Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
File:                     WNz7D_Tyi4_61usN0p6ytq9immg.mft (raw, json)
Hash identifier:          F6tYqzJh3Zwma6WVfLDu5lC6oY7UUps3BHE0ZKXUqkk=
Subject key identifier:   47:43:D5:AA:5B:70:C9:79:EA:A3:AD:05:29:B9:B5:02:2D:92:FF:9A
Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68
Certificate issuer:       /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
Certificate serial:       01A12AD6EE5A5EE841A30A7D686F30BD2B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
Manifest number:          0CF9
Signing time:             Sun 11 Oct 2026 12:01:31 +0000
Manifest this update:     Sun 11 Oct 2026 12:01:31 +0000
Manifest next update:     Mon 12 Oct 2026 12:01:31 +0000
Files and hashes:         1: WNz7D_Tyi4_61usN0p6ytq9immg.crl (hash: Lnn5AfGrbgvL8vICGKV5R1Z4yPt+JK/d9dCf6TnzOSk=)
                          2: _UtoV7e9xovL4Yza5XO1BJ-otaI.roa (hash: pIOeMdxwhh897iB8QkqYsFeOjgGBViVJMD2fd5tAswU=)
                          3: gQ9zxL655PUdBXaMJDbJpICNJxQ.roa (hash: 2lr1Ng0AF8Hz/bk+2ootSc8PFmQwTz37O9UurvJBhGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d6:ee:5a:5e:e8:41:a3:0a:7d:68:6f:30:bd:2b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68
        Validity
            Not Before: Oct 11 12:01:31 2026 GMT
            Not After : Oct 12 12:01:31 2026 GMT
        Subject: CN=4743d5aa5b70c979eaa3ad0529b9b5022d92ff9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:47:35:5a:72:43:bc:4c:e2:ad:23:27:bb:
                    93:0b:e3:87:81:19:d1:16:ed:72:fc:23:5b:06:48:
                    f8:a8:b4:00:88:ec:26:ee:45:37:6f:a5:a2:3e:8f:
                    dc:18:2b:33:00:b7:0c:09:88:d3:4e:42:64:ef:ff:
                    66:a7:2d:1c:1b:cb:44:b3:6d:fe:26:de:25:a2:f8:
                    cc:f3:b2:5e:ec:b7:60:1f:ce:78:b1:54:3f:8c:4b:
                    2c:2a:06:66:49:73:aa:c6:49:08:d3:e2:c9:b8:fc:
                    25:f3:08:52:98:64:07:64:e3:ae:16:98:ae:cb:4e:
                    51:34:97:de:c1:81:36:cc:29:bb:88:c4:94:24:ce:
                    3e:c4:e0:3e:4b:59:f8:5d:4b:54:e3:80:84:4e:33:
                    63:eb:59:2e:c2:91:8a:f2:71:db:67:22:1d:49:7a:
                    36:39:e1:24:50:5d:9a:f3:4b:0b:93:f0:6a:ae:ad:
                    ee:d7:a3:ef:d2:5c:57:ee:42:f6:c9:a7:1a:1e:8b:
                    54:88:ab:b7:7a:73:b3:9d:3b:e1:96:d2:dc:74:c2:
                    b3:be:35:cb:55:88:21:93:c2:9a:9a:4b:89:e9:41:
                    8c:57:14:5c:0e:d2:91:06:9b:bc:4c:bb:08:3f:c9:
                    8b:f7:3a:e6:54:2a:f7:40:00:14:2f:08:e0:f9:c4:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:43:D5:AA:5B:70:C9:79:EA:A3:AD:05:29:B9:B5:02:2D:92:FF:9A
            X509v3 Authority Key Identifier:
                keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:99:2b:94:f5:98:3c:65:24:7d:2e:4d:fb:b4:67:86:79:49:
         d5:de:29:80:91:a7:5c:d8:ac:3d:2d:5d:d7:7c:d9:05:4e:97:
         c0:ea:65:73:d6:70:20:6f:e2:e3:0a:ec:4c:b6:9e:2a:23:b6:
         51:e8:8d:df:5e:ee:88:e3:b6:a5:ce:03:96:56:93:8e:a9:29:
         9b:f3:a4:b2:97:4f:a2:6a:55:ce:62:15:ca:b0:6c:a0:1f:c6:
         cd:90:13:7a:c6:0c:29:74:90:9a:41:54:92:78:59:6e:fd:20:
         98:d1:75:2e:fb:fc:e0:18:1b:b1:0a:d2:7b:17:0c:5b:0d:47:
         52:f8:a6:f7:0e:cb:60:4c:99:df:2e:61:98:a3:10:8e:d1:95:
         a9:20:a9:27:3c:13:f3:33:aa:18:e0:cf:70:4d:c6:2e:b0:50:
         a1:d6:9e:2f:1c:60:d4:44:c2:0b:b6:d6:25:39:98:6c:28:68:
         db:0f:eb:3f:70:1e:62:21:0b:6b:ce:8d:eb:e7:ef:22:1a:1c:
         52:86:2d:be:d7:f1:55:40:97:0b:1e:e7:b8:1e:49:d9:76:7a:
         36:fb:34:cc:95:1f:66:e0:f5:66:e4:92:42:a4:86:55:7a:85:
         28:3e:28:4f:7f:a2:6e:2b:7a:08:2c:d6:a1:19:d1:2c:60:ef:
         8a:ec:c1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:46:31 2026 by rpki-client