Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft
File:                     Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft (raw, json)
Hash identifier:          gAuzC0j2X4Q0mQQhaWxxeMFNO3/fWMjsXZAQzW0xt1Q=
Subject key identifier:   8F:FF:CC:33:36:89:63:E6:1F:A3:DA:B0:DC:36:B7:7F:DA:F7:05:D8
Authority key identifier: 59:AF:A0:C3:F2:81:13:AC:67:A1:E8:19:20:80:CD:E1:C3:58:30:F0
Certificate issuer:       /CN=59afa0c3f28113ac67a1e8192080cde1c35830f0
Certificate serial:       019FA9AB7BB4836FAFAD17743F61912760A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wa-gw_KBE6xnoegZIIDN4cNYMPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft
Manifest number:          0150
Signing time:             Tue 28 Jul 2026 17:00:15 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:15 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:15 +0000
Files and hashes:         1: Wa-gw_KBE6xnoegZIIDN4cNYMPA.crl (hash: JFg+ExUn4xoToJvbAZwHOQzkycSfvXtG9rxOhx9iSFo=)
                          2: ypii_wNcb-AwsNun99iVhbi3Qn8.roa (hash: 8vPnAsYHQ7w1UcsG/vmQIGbDPUOOaSicezwJeTgu3gQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wa-gw_KBE6xnoegZIIDN4cNYMPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:7b:b4:83:6f:af:ad:17:74:3f:61:91:27:60:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59afa0c3f28113ac67a1e8192080cde1c35830f0
        Validity
            Not Before: Jul 28 17:00:15 2026 GMT
            Not After : Jul 29 17:00:15 2026 GMT
        Subject: CN=8fffcc33368963e61fa3dab0dc36b77fdaf705d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:79:ae:d7:88:53:39:07:71:d9:bb:f6:60:
                    0e:6c:31:c4:5f:32:89:31:72:76:43:92:d6:c0:8e:
                    71:e4:77:f5:37:2c:18:66:bc:99:c1:2a:19:2e:da:
                    5a:e1:0a:06:32:2e:4e:56:bd:0b:97:99:1b:28:80:
                    52:b6:ab:4c:3c:bb:05:2e:c3:a4:76:1d:58:7b:ad:
                    92:7a:68:97:00:ad:8e:a7:cf:0b:b0:86:e8:80:ac:
                    1d:0a:78:04:1b:8e:74:7b:38:b8:96:24:2e:30:07:
                    e5:2b:18:24:06:8c:10:fb:28:97:89:25:e6:9f:01:
                    72:2c:2f:37:0f:3f:93:0d:e6:6c:ec:5b:64:a4:58:
                    f5:9d:44:4f:70:7b:a2:2e:9c:62:4a:dd:76:a9:31:
                    93:9a:c9:73:8a:e9:19:e6:1a:9c:4d:0f:15:2c:54:
                    67:73:cf:27:08:e8:a8:f6:ca:d1:7b:16:38:e1:2b:
                    8c:99:65:07:d3:fe:f6:23:db:44:d9:60:d9:7a:5f:
                    9e:b0:99:c2:9d:2d:5d:ba:e0:cc:9b:ac:62:1e:bf:
                    04:7d:80:b9:e9:02:f7:55:21:e1:ae:f7:82:86:7e:
                    3f:13:7a:15:cc:d7:13:dd:1a:1d:2b:65:67:78:25:
                    87:8f:70:dd:5d:6e:1f:01:3e:43:23:96:0b:7c:26:
                    03:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:FF:CC:33:36:89:63:E6:1F:A3:DA:B0:DC:36:B7:7F:DA:F7:05:D8
            X509v3 Authority Key Identifier:
                keyid:59:AF:A0:C3:F2:81:13:AC:67:A1:E8:19:20:80:CD:E1:C3:58:30:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wa-gw_KBE6xnoegZIIDN4cNYMPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/73316f-b0ea-4728-86ca-44bf8deb85bc/1/Wa-gw_KBE6xnoegZIIDN4cNYMPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:7c:a2:74:53:34:37:7b:7f:86:83:d1:bf:23:bb:ef:d0:df:
         a8:b6:57:2d:84:b9:15:78:de:58:a6:de:76:8c:b2:b6:12:3d:
         68:2b:05:e8:4f:86:83:87:d2:8d:37:b1:8b:92:a2:46:8b:c0:
         cc:06:df:2f:ab:47:b2:67:95:ac:9a:b3:7c:72:89:bf:f5:bc:
         0d:29:e3:fc:9a:09:02:93:c6:4b:31:aa:f3:63:90:57:1b:da:
         cf:6d:46:e9:4f:a9:18:70:e0:55:99:49:b4:0a:f4:c6:67:6e:
         df:64:37:c3:ad:3d:17:7e:f1:d1:0b:83:12:d2:53:30:72:5f:
         97:d0:ea:57:e0:e3:f7:1f:11:4b:dd:5f:45:a9:a7:f3:e8:fe:
         9c:d2:32:90:c8:87:ab:71:83:3b:be:be:e3:7c:dd:36:1e:a6:
         72:14:c0:c5:5d:a7:c1:ca:b8:81:86:5f:eb:c7:75:61:9f:42:
         7f:3c:1f:75:92:54:cb:f7:10:7b:a6:9a:16:f0:29:df:60:1e:
         ee:4b:e3:1b:ca:fa:a8:3e:2e:0b:2a:4a:1f:4f:1a:7b:f3:82:
         33:c0:1b:0a:86:98:4a:0c:a4:53:3a:38:ec:c4:57:f9:9e:e9:
         dc:e0:c9:7a:85:de:43:16:17:01:df:2d:52:08:7a:ee:87:b0:
         19:85:79:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:32:25 2026 by rpki-client