Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
File:                     WanLToBmxLffBLT9DXEgFrVYYFE.mft (raw, json)
Hash identifier:          Ms3mZp1UJw4uyYSIDAEULI3XD4KBx8JJPla8oU8BaTY=
Subject key identifier:   98:FE:20:91:10:3D:5A:6E:31:3F:8A:BC:34:4E:C2:4A:92:00:22:74
Authority key identifier: 59:A9:CB:4E:80:66:C4:B7:DF:04:B4:FD:0D:71:20:16:B5:58:60:51
Certificate issuer:       /CN=59a9cb4e8066c4b7df04b4fd0d712016b5586051
Certificate serial:       01A0D8A8468DAEC588B0BB380EE1056AA81E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WanLToBmxLffBLT9DXEgFrVYYFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
Manifest number:          017E
Signing time:             Fri 25 Sep 2026 13:01:41 +0000
Manifest this update:     Fri 25 Sep 2026 13:01:41 +0000
Manifest next update:     Sat 26 Sep 2026 13:01:41 +0000
Files and hashes:         1: ODfm3Yxukkk8Zy5VhsFGvCnVz3Q.roa (hash: rPqaG7a4NES3BlfPeVXwXTW0FGFWtg1TVkdyJef/wvg=)
                          2: WanLToBmxLffBLT9DXEgFrVYYFE.crl (hash: BgNjHIJ3VwGLeVo2xYNn9Ybv/+J4Xp0dY0wfr//xaaY=)
                          3: uBNL_ss2Qb-o57v6RB1FMQTXLJ8.roa (hash: gTgD0ioaHypn29NRYsE+FbQ+jS6wHnoN/Ie2L/7E1rc=)
                          4: yBuaNUDtkZX5BM5UVm4FRpLBl4A.roa (hash: IGGEjHe9Mqw+ubMvARqgA6TVzk7zSt3+AzhRVYNBFSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WanLToBmxLffBLT9DXEgFrVYYFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a8:46:8d:ae:c5:88:b0:bb:38:0e:e1:05:6a:a8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59a9cb4e8066c4b7df04b4fd0d712016b5586051
        Validity
            Not Before: Sep 25 13:01:41 2026 GMT
            Not After : Sep 26 13:01:41 2026 GMT
        Subject: CN=98fe2091103d5a6e313f8abc344ec24a92002274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:60:f5:6f:f5:9b:78:c7:ba:61:e0:ef:3d:5f:
                    da:a6:54:6d:11:21:1a:f4:96:e1:9d:c1:51:a3:95:
                    c7:ce:4a:f6:62:9b:26:8b:95:01:1d:7a:eb:17:02:
                    ed:78:2c:31:e6:4f:51:49:56:52:d9:b0:5c:f1:79:
                    74:98:c0:2f:2a:97:4a:63:48:fd:1c:3a:b8:da:cc:
                    a5:3c:4f:77:97:64:0c:e8:fa:5d:1f:3b:4f:a7:a4:
                    42:1d:e6:58:d1:87:7f:97:21:ca:2d:d9:e1:0a:26:
                    45:7c:4f:34:37:32:88:4a:25:4b:c7:22:09:ca:85:
                    89:9b:ae:43:3c:86:69:b9:40:eb:64:76:83:c7:03:
                    56:3b:c8:37:be:9d:16:cc:88:6f:52:c7:26:99:d5:
                    fa:a4:fd:32:19:08:bf:a9:47:c3:6c:65:44:60:31:
                    e3:e6:a9:bf:16:fa:6d:92:29:39:47:7b:5d:8c:fe:
                    c3:3d:58:28:ea:c6:1e:2f:39:9a:0a:8f:d2:70:08:
                    2c:fe:a2:4e:ab:62:8a:33:94:b1:a7:1c:70:2f:46:
                    3c:7a:64:c2:79:16:1d:be:4a:ba:88:4b:34:24:f7:
                    8a:e4:da:f0:4b:39:3e:7e:ea:a0:27:3c:5a:7d:eb:
                    26:9c:47:00:53:4c:74:6d:76:41:0b:a9:d3:10:59:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:FE:20:91:10:3D:5A:6E:31:3F:8A:BC:34:4E:C2:4A:92:00:22:74
            X509v3 Authority Key Identifier:
                keyid:59:A9:CB:4E:80:66:C4:B7:DF:04:B4:FD:0D:71:20:16:B5:58:60:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WanLToBmxLffBLT9DXEgFrVYYFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/854e31-7faf-40fc-b2aa-7e52c37052bf/1/WanLToBmxLffBLT9DXEgFrVYYFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:f0:e1:49:44:dc:34:79:5b:f0:c5:c9:59:ed:25:94:2f:93:
         38:52:15:cb:92:65:d9:be:b4:c6:f0:83:2e:1a:ac:36:f6:0f:
         9d:14:84:97:3c:bc:7d:ca:26:e6:cc:5c:9c:7e:99:07:8c:b7:
         1c:dd:9f:92:c9:64:4b:bd:29:87:16:38:f7:38:13:4c:c5:94:
         4e:c5:05:ce:ca:f3:10:a0:ce:98:ac:99:32:a5:72:f8:9d:93:
         7d:f8:ab:a7:7d:2a:8b:9f:95:47:3a:e1:11:93:4f:88:e7:a6:
         7d:39:5a:cb:58:b3:88:aa:66:47:f5:63:c1:e3:ff:5f:f1:82:
         85:e5:a3:ab:da:1a:5c:56:c9:9d:f6:1f:c9:67:b9:9c:c8:a8:
         03:e0:f7:30:b1:d1:92:a9:ca:5c:32:64:9a:3c:8e:17:26:56:
         39:5e:09:3b:af:e6:3e:ad:7d:41:ed:8c:b9:a7:cf:63:06:ea:
         8f:42:ff:07:94:95:6a:04:98:8b:01:18:98:46:7f:91:76:2c:
         fe:27:97:46:9d:47:7a:e3:0d:d0:49:d3:67:71:96:4e:bd:84:
         8c:65:64:dd:fe:40:74:06:8b:dc:fd:cc:fa:a0:7d:33:91:10:
         67:93:4d:97:a8:3b:f9:a9:8a:de:24:19:59:22:b5:3b:2b:48:
         f8:fb:1e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:08:39 2026 by rpki-client