Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
File:                     WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json)
Hash identifier:          W81t6j6huJBINvgyC5uTjd4UxofdZ4KjJ90hgb4cyWc=
Subject key identifier:   79:B2:C3:1E:13:6C:82:B1:DC:68:CC:34:DC:02:1E:F2:59:9B:AA:F1
Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Certificate issuer:       /CN=5861579b875e3e093d47325b9735edbfe7809fba
Certificate serial:       01A12B7B1673929FF90191CB0613111B574C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
Manifest number:          0550
Signing time:             Sun 11 Oct 2026 15:00:49 +0000
Manifest this update:     Sun 11 Oct 2026 15:00:49 +0000
Manifest next update:     Mon 12 Oct 2026 15:00:49 +0000
Files and hashes:         1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: NTnnJa2ltsj1oiGqa2I6MIUYinNpkLPK1w193BEaUD4=)
                          2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:7b:16:73:92:9f:f9:01:91:cb:06:13:11:1b:57:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba
        Validity
            Not Before: Oct 11 15:00:49 2026 GMT
            Not After : Oct 12 15:00:49 2026 GMT
        Subject: CN=79b2c31e136c82b1dc68cc34dc021ef2599baaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bc:3b:53:ce:80:72:21:65:f2:4e:13:88:3f:
                    39:b7:cd:52:08:d2:b3:05:f1:ff:44:be:5f:aa:6d:
                    12:5f:98:12:70:82:dc:cb:49:2a:57:76:9c:63:21:
                    ec:7a:a5:e4:93:d9:71:04:e8:dc:ae:de:ac:93:dd:
                    91:5e:b7:c1:70:02:f7:05:50:cb:cb:c0:81:66:56:
                    e0:4b:89:2a:74:0e:60:2d:86:cc:c3:ff:09:93:c9:
                    d3:d0:67:6e:84:99:e7:b6:03:2e:c3:da:6f:5b:53:
                    e2:82:c4:95:6b:d8:e5:db:07:49:84:44:8f:f3:44:
                    77:a2:4a:d7:e8:21:5f:fb:7f:8f:ad:d3:41:17:4f:
                    aa:8a:e8:55:e7:87:cc:3e:e5:d4:4a:a9:ac:38:59:
                    e4:82:ba:d4:c5:dc:eb:b1:1d:b1:f0:1f:cf:72:58:
                    f7:d5:74:39:09:a3:9d:65:a1:86:40:27:89:c2:d4:
                    14:61:22:11:e5:d6:16:8d:7f:fd:cf:5a:64:9f:7a:
                    7a:bf:2b:6e:5f:53:c0:cc:af:4b:a2:90:5f:f5:36:
                    f2:b7:18:a5:c1:dc:85:72:63:15:03:11:d4:0f:4d:
                    e8:0c:f1:44:ad:d0:7e:b3:34:7c:89:a4:10:3c:76:
                    5e:b9:22:f2:a7:2f:1a:dc:3d:df:df:59:5b:10:c0:
                    fc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B2:C3:1E:13:6C:82:B1:DC:68:CC:34:DC:02:1E:F2:59:9B:AA:F1
            X509v3 Authority Key Identifier:
                keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e0:62:aa:25:39:70:de:06:2d:3f:ba:66:53:f7:96:cb:d4:
         93:18:fa:ab:3b:25:99:55:1a:ec:e1:df:6e:cc:eb:e2:bc:29:
         ce:3e:b5:3f:a7:84:f3:3c:37:f8:6a:7e:30:e7:e4:70:1e:7d:
         29:13:db:74:46:c5:a7:97:2c:ca:37:4b:5f:7a:72:3a:ad:7c:
         1e:ec:42:1b:87:73:73:58:17:ac:fd:7a:c8:d2:27:57:22:8e:
         1a:66:a4:28:ac:c5:bf:c7:d4:0e:c6:05:61:48:86:87:f5:21:
         74:d3:51:af:55:83:fd:00:aa:67:3d:6f:3f:01:98:4d:e0:cd:
         73:90:06:47:42:ee:6b:25:18:3f:2d:d3:89:76:ea:bb:a8:a4:
         c7:9a:be:5b:e3:7e:42:77:45:94:40:44:f4:46:ab:1e:a7:68:
         74:38:77:ed:a0:72:90:94:f0:ac:a4:b9:a2:cb:a1:47:39:b0:
         a1:f2:6a:ba:13:e1:1e:b0:1a:40:5f:20:30:cd:b3:24:5a:d1:
         8c:73:c4:5e:a5:fe:2e:69:2f:5d:71:06:33:af:eb:65:0a:48:
         4c:00:9f:f2:8b:d3:52:07:84:d6:a4:35:2f:f7:d6:04:d4:26:
         4c:b4:69:f4:d4:1a:03:51:a7:82:32:e5:7e:3a:20:a7:ad:e5:
         97:97:46:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:30:10 2026 by rpki-client