Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
File:                     W-l5-45HcwS7WR1raO6nPalKgVs.mft (raw, json)
Hash identifier:          +4tG1/kesJcI9X7jP8Mbk9fe8PDEEJPo3d2qy8uY234=
Subject key identifier:   BC:6E:66:A5:96:B2:E5:E6:D3:C5:37:9D:64:50:1E:D5:EF:69:7D:64
Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
Certificate issuer:       /CN=5be979fb8e477304bb591d6b68eea73da94a815b
Certificate serial:       01A1070190F5908498E5055DC3697F4FB720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
Manifest number:          1A8E
Signing time:             Sun 04 Oct 2026 13:01:45 +0000
Manifest this update:     Sun 04 Oct 2026 13:01:45 +0000
Manifest next update:     Mon 05 Oct 2026 13:01:45 +0000
Files and hashes:         1: D5MpKRfbUjS5EyaGnKFsakcHpCo.roa (hash: 5bLxS+4pOi0Pqzh/iITqagfELgTwJf/wIYlbEjCbczY=)
                          2: W-l5-45HcwS7WR1raO6nPalKgVs.crl (hash: Oghn4biEzwCdA0s66K0TE2A8RZmybv1nIrgvJ6fjQiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 13:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:07:01:90:f5:90:84:98:e5:05:5d:c3:69:7f:4f:b7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b
        Validity
            Not Before: Oct  4 13:01:45 2026 GMT
            Not After : Oct  5 13:01:45 2026 GMT
        Subject: CN=bc6e66a596b2e5e6d3c5379d64501ed5ef697d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:ac:d7:04:91:1c:ef:dc:eb:ab:c6:e4:cb:
                    2a:d4:1b:e1:59:0b:24:b7:04:09:9a:07:9d:29:e2:
                    5a:0e:bf:57:02:26:90:22:ce:61:7f:c1:d7:8b:8b:
                    32:ed:d1:41:37:96:2c:26:56:7e:8e:69:f6:b1:72:
                    f8:ec:86:1e:3c:b4:c1:d6:eb:1a:7d:ae:29:75:0e:
                    d1:ea:29:b4:09:ec:3e:8d:be:56:e5:5e:be:b3:a1:
                    69:0a:ff:f4:e2:40:5c:b7:8b:26:93:49:93:f0:20:
                    cf:4f:01:cd:9a:c8:d5:a9:40:79:f4:e9:b3:db:29:
                    73:ff:69:82:9f:4d:cf:0f:8e:75:30:c6:c7:44:89:
                    02:b3:bc:fc:e1:32:9c:52:68:76:49:8f:32:3d:01:
                    e5:65:71:dc:1b:0b:7d:8e:49:6f:f4:de:47:c2:06:
                    61:04:3e:97:97:f5:fd:1c:01:76:1a:3e:6b:d3:4e:
                    77:2a:d7:99:cf:de:21:43:8f:3b:28:27:30:d0:8e:
                    c2:a6:82:99:74:1e:16:4c:55:26:8d:e6:c1:11:9e:
                    ae:aa:12:2e:56:c3:fc:39:be:8d:66:a9:0c:9a:b0:
                    d9:45:10:2c:39:f5:8a:69:2b:52:b4:6f:4e:43:bf:
                    72:e4:ec:c6:b0:04:27:8b:12:04:49:b2:21:b1:e3:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6E:66:A5:96:B2:E5:E6:D3:C5:37:9D:64:50:1E:D5:EF:69:7D:64
            X509v3 Authority Key Identifier:
                keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:43:61:11:9e:d0:da:15:6d:e7:29:84:b8:92:0a:bb:2c:6c:
         05:10:c6:52:42:c1:af:b9:12:ad:1e:59:a6:af:d4:e5:ba:3d:
         d1:f9:a5:1c:54:31:2c:c6:81:94:b9:bd:27:2a:41:07:9a:73:
         0b:1d:98:11:ee:35:7e:dc:51:55:f7:8f:f5:bf:b5:8c:0a:5e:
         27:1c:51:d7:ac:ab:4c:fd:bb:d1:bf:bb:f1:86:c1:b4:8c:37:
         e2:dc:e0:db:20:2c:e2:b7:df:ff:54:7a:b0:92:1c:99:45:2d:
         08:87:2b:57:b8:be:52:dd:7d:52:b6:d2:82:b3:53:ea:04:90:
         20:ac:a2:c6:04:39:8c:bf:e9:ee:20:81:08:45:00:70:a9:cf:
         c3:c2:a8:90:48:cd:b2:63:d8:a6:2c:67:d9:29:0a:8e:ac:50:
         0e:34:df:9b:d8:53:e8:39:38:20:44:91:d2:16:32:1e:3d:11:
         0c:e4:72:fd:92:89:fe:c8:9d:43:cf:a9:31:4c:f5:6b:38:60:
         85:4d:9f:ae:c0:bc:20:f3:34:76:93:e9:18:da:93:81:8d:47:
         11:92:7d:8d:79:a6:9b:c2:9e:ad:b5:3f:16:8b:69:9e:01:2c:
         1b:33:30:dc:6c:d6:d3:9d:db:85:a8:15:ab:78:b0:27:e0:30:
         fc:00:f5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 04:56:08 2026 by rpki-client