Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
File:                     WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json)
Hash identifier:          /2zLVZ7MK0UCdRGpvcpbTDe394JRwQ8GQuBnU3X2zg4=
Subject key identifier:   8E:E0:9A:52:D7:EB:FA:70:E5:C5:37:03:3B:3C:3A:49:52:B1:EB:BC
Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43
Certificate issuer:       /CN=5813e26d71ac5b6a601156d90ce0dccec5986243
Certificate serial:       019E1CB479C88E9DDB2486FBCA4591C5CE56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
Manifest number:          081F
Signing time:             Tue 12 May 2026 15:00:50 +0000
Manifest this update:     Tue 12 May 2026 15:00:50 +0000
Manifest next update:     Wed 13 May 2026 15:00:50 +0000
Files and hashes:         1: ME3_RRsJTE0yygMx8pWx1CRfu4g.roa (hash: NXcFWTl4I5CN86WhLodDSbukJ6PN73DMqFCemMucwz8=)
                          2: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: NAGsbKkKaLCyuznAQwgjNUCcAZiVVcj59OAYDV6l17Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:79:c8:8e:9d:db:24:86:fb:ca:45:91:c5:ce:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243
        Validity
            Not Before: May 12 15:00:50 2026 GMT
            Not After : May 13 15:00:50 2026 GMT
        Subject: CN=8ee09a52d7ebfa70e5c537033b3c3a4952b1ebbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dd:5e:6a:14:a3:45:04:1f:a6:74:27:ba:14:
                    55:31:90:30:1a:a9:b9:f1:fe:01:7d:5b:ba:51:20:
                    ba:6d:6c:75:67:22:5c:6e:4f:10:5d:84:54:e1:2e:
                    76:77:92:14:20:b4:0f:66:54:18:8e:84:75:48:d1:
                    77:c9:df:58:8e:b0:a1:cc:fa:cd:62:2b:24:80:3c:
                    7d:3e:5c:fd:55:9c:31:bf:12:38:98:2a:40:cf:53:
                    90:9b:84:c7:38:af:51:9b:4f:f5:27:04:66:51:50:
                    d3:9f:94:84:2d:32:0a:cc:de:2d:f1:5f:35:a3:67:
                    7d:29:13:1d:f1:2e:1f:91:f2:be:28:f4:98:75:20:
                    b6:f4:26:76:68:fa:8f:d8:d5:92:da:34:14:09:1e:
                    86:38:d1:a7:29:68:e8:bf:bf:6c:78:52:fa:e3:35:
                    ec:14:6e:6e:44:40:37:4a:04:9a:5a:4c:f5:2c:7f:
                    12:36:c7:25:05:84:8d:5d:14:fe:b8:4f:a7:d7:2b:
                    0a:ed:24:7f:93:28:69:b1:48:9c:43:08:11:a3:2e:
                    4d:41:0b:22:dd:cb:89:5b:62:9c:79:63:20:ad:0f:
                    c1:b9:f2:85:cb:6e:21:66:36:01:72:fe:36:41:3c:
                    be:95:66:39:b3:63:d9:e9:00:dc:44:5a:a1:e8:01:
                    4f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E0:9A:52:D7:EB:FA:70:E5:C5:37:03:3B:3C:3A:49:52:B1:EB:BC
            X509v3 Authority Key Identifier:
                keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:52:ba:4c:1b:ae:40:c3:ba:8b:8c:7b:7e:a2:c3:49:7d:9e:
         a1:e7:83:77:c6:2b:d7:87:4d:88:95:80:fa:7d:d0:17:06:2f:
         72:9f:fa:b0:08:af:31:dd:9a:5e:6c:9d:81:5f:62:e2:fd:62:
         ed:53:70:7b:90:f5:ac:04:bf:f9:68:6a:59:09:18:51:e2:23:
         e6:b7:41:a2:f9:c5:a3:3f:d2:74:34:a2:d1:80:fa:b0:22:d0:
         68:a1:31:d4:d6:ce:12:3c:c6:7a:17:77:5c:77:e0:d9:65:28:
         e5:54:10:87:6e:1b:41:ce:85:42:4f:a4:2c:00:e1:78:9f:35:
         5d:d8:7b:60:1a:f6:e2:07:38:b5:88:c8:9e:e1:7b:f3:a9:00:
         08:14:3d:2f:5f:6c:07:83:5d:68:15:0d:46:bd:40:40:4c:d1:
         12:91:b0:df:cf:29:ce:d9:d0:62:18:d2:9a:56:fb:3b:ee:be:
         d6:b7:e3:ba:c5:03:0b:f8:6e:7a:21:0a:dc:17:4a:00:ae:4c:
         f4:8f:00:23:f1:01:f2:b1:d0:28:b8:b7:9e:a4:28:20:3d:e3:
         3a:6e:58:84:2c:d2:3b:d0:b9:1e:e2:55:bd:e3:c9:86:30:c7:
         c5:20:32:f9:e8:93:b0:d6:51:5d:ab:ae:ef:07:e4:6b:18:8f:
         28:1a:85:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctHnIjp3bJIb7ykWRxc5WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5
ODYyNDMwHhcNMjYwNTEyMTUwMDUwWhcNMjYwNTEzMTUwMDUwWjAzMTEwLwYDVQQD
Eyg4ZWUwOWE1MmQ3ZWJmYTcwZTVjNTM3MDMzYjNjM2E0OTUyYjFlYmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt1eahSjRQQfpnQnuhRVMZAwGqm5
8f4BfVu6USC6bWx1ZyJcbk8QXYRU4S52d5IUILQPZlQYjoR1SNF3yd9YjrChzPrN
YiskgDx9Plz9VZwxvxI4mCpAz1OQm4THOK9Rm0/1JwRmUVDTn5SELTIKzN4t8V81
o2d9KRMd8S4fkfK+KPSYdSC29CZ2aPqP2NWS2jQUCR6GONGnKWjov79seFL64zXs
FG5uREA3SgSaWkz1LH8SNsclBYSNXRT+uE+n1ysK7SR/kyhpsUicQwgRoy5NQQsi
3cuJW2KceWMgrQ/BufKFy24hZjYBcv42QTy+lWY5s2PZ6QDcRFqh6AFPCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7gmlLX6/pw5cU3Azs8OklSseu8MB8GA1UdIwQY
MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt
MDZkZjFkYzAzMzY3LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3
LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADlK6TBuu
QMO6i4x7fqLDSX2eoeeDd8Yr14dNiJWA+n3QFwYvcp/6sAivMd2aXmydgV9i4v1i
7VNwe5D1rAS/+WhqWQkYUeIj5rdBovnFoz/SdDSi0YD6sCLQaKEx1NbOEjzGehd3
XHfg2WUo5VQQh24bQc6FQk+kLADheJ81Xdh7YBr24gc4tYjInuF786kACBQ9L19s
B4NdaBUNRr1AQEzREpGw388pztnQYhjSmlb7O+6+1rfjusUDC/hueiEK3BdKAK5M
9I8AI/EB8rHQKLi3nqQoID3jOm5YhCzSO9C5HuJVvePJhjDHxSAy+eiTsNZRXauu
7wfkaxiPKBqFfw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:13 2026 by rpki-client