Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
File:                     wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json)
Hash identifier:          2NbkEv8Kxl6O/7T0VLO6G7yy5MNm5qjKHaV7PBZcm2I=
Subject key identifier:   BB:BE:98:65:39:9F:0C:0C:12:65:E8:05:1E:2F:D3:54:59:A8:03:AA
Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
Certificate issuer:       /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Certificate serial:       019CAAFCFC907A453C854C0A4045BA3E03F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 20:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:32 +0000
Files and hashes:         1: VcIFu4fr8pm6FLIUjmO70GIyZ-s.roa (hash: DJIAA47Hj5H0/8WK2sFz3aZBYGT+yJ5AlaBSOLy7SpY=)
                          2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: GfKx2k3kD2lmFB+UGXwpW6AU+3AiBGF7rPE4RRDou2E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fc:fc:90:7a:45:3c:85:4c:0a:40:45:ba:3e:03:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
        Validity
            Not Before: Mar  1 20:00:32 2026 GMT
            Not After : Mar  2 20:00:32 2026 GMT
        Subject: CN=bbbe9865399f0c0c1265e8051e2fd35459a803aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cd:67:c1:bc:91:99:3c:52:27:61:c8:e7:67:
                    bb:26:e3:f4:b5:ea:89:f4:37:0c:6e:fb:a0:4a:01:
                    2f:01:b8:23:e9:12:39:64:49:92:83:0a:71:9b:b3:
                    53:a9:e5:c5:e1:96:b6:d2:63:63:95:2f:3d:c5:7e:
                    62:47:03:62:f7:51:90:8a:78:cd:e8:42:55:e9:90:
                    50:b4:7b:db:e6:0b:d5:83:82:63:ce:4e:47:de:ec:
                    30:c9:19:44:56:69:ce:6b:9e:82:bb:47:de:92:84:
                    a4:db:eb:9d:80:a7:68:9e:3e:06:43:b7:e7:8b:f5:
                    a9:6b:02:14:d9:4a:b8:8d:7c:55:52:98:1f:11:30:
                    61:93:aa:24:28:e4:b5:b7:dd:23:0f:c4:22:b9:09:
                    2d:e7:0e:5a:aa:fa:cb:41:53:3a:dd:13:23:77:4f:
                    21:d9:0b:a8:3d:38:3f:2b:e3:65:d9:f1:d5:54:a6:
                    a4:a5:10:28:af:6a:84:03:57:aa:7f:a1:6a:2a:75:
                    c2:4b:58:9a:0a:3a:44:15:17:75:e5:7e:98:d0:8b:
                    ce:a5:da:88:dc:5b:82:fd:08:86:7a:fe:f0:88:a7:
                    03:4c:c4:34:54:1f:07:59:89:35:cd:49:5d:d3:56:
                    b0:ba:fb:28:52:df:67:ff:09:a3:0d:d7:ac:c1:66:
                    d9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:BE:98:65:39:9F:0C:0C:12:65:E8:05:1E:2F:D3:54:59:A8:03:AA
            X509v3 Authority Key Identifier:
                keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:80:f2:aa:12:12:a8:25:12:70:71:ba:b7:41:61:76:8e:
         18:d7:b3:a0:1c:c9:08:69:13:5f:bb:c0:05:1f:c3:de:72:e6:
         d1:17:e6:a7:9a:41:3f:b8:5e:f8:9f:3b:12:3c:8d:3a:27:f7:
         7a:64:60:2d:09:e7:b4:bb:27:09:24:df:d9:8c:41:bd:23:3b:
         f8:b6:e1:74:09:bc:0b:76:86:f2:17:37:67:34:17:e4:e9:0e:
         85:cb:9d:ba:e9:03:69:74:ce:c8:64:09:4e:c3:65:cc:02:fb:
         ee:84:b3:a5:c9:16:64:3b:df:d6:98:6f:a7:e0:6c:6b:d8:d4:
         d4:c4:61:c2:0c:71:d9:c4:81:8c:cc:3e:da:52:cb:b6:f0:83:
         fd:73:e8:45:b5:ec:17:7b:1e:93:1a:06:c3:b3:97:89:8d:d6:
         29:bc:c8:d5:80:41:30:e3:6c:51:0c:f5:36:5f:38:75:9e:e3:
         49:39:66:55:a7:bb:35:f6:b6:0b:6c:72:f0:05:55:52:1f:5c:
         76:40:ef:de:85:d2:ab:c5:13:45:19:c4:53:1d:46:19:58:fe:
         1a:0d:e5:d0:9f:80:59:2c:37:6e:86:f1:74:55:f4:6b:28:19:
         b5:08:7a:49:84:06:89:a1:27:32:4b:20:cb:94:f6:15:b8:4e:
         0d:be:f7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:00 2026 by rpki-client