Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          Z/IYyXmEP75TdrPY6tD1CXdRFHEtlsmopcimnbTuDbo=
Subject key identifier:   9F:DE:40:72:70:0B:A2:D2:AE:52:33:DA:F2:B0:84:A7:6B:F1:C6:EA
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       01A1DB701DE3C955480362AD8E6200919DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          0657
Signing time:             Sat 14 Nov 2026 19:02:00 +0000
Manifest this update:     Sat 14 Nov 2026 19:02:00 +0000
Manifest next update:     Sun 15 Nov 2026 19:02:00 +0000
Files and hashes:         1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: 0Zf3EFoi1w0diAUsxU/ki6VlfipQZ7ZE9jUOoKLmjPQ=)
                          2: aeNtIymZwUKQWOeTccyVT7TBHRo.roa (hash: NRVVzMkO6SHCR3USmlXWQHKPaFtABXw2LsRv66QEVsc=)
                          3: bYwuKWLGOAiz-Xyi-FP3iiOfuOM.roa (hash: 7a2nIjdrNhg3Alb/N/10aBxPMBPyYoy/L70HpXzO0Mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 19:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:70:1d:e3:c9:55:48:03:62:ad:8e:62:00:91:9d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Nov 14 19:02:00 2026 GMT
            Not After : Nov 15 19:02:00 2026 GMT
        Subject: CN=9fde4072700ba2d2ae5233daf2b084a76bf1c6ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:15:0c:e5:10:01:5a:e4:d8:4a:4e:41:09:78:
                    35:0f:91:c3:a9:17:36:9f:28:8e:4f:ed:19:4c:1d:
                    f9:ac:e2:40:23:0b:5e:4d:d4:c5:00:8e:74:aa:2b:
                    4c:22:38:50:e2:e0:fa:c9:18:e4:74:62:cf:ee:57:
                    15:c6:a3:89:f2:99:49:5b:5d:bc:4d:9b:1b:ef:da:
                    dd:e0:bf:1d:a0:04:53:b1:9b:08:40:e0:77:b6:e8:
                    20:74:8c:e8:ba:33:a8:68:44:47:7e:50:de:d4:d8:
                    4d:b4:56:ae:d7:8e:22:89:8a:0a:b3:2d:4c:34:ac:
                    68:30:21:1b:68:69:ef:0f:b4:b8:a4:7c:6f:7c:ce:
                    56:d5:13:c5:35:99:8c:90:fc:2f:f3:96:6d:5f:5f:
                    4f:b6:35:87:c9:3a:8d:b8:79:0a:f7:9e:fb:a7:43:
                    51:1a:a4:1a:6c:b7:0b:18:d9:ca:f0:ca:e6:ae:9f:
                    98:03:8a:fd:2f:99:16:c0:dd:0c:2f:d6:5a:b8:4f:
                    bd:c7:08:6f:dd:e6:02:21:34:1d:3a:90:83:77:f2:
                    25:7e:37:40:06:98:a4:9d:c2:9d:d0:33:72:2b:f6:
                    9b:85:da:05:16:5b:4b:6d:59:4d:fe:c7:4a:b4:8a:
                    a8:01:dc:2b:a0:e8:66:95:a7:f9:dd:03:e7:a7:ad:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DE:40:72:70:0B:A2:D2:AE:52:33:DA:F2:B0:84:A7:6B:F1:C6:EA
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e1:df:b2:54:48:0e:89:07:ec:e6:a9:f6:37:e8:6c:ca:06:
         35:d5:24:76:e1:fc:cd:92:e6:ea:a1:3c:33:65:5e:2d:07:06:
         68:17:51:01:60:12:b8:12:b6:f8:11:de:9d:b2:9a:ed:a0:f3:
         d0:a6:0b:ef:60:7b:1e:9d:35:5d:7b:fe:a8:f4:31:25:4e:82:
         77:f0:0b:b8:3f:78:49:c3:33:66:e9:56:8b:5d:81:4b:53:5d:
         d5:d6:d6:1b:c3:2f:ff:42:bd:7a:a7:6c:4b:71:b0:cd:04:e0:
         3f:cb:44:ed:01:f7:d5:12:f0:70:2f:48:b5:aa:1f:55:b5:b1:
         a0:c0:be:8f:12:36:1f:65:9a:2f:eb:78:7c:e1:39:74:b7:64:
         ea:0f:3b:6f:f7:a3:94:e8:63:26:dc:f7:a7:4d:03:cb:1f:a0:
         1a:26:79:d2:14:d8:05:1e:18:6b:5f:4c:a4:fd:f0:b2:01:e7:
         d0:9a:49:8a:4b:d1:a4:cb:39:21:d5:1a:62:82:f2:15:7a:ab:
         b9:17:1f:47:20:73:c8:b3:0f:92:18:4f:28:50:4c:0a:5a:40:
         22:02:6f:cb:7f:0f:8b:87:a5:97:e9:fe:ad:95:2b:1a:f3:6c:
         1f:9a:0d:84:af:23:23:48:44:db:67:e4:16:a5:68:6c:6c:20:
         de:55:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:45:10 2026 by rpki-client