026 15:01:06 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:06 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:06 +0000
Files and hashes:         1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: i2Y4DZzkdJRkMnA5Jt4CquOIPY/f5e4Y2jz0QJW0LNU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:ea:da:ae:82:db:c6:8c:c4:06:0e:d8:53:09:4f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910
        Validity
            Not Before: Mar  1 15:01:06 2026 GMT
            Not After : Mar  2 15:01:06 2026 GMT
        Subject: CN=cde2da3cfd4c3111195afc0aac2ed258b23aa50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f0:21:e8:a9:fd:17:c0:e0:9e:13:26:0d:63:
                    1f:ce:a2:20:f9:de:3d:ed:69:73:b6:08:ac:12:09:
                    72:19:20:9c:5c:89:1f:04:d3:fa:bb:d6:97:ca:4b:
                    29:5f:15:d9:ca:ea:b5:c1:9d:64:b0:33:ff:f4:25:
                    14:6a:5e:dc:ae:c6:f7:f6:5e:90:a2:4b:e6:e2:ba:
                    c5:bc:1c:95:75:bc:22:37:af:f4:1f:fc:4e:af:39:
                    51:53:ad:2c:26:f8:76:9a:ba:7e:a4:42:7e:a6:ac:
                    df:76:f9:68:cb:5a:32:a6:4f:98:c8:48:17:ad:5b:
                    6b:e6:85:c1:7f:29:30:a7:ac:d3:c6:f3:96:11:5a:
                    d7:33:04:c2:3d:1a:c1:ae:ef:f1:fc:2f:d8:15:67:
                    c2:7f:c2:25:1a:d7:59:81:72:59:56:bd:bc:40:3f:
                    57:62:b3:e3:17:de:3c:d9:29:52:cc:1e:f7:1b:aa:
                    c4:31:e2:e0:fb:a6:1d:04:f5:af:dd:a4:ee:b1:24:
                    40:81:0c:1f:4f:bc:87:a9:d1:23:5f:46:1a:94:16:
                    2d:9f:c5:89:56:97:50:f4:09:7f:36:d5:4f:fa:5e:
                    4e:77:94:28:79:3c:b6:55:f6:29:70:1a:50:e0:66:
                    6c:80:73:c0:d4:6d:6a:d0:26:e1:25:51:a7:ea:19:
                    f2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E2:DA:3C:FD:4C:31:11:19:5A:FC:0A:AC:2E:D2:58:B2:3A:A5:0B
            X509v3 Authority Key Identifier:
                keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:a6:e2:7d:ec:02:7d:1c:aa:9c:73:f1:55:ba:77:50:d5:22:
         03:eb:8c:f6:43:a5:3f:c5:31:44:c9:5c:30:77:af:b5:1e:1f:
         b5:02:7b:29:d2:be:ba:69:20:d6:05:39:fa:7d:07:a0:ff:2d:
         55:1b:b5:13:18:e5:09:4f:a3:94:2e:57:83:9c:cd:f7:a3:40:
         eb:8e:00:c4:cc:71:25:1f:3e:f5:2d:c8:22:56:67:53:da:60:
         85:d6:6c:01:11:70:6d:99:17:04:c1:80:79:67:a6:a7:5a:2e:
         60:8e:90:53:62:a2:2b:16:22:df:db:86:8c:4d:6f:96:49:0c:
         67:86:d6:f0:c0:59:b6:88:61:50:d7:41:3f:ce:bc:61:54:f4:
         f3:3b:64:14:35:c5:9c:4d:b3:df:d4:87:e4:fe:fd:67:ec:08:
         ee:58:5e:be:7d:9b:8c:9a:8f:0f:f2:00:3d:9f:b7:56:3c:2e:
         87:96:e8:46:af:aa:f0:2b:f2:11:a3:ff:6c:15:b7:90:74:d6:
         0d:29:c8:c5:f0:31:50:19:e6:2c:ed:27:d1:43:5b:cc:e3:70:
         49:9c:54:ab:a8:d6:0e:13:d9:72:e3:5c:7c:f7:0e:2e:5e:55:
         ff:04:c0:1d:91:f9:b5:f8:0e:12:61:a8:b1:42:6a:63:d7:32:
         02:51:4d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:15 2026 by rpki-client