Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
File:                     WeTW-rd6x3n0m_b8irgeI61GdXY.mft (raw, json)
Hash identifier:          Xvvn/aO7OpB9FM3eIWRturm6hOv3I9n7ec/DTIHIYec=
Subject key identifier:   95:98:91:00:BD:5C:7D:32:53:A8:56:80:73:9D:C1:DF:99:09:FD:B9
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Certificate issuer:       /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial:       01A104004E5CDFC6A4A3CFC918EFE73AADE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
Manifest number:          1AA1
Signing time:             Sat 03 Oct 2026 23:01:31 +0000
Manifest this update:     Sat 03 Oct 2026 23:01:31 +0000
Manifest next update:     Sun 04 Oct 2026 23:01:31 +0000
Files and hashes:         1: OGZYNH_ub9WEC2VDtNIIdxioraM.roa (hash: mxW6PYWZAT0skvfActi6xk4FhEyZUpuKH/kbvthxrvo=)
                          2: WeTW-rd6x3n0m_b8irgeI61GdXY.crl (hash: +X+/rRMbZbIQik1FbG0MBLZaksP4uKRB5l16h5bo/KM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:00:4e:5c:df:c6:a4:a3:cf:c9:18:ef:e7:3a:ad:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
        Validity
            Not Before: Oct  3 23:01:31 2026 GMT
            Not After : Oct  4 23:01:31 2026 GMT
        Subject: CN=95989100bd5c7d3253a85680739dc1df9909fdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c9:aa:9e:6f:1f:5b:fa:35:3c:cd:b7:7e:82:
                    7d:ff:a1:08:22:db:28:c0:9b:49:21:68:47:8a:ea:
                    ac:8f:10:0a:03:fd:80:54:c0:14:d0:97:64:c2:07:
                    ec:7c:0d:b1:86:e9:81:f1:ec:5b:df:48:8e:b8:86:
                    1e:8b:f2:9e:49:2e:9b:c5:65:0a:1e:75:a7:85:ec:
                    9b:f4:06:8c:78:43:f4:e5:75:67:2e:c6:f8:2d:c9:
                    55:93:fb:28:da:42:61:33:2a:8f:b3:14:e8:8e:c5:
                    3a:7b:9c:b7:0e:ec:4a:b2:10:78:21:3d:91:1e:7b:
                    4d:82:3c:b5:bd:d6:c0:f1:3a:54:d4:5b:a7:40:d1:
                    bd:74:77:97:f3:5d:75:bf:81:f3:a7:81:27:ee:17:
                    65:59:a8:e8:00:09:3c:6d:3e:e2:19:46:74:bc:08:
                    e3:26:68:78:83:e3:ce:48:d5:0b:9b:6f:91:6a:04:
                    26:36:95:b6:c4:b0:70:45:43:56:80:8e:c8:fa:a6:
                    e5:00:4f:05:11:20:62:b4:79:22:80:90:13:66:f9:
                    e7:5b:7a:31:07:d3:c5:cb:26:47:c9:83:f3:86:83:
                    75:0e:3e:cb:da:17:96:b8:45:da:8c:f5:33:f0:f1:
                    da:46:72:82:00:6e:d6:9a:c8:30:53:4c:70:1d:28:
                    db:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:98:91:00:BD:5C:7D:32:53:A8:56:80:73:9D:C1:DF:99:09:FD:B9
            X509v3 Authority Key Identifier:
                keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:3a:26:15:48:b4:15:19:b9:14:73:92:3a:1f:12:76:a5:
         20:02:3a:44:26:6f:c2:bd:d1:4f:3b:39:62:7a:06:f3:b8:76:
         50:1c:6b:10:f9:2a:1a:b0:5b:00:45:09:e5:8f:2b:d4:ea:97:
         c9:20:a2:c3:75:4f:81:89:3b:cf:b4:70:06:4e:a9:f7:d6:13:
         ce:42:f0:52:d4:0a:04:c5:09:1b:d2:41:b5:9a:f0:ab:99:0d:
         8c:ba:e2:75:b4:da:b8:29:80:c7:c7:9f:39:4c:64:ea:dc:72:
         26:3e:cd:e9:9b:9c:69:08:38:b5:ef:16:ff:f7:b9:65:8d:1b:
         69:1a:99:4f:9c:ee:b1:a1:43:44:e8:76:97:30:92:0d:6e:cf:
         6a:6c:48:c7:b0:d0:a7:cc:33:98:ba:58:ce:dd:03:ce:d1:fd:
         71:73:e3:d0:9c:a2:e7:2d:2b:16:dd:f9:c7:1b:78:88:d8:4b:
         0d:f8:ee:e4:0e:73:18:ef:b2:f5:63:03:9c:a8:08:96:5c:db:
         82:ea:4f:2a:0d:85:a8:bb:2d:98:82:d7:ef:95:33:aa:4d:35:
         51:26:44:55:ac:e3:79:4d:b9:87:ad:b9:4e:59:4f:b1:b1:ad:
         c6:f8:45:97:c2:93:72:5b:72:f3:7c:51:41:6a:c1:83:06:50:
         da:c3:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 02:40:07 2026 by rpki-client