Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
File:                     WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft (raw, json)
Hash identifier:          lPboL/dHM1ZZpBopmv7ZcQhUiK0BgHzwlzE9UJlG2mM=
Subject key identifier:   F5:19:45:B0:20:FC:45:46:8C:6C:76:1E:EA:66:C0:27:CB:11:0F:08
Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8
Certificate issuer:       /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
Certificate serial:       01A0E62D418CBCE1FA65B57A0E2E671189E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
Manifest number:          1057
Signing time:             Mon 28 Sep 2026 04:02:00 +0000
Manifest this update:     Mon 28 Sep 2026 04:02:00 +0000
Manifest next update:     Tue 29 Sep 2026 04:02:00 +0000
Files and hashes:         1: 3XafC-hCOUFM-jug0_ev9kB4vuA.roa (hash: 7RiXYE5RDt0HSD+dkuTgOowiXviIVVlANZQyHAo4qDs=)
                          2: WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl (hash: U+sqIYVBxzuPcWbNntE47h8WOJ27RDzAhvE4D/KTKVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 04:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:2d:41:8c:bc:e1:fa:65:b5:7a:0e:2e:67:11:89:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8
        Validity
            Not Before: Sep 28 04:02:00 2026 GMT
            Not After : Sep 29 04:02:00 2026 GMT
        Subject: CN=f51945b020fc45468c6c761eea66c027cb110f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:42:44:20:a6:5f:f9:a1:d5:61:8b:cd:0d:
                    91:a1:f9:fd:e0:0a:bc:bf:67:3c:18:b2:61:85:ce:
                    3c:be:e0:6b:05:b7:72:d2:c2:fe:c4:4f:c7:1f:3d:
                    8a:59:20:1b:1c:95:e7:cd:09:fb:e0:e5:80:51:e3:
                    57:df:8e:bf:28:40:e0:cf:49:bf:47:e6:ab:f8:e9:
                    7e:56:69:9c:9b:ef:f7:da:a7:76:7e:94:96:35:7f:
                    dd:9a:cb:53:e4:ea:26:51:fe:3f:6a:8d:99:62:81:
                    5d:dd:bc:8a:dc:83:11:f5:48:9b:29:08:91:06:0c:
                    8c:2d:d5:53:44:05:24:47:11:9f:a9:fc:cb:2f:07:
                    82:25:d6:0c:10:10:f8:89:1a:5b:13:a3:cf:56:f8:
                    fa:47:73:4d:c6:b6:5e:86:33:3b:ef:40:07:49:6d:
                    d6:4e:13:d2:64:55:cc:bd:89:29:7b:47:79:08:78:
                    e6:c6:64:11:f0:e4:6c:fc:9f:af:19:09:b9:57:04:
                    1d:fa:24:4c:36:17:f0:9b:da:a2:fd:17:a6:18:92:
                    7b:c9:8d:92:cb:01:2b:71:21:f6:3a:fe:d9:08:ec:
                    b1:2e:24:67:a6:b1:a1:26:4b:72:05:0f:72:62:22:
                    cb:31:28:a7:0c:63:a2:b5:eb:59:7f:9e:df:ee:44:
                    f9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:19:45:B0:20:FC:45:46:8C:6C:76:1E:EA:66:C0:27:CB:11:0F:08
            X509v3 Authority Key Identifier:
                keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:8b:98:58:25:ae:8e:d5:9e:6d:67:dc:87:db:e8:9f:c0:23:
         4b:4a:15:8b:7e:47:cf:24:56:f2:9e:f7:ff:3e:43:3b:72:96:
         79:a5:c7:2c:a0:de:cc:d8:af:f3:17:ca:6e:fa:bf:08:2d:97:
         30:02:14:31:68:b6:8a:42:a5:a6:8d:f5:02:52:b4:e5:37:66:
         ab:e5:e6:44:fc:43:43:c5:e7:58:fe:d9:15:0f:de:4b:9f:7d:
         c7:bf:f4:a6:b2:cc:1b:89:45:c3:3f:f4:88:3c:62:4f:c2:90:
         14:85:5d:da:18:45:c4:45:ea:f1:46:ec:ed:ff:fc:27:60:1b:
         0a:f4:42:e5:b2:10:df:83:50:e6:c9:ea:0b:4b:15:cc:18:aa:
         a1:84:63:4f:1c:25:ed:d9:60:6a:b9:5d:5a:18:49:e3:a5:53:
         44:7c:3c:b1:62:0a:45:3c:a2:30:48:8b:8b:b6:56:c5:dc:81:
         cd:ce:10:f1:b5:73:6f:b7:35:d1:1e:fb:b7:7f:d8:66:4f:52:
         b4:fe:c8:5a:52:46:1f:f8:f2:5b:56:64:51:e6:da:86:7b:97:
         a2:63:63:05:e2:36:8f:1c:2d:1a:bf:a4:f3:da:64:8e:22:16:
         19:03:17:6d:10:00:54:09:27:20:19:46:b8:49:7f:31:26:36:
         a4:24:ac:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:41:14 2026 by rpki-client