Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
File:                     wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json)
Hash identifier:          kovqRNJAMzo8chtZL1qGnY/DNo46LHgbDsbRKAo7HCI=
Subject key identifier:   F4:00:3B:DE:0A:31:59:30:C8:3C:51:1F:BA:0A:56:79:C3:8E:4B:07
Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
Certificate issuer:       /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Certificate serial:       019FAD8924632CCE63696BFAEB7E141B07AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 11:01:13 +0000
Manifest this update:     Wed 29 Jul 2026 11:01:13 +0000
Manifest next update:     Thu 30 Jul 2026 11:01:13 +0000
Files and hashes:         1: VcIFu4fr8pm6FLIUjmO70GIyZ-s.roa (hash: DJIAA47Hj5H0/8WK2sFz3aZBYGT+yJ5AlaBSOLy7SpY=)
                          2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: jRwP2bjt6v621w/bC2CldIsKm3EQYiR5CDKKxEzdQUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:89:24:63:2c:ce:63:69:6b:fa:eb:7e:14:1b:07:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
        Validity
            Not Before: Jul 29 11:01:13 2026 GMT
            Not After : Jul 30 11:01:13 2026 GMT
        Subject: CN=f4003bde0a315930c83c511fba0a5679c38e4b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:d6:4b:24:6b:b3:ca:38:66:ef:e7:e4:65:
                    bb:44:84:71:68:3d:02:0f:ae:bf:8b:58:b8:ac:66:
                    07:a7:9b:4c:c2:76:ef:2e:42:11:3c:a3:41:fb:f7:
                    60:c5:54:cc:eb:c7:b6:98:69:44:cd:a2:6b:f2:08:
                    d1:21:b8:03:ff:c1:8c:65:d6:32:61:ac:6d:3a:d5:
                    77:10:cf:f1:95:13:fc:09:0d:a5:36:f7:11:c2:35:
                    4a:76:7c:f9:6a:5e:88:1e:37:03:a8:1b:ff:5f:de:
                    c8:dc:67:8b:77:b0:f3:4b:f4:54:cf:92:c7:9d:ce:
                    18:d5:d8:46:c1:ff:5a:18:b7:40:80:06:b5:a7:ff:
                    48:5a:4b:60:b9:99:d0:98:9e:8f:6f:b0:25:e8:9e:
                    c6:48:d4:04:f9:f8:71:fd:57:e0:56:9d:91:bb:0c:
                    e7:52:86:44:64:37:27:af:92:e9:b8:c0:51:f2:d2:
                    9f:51:88:df:f0:6e:c1:15:ab:5a:c4:8e:f7:97:27:
                    39:8e:ce:39:e4:35:9d:98:d8:68:1b:1d:03:c8:67:
                    86:cb:b5:8f:d4:8c:17:29:c8:23:a1:6e:0f:12:55:
                    c5:3b:b0:43:a3:6d:45:3c:36:51:75:0e:1c:b6:5c:
                    b1:d8:25:ef:1b:6e:a1:dd:41:26:33:2c:91:e8:59:
                    19:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:00:3B:DE:0A:31:59:30:C8:3C:51:1F:BA:0A:56:79:C3:8E:4B:07
            X509v3 Authority Key Identifier:
                keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:83:d2:e9:1e:fb:3c:1f:5c:1a:c7:78:c4:8e:7b:39:d1:
         6c:d8:ed:ea:1a:b8:c5:f7:b3:fb:16:05:52:b5:21:80:47:2b:
         5e:96:c7:46:a2:c1:cb:d6:aa:50:3e:cd:53:5b:ef:3b:be:e4:
         b1:03:e2:2f:7b:97:20:12:92:16:08:5b:36:ab:fc:75:59:b8:
         92:5b:c5:f4:60:02:7a:3f:3f:70:45:37:b9:b5:57:e6:fb:67:
         ac:c7:89:c9:95:79:2d:97:c5:fa:12:17:db:f0:80:e9:58:5b:
         da:db:1e:e2:4f:0d:f1:6b:d2:42:e9:cc:e7:aa:e4:6b:6e:c7:
         61:a1:68:d7:99:c1:eb:06:07:2b:eb:27:f6:a2:39:0b:dc:d8:
         2b:c1:05:03:fe:73:c3:b6:16:68:28:98:39:d5:62:0b:56:e1:
         10:30:b7:a9:e7:e3:f8:d9:71:a0:a3:5a:ad:e5:6e:37:7b:91:
         19:85:c1:9d:50:f2:58:73:60:cb:fa:42:c7:1b:66:5f:5b:61:
         54:80:17:bf:e8:ca:84:cc:c2:31:ae:b1:cc:78:a2:d4:65:8d:
         88:fa:b7:9f:14:b3:4e:49:b8:b4:9d:b4:5e:50:bc:d3:66:90:
         94:20:f4:87:c2:c2:cb:9b:81:b6:d9:51:ce:c7:2d:38:2c:0a:
         f0:33:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:59:09 2026 by rpki-client