Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
File:                     wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft (raw, json)
Hash identifier:          o2ayHoHiDmVUDUTRruxDTucykpYry1+CGyG9h7dMmpQ=
Subject key identifier:   C9:14:8F:68:3F:2C:6C:8A:3F:D3:3E:CC:C4:4A:B2:AA:F9:D2:53:51
Authority key identifier: C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60
Certificate issuer:       /CN=c1b050211219d18e996e086cb7f6309178804860
Certificate serial:       019D98F43717C2C3E63D563D1DCBB601DDAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
Manifest number:          1912
Signing time:             Fri 17 Apr 2026 01:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:34 +0000
Files and hashes:         1: BUkLbJymwTyiP7I3JBXsx3s4NL4.roa (hash: S+u04ktm3wvbogL9zzmkeSkoPC/t6RrVsW1QDJ8a+R8=)
                          2: VKi_eELpmYrDDbDrF0VVkkCBTvA.roa (hash: x+LzLGitMTJHgFBC68KihyTc7sPTjjdr4ISMkWQ+OXA=)
                          3: ZTe4Yc6AXqtHVEH68yVC_sq1IvU.roa (hash: 7Noxt8qVLB+fyFIGQYg4LilEwKTB1zOCXiJLI8oHZSo=)
                          4: gdh12HnOMOEqYVtaca7KAq1urKE.roa (hash: xH1nYkWxaZr276GAcCdV3VvkfxZ8MURBbGI3J9HTllU=)
                          5: k2NOkCSTdVhsNv-yRXDz4IjyaP8.roa (hash: mFXBGS6DaTNeb9V9IYIi7IizihWo5PDlGr82oMDsEnk=)
                          6: kjiD6TFqmxMVqOnqt0_0GLgSRcU.roa (hash: AZdOF+iEUNNu4fK6OeoAbtGKKK0ZCVUm4ff6O264PE4=)
                          7: vuYx__ePQYmBnErIjuxPmyS72UE.roa (hash: RG1Iph+v2YrWVe+WGtDI4g5ptYW+7Uz8lQw8iy5rb4g=)
                          8: wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl (hash: I/9DOVUdk4ruMNa6Ht4veYeEgS/KC2XDKvtu6jQm/+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:37:17:c2:c3:e6:3d:56:3d:1d:cb:b6:01:dd:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b050211219d18e996e086cb7f6309178804860
        Validity
            Not Before: Apr 17 01:00:34 2026 GMT
            Not After : Apr 18 01:00:34 2026 GMT
        Subject: CN=c9148f683f2c6c8a3fd33eccc44ab2aaf9d25351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:88:23:a6:f5:2e:de:97:cc:88:d6:7e:69:13:
                    31:6f:b4:59:d9:ed:84:cd:ce:ee:16:b8:1f:a0:72:
                    fe:3a:72:9b:a2:cc:4e:9d:b6:85:10:2f:2d:79:10:
                    83:04:0c:b9:85:f8:85:07:b7:1f:e8:51:a2:1d:2a:
                    a5:80:7d:9f:5b:e8:ab:94:db:81:99:64:04:7a:99:
                    a4:b0:50:12:ce:39:50:3b:5d:19:2e:c7:bf:d5:96:
                    2c:f3:20:a3:cc:90:b5:d9:7f:5c:ed:7a:4e:f5:6f:
                    6b:e0:4d:5a:4e:07:89:cf:6d:a5:8e:63:29:ee:1d:
                    53:d0:e1:8f:aa:8d:00:8d:d8:70:36:01:97:dc:14:
                    69:c5:a0:0d:b5:c6:5e:51:a2:58:8a:38:5b:73:86:
                    af:11:ce:9c:fc:d4:ba:b0:db:b2:ae:77:5c:16:e0:
                    36:91:0e:54:e1:de:e8:fa:a3:27:a1:cf:8c:28:15:
                    14:53:d3:1e:ba:ca:e2:fd:b1:9f:f7:60:d3:a9:25:
                    12:9c:7c:2f:92:81:b6:c5:7a:fc:bc:6e:95:b5:ae:
                    40:ae:20:1a:31:6d:38:d4:a9:d8:cc:9a:b1:60:0d:
                    3f:62:80:75:70:99:38:e2:52:5f:89:69:b5:c2:91:
                    ba:ee:cf:94:9d:53:d1:3c:f8:48:57:0f:fc:37:56:
                    41:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:14:8F:68:3F:2C:6C:8A:3F:D3:3E:CC:C4:4A:B2:AA:F9:D2:53:51
            X509v3 Authority Key Identifier:
                keyid:C1:B0:50:21:12:19:D1:8E:99:6E:08:6C:B7:F6:30:91:78:80:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbBQIRIZ0Y6Zbghst_YwkXiASGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/wbBQIRIZ0Y6Zbghst_YwkXiASGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:71:ee:3b:db:19:e7:8c:2d:fe:19:40:e7:f3:ca:5c:1a:d6:
         82:80:84:c8:83:73:50:76:ac:55:a9:59:fe:1d:bd:73:77:e0:
         99:61:b2:58:00:53:c5:48:b8:2d:36:4c:cd:37:3d:d1:d0:93:
         66:aa:99:29:0c:34:5a:67:3f:4d:7a:17:9e:fc:d8:0a:a8:11:
         48:07:4a:a3:5b:eb:0f:28:87:e9:23:84:9b:1a:a2:34:70:09:
         8e:88:33:2b:d4:d9:70:ac:92:07:a5:d8:59:5d:23:e2:1e:c2:
         11:4b:42:4e:68:fc:01:a5:57:5c:2f:8a:6f:40:74:e0:72:a2:
         21:8c:ac:74:70:5f:fa:89:a2:2d:54:f0:cc:f7:61:95:19:33:
         15:2f:ad:90:4e:f3:a6:6c:c8:9f:d4:90:32:3b:09:33:75:3a:
         0b:3a:f0:2c:cc:c7:1d:a5:66:57:8f:55:e6:d7:0d:5f:30:cc:
         cb:ef:b3:4b:2d:01:41:db:17:f6:21:fc:17:9f:5f:bd:0a:d9:
         77:6d:4d:80:7b:7b:c3:26:ce:44:d6:91:be:44:4f:0f:79:e3:
         8f:2b:e2:68:34:da:41:e4:d1:f9:30:02:c8:fc:49:f5:5c:6e:
         54:8e:39:b0:5d:26:f6:e8:7a:4a:9c:52:70:04:2b:d4:de:35:
         0a:37:7c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:43 2026 by rpki-client