Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
File:                     Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft (raw, json)
Hash identifier:          ysDLIxE3TCh8zbpawUHIs6Ab7vkIvqTVmo7ysLB+k8I=
Subject key identifier:   3E:BE:B1:9E:A4:0F:92:C0:F8:4A:A6:D2:FF:B2:B7:14:7A:BE:A7:FE
Authority key identifier: 59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
Certificate issuer:       /CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Certificate serial:       019CA9B362EC0C2898AB9E92EC2314D3FF40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
Manifest number:          0FFC
Signing time:             Sun 01 Mar 2026 14:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 14:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 14:00:31 +0000
Files and hashes:         1: KG5zQ0TXgXabdzXTjeqnKaVX6Fw.roa (hash: OsY5aKqFGurM+CWTAFpq3QCNs9jd9GDul/wkb8ng7+Q=)
                          2: Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl (hash: H3PwpLpS5mjsuxcdu45IO0NwW0xmRDfB6boB0qxDLok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:b3:62:ec:0c:28:98:ab:9e:92:ec:23:14:d3:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
        Validity
            Not Before: Mar  1 14:00:31 2026 GMT
            Not After : Mar  2 14:00:31 2026 GMT
        Subject: CN=3ebeb19ea40f92c0f84aa6d2ffb2b7147abea7fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:53:80:17:5f:f8:f6:82:57:80:8b:4a:2d:
                    22:c4:1d:1f:81:5e:84:9a:2d:16:33:9e:76:a3:c1:
                    59:9b:29:0f:14:bf:fc:22:e2:5f:c5:1b:97:8e:98:
                    5e:74:b6:07:c0:c2:39:69:16:34:0a:16:7e:d6:73:
                    ae:9a:82:80:c8:7c:84:1b:55:26:85:8a:57:90:03:
                    1c:aa:92:a4:f0:4b:c3:9a:c8:cb:8f:da:50:f2:5d:
                    d4:87:99:14:1f:01:a7:be:9a:0a:4d:ee:71:e5:e6:
                    3a:42:ed:6f:d4:a4:44:a2:34:58:2e:32:dd:c6:d7:
                    9e:80:1f:ab:24:e9:56:0b:bb:22:88:d6:34:79:77:
                    39:97:c3:4a:51:d1:e5:29:2c:db:27:38:57:dd:ff:
                    b3:45:2b:03:7f:6f:45:88:bf:0b:e6:c9:24:46:00:
                    79:f7:2f:6d:1f:11:de:0f:d8:2b:f9:33:05:f7:c1:
                    2a:17:7a:99:48:4c:6e:d1:54:28:5e:e2:8a:56:75:
                    f2:93:9d:c5:56:e0:87:0b:ab:83:80:38:4f:3e:1f:
                    83:fe:38:42:d5:d7:35:e5:8e:6d:47:4f:74:78:4a:
                    63:f2:ac:7b:46:5b:be:49:e5:c1:40:9a:00:b9:85:
                    43:10:fc:c8:0a:3f:59:49:2e:cf:8c:9a:32:50:0b:
                    9f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BE:B1:9E:A4:0F:92:C0:F8:4A:A6:D2:FF:B2:B7:14:7A:BE:A7:FE
            X509v3 Authority Key Identifier:
                keyid:59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:05:2a:f6:b9:05:55:96:2c:00:cb:40:6a:1c:75:54:5c:
         63:31:4e:78:d4:7f:e9:b3:d9:85:6e:20:9c:42:f8:0d:7e:49:
         7a:83:f5:ab:eb:06:89:32:2b:6b:eb:f5:52:66:fc:9e:ea:5c:
         e0:ab:12:1e:be:f9:02:5c:da:3b:c6:70:60:45:c7:da:1f:5a:
         d3:26:d4:d6:23:bd:93:02:83:9e:8f:e8:96:ca:0d:20:eb:bf:
         8a:2f:79:ce:f5:be:9d:f4:84:03:70:c7:a2:b2:ec:99:09:2f:
         da:32:f6:83:2d:bd:b5:fb:1f:5d:4d:79:90:c1:f9:5c:96:8d:
         d2:20:1a:87:d7:cc:39:2e:59:09:5b:e8:68:92:6a:3f:59:e0:
         97:54:77:aa:ab:6d:6d:76:e6:d7:29:7c:14:e1:60:0d:5d:c3:
         07:68:e9:d7:f2:ab:22:a3:06:3b:96:c6:81:d7:c2:0d:a0:9d:
         b7:32:a2:15:45:c7:18:d4:fc:dc:d5:46:35:b4:f6:38:14:50:
         5c:d1:21:22:c2:6f:96:f3:ec:b4:c5:df:21:5f:9f:ea:93:d7:
         fb:e4:0c:ea:57:02:9a:1a:53:f4:71:e0:d3:7b:48:6c:12:ae:
         fa:13:8b:5d:46:0a:09:d2:6d:85:0f:d4:13:be:b7:c5:7a:95:
         b2:eb:be:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyps2LsDCiYq56S7CMU0/9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YTllOWY4ZWE0NzQ4NmQ4MGM5ZDZkY2ZkNTY4ZjY1NGQ0
ZjA3ZWUwHhcNMjYwMzAxMTQwMDMxWhcNMjYwMzAyMTQwMDMxWjAzMTEwLwYDVQQD
EygzZWJlYjE5ZWE0MGY5MmMwZjg0YWE2ZDJmZmIyYjcxNDdhYmVhN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RBTgBdf+PaCV4CLSi0ixB0fgV6E
mi0WM552o8FZmykPFL/8IuJfxRuXjphedLYHwMI5aRY0ChZ+1nOumoKAyHyEG1Um
hYpXkAMcqpKk8EvDmsjLj9pQ8l3Uh5kUHwGnvpoKTe5x5eY6Qu1v1KREojRYLjLd
xteegB+rJOlWC7siiNY0eXc5l8NKUdHlKSzbJzhX3f+zRSsDf29FiL8L5skkRgB5
9y9tHxHeD9gr+TMF98EqF3qZSExu0VQoXuKKVnXyk53FVuCHC6uDgDhPPh+D/jhC
1dc15Y5tR090eEpj8qx7Rlu+SeXBQJoAuYVDEPzICj9ZSS7PjJoyUAuf0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6+sZ6kD5LA+Eqm0v+ytxR6vqf+MB8GA1UdIwQY
MBaAFFmp6fjqR0htgMnW3P1Wj2VNTwfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWIt
YWZlODRlMThkNTZmLzEvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWItYWZlODRlMThkNTZm
LzEvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbcFKva5
BVWWLADLQGocdVRcYzFOeNR/6bPZhW4gnEL4DX5JeoP1q+sGiTIra+v1Umb8nupc
4KsSHr75AlzaO8ZwYEXH2h9a0ybU1iO9kwKDno/olsoNIOu/ii95zvW+nfSEA3DH
orLsmQkv2jL2gy29tfsfXU15kMH5XJaN0iAah9fMOS5ZCVvoaJJqP1ngl1R3qqtt
bXbm1yl8FOFgDV3DB2jp1/KrIqMGO5bGgdfCDaCdtzKiFUXHGNT83NVGNbT2OBRQ
XNEhIsJvlvPstMXfIV+f6pPX++QM6lcCmhpT9HHg03tIbBKu+hOLXUYKCdJthQ/U
E763xXqVsuu+bQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:36:56 2026 by rpki-client