Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File:                     WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier:          9ShvNhdN159Jp5OriA1ltmyur/jbFoHQOvr9isR5rpk=
Subject key identifier:   1B:69:5B:E5:EF:7B:44:30:6A:CE:E0:A6:1E:8C:72:91:7A:AB:49:28
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer:       /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial:       01A0DDCEA7215D66B29E408FCE7191A0DD50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number:          092B
Signing time:             Sat 26 Sep 2026 13:01:42 +0000
Manifest this update:     Sat 26 Sep 2026 13:01:42 +0000
Manifest next update:     Sun 27 Sep 2026 13:01:42 +0000
Files and hashes:         1: OjCZNS0V7bS6o9kNX-GazXkNt6g.roa (hash: h0RBZKwBDu9T2bG9WT98CcP4agiyp1k9fyQRDt70M9A=)
                          2: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: 2+78pYT4zDwu5kKZujUMllvIGdWEoe2/NeVrJOdV4bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:ce:a7:21:5d:66:b2:9e:40:8f:ce:71:91:a0:dd:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
        Validity
            Not Before: Sep 26 13:01:42 2026 GMT
            Not After : Sep 27 13:01:42 2026 GMT
        Subject: CN=1b695be5ef7b44306acee0a61e8c72917aab4928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:ad:1a:a6:0e:7f:48:62:78:fb:96:7d:a1:
                    ab:0c:f0:1f:59:be:02:c2:9f:3d:c5:7b:80:e7:22:
                    44:17:eb:84:a0:10:5c:da:fb:6e:12:bd:2b:b5:3d:
                    06:5e:7b:f0:a9:73:af:04:23:56:96:83:f1:b3:c2:
                    5f:8f:d8:e9:34:f5:04:0f:af:2f:a7:c0:17:b1:58:
                    1e:bf:42:13:30:5f:66:d2:94:4a:2f:cb:6d:a7:c1:
                    a0:bb:bf:50:fc:60:34:f3:0c:8e:91:9d:b3:f0:f5:
                    8c:73:e4:5e:4b:40:13:e9:8c:c2:15:c1:a1:58:a7:
                    33:36:22:3e:ec:34:b5:a6:c3:86:67:7a:53:89:1b:
                    77:53:e4:ad:26:e7:41:66:e9:78:e8:f2:db:5a:6d:
                    d7:eb:4c:38:49:8b:12:de:60:18:d8:97:db:51:ee:
                    99:aa:b3:6c:1b:cc:05:70:3f:b3:26:c6:2b:99:6f:
                    62:24:10:77:16:22:07:11:d2:2e:4b:bb:57:e3:5d:
                    0d:41:33:42:28:0e:5f:8c:41:f4:32:10:d1:a3:66:
                    0c:ac:a5:2e:f3:a5:b4:60:d7:28:d5:a4:32:6e:3d:
                    c9:28:fd:74:b9:3c:7b:e3:e7:4f:2b:e9:6b:6b:1d:
                    80:1a:23:de:12:ea:e1:4e:5b:5c:7a:26:ac:d5:9d:
                    2a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:69:5B:E5:EF:7B:44:30:6A:CE:E0:A6:1E:8C:72:91:7A:AB:49:28
            X509v3 Authority Key Identifier:
                keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:45:4a:2e:81:fa:d2:24:95:a1:3d:29:e5:5c:a8:9a:27:28:
         c3:81:6a:12:f6:ca:cc:80:a9:00:54:40:7e:48:cf:75:df:5f:
         13:62:dc:7e:9e:57:f6:24:e2:7c:e6:84:e6:54:4e:a5:45:fb:
         ae:74:90:20:3b:60:c9:dd:66:c5:ec:3d:ce:a6:24:ca:d6:56:
         62:d6:d0:87:df:ab:0a:32:01:4c:bf:ce:35:35:95:af:8f:96:
         4d:eb:7d:d3:ac:d8:7a:df:92:56:96:c7:b5:6d:fb:85:88:5a:
         11:7b:3c:4b:cd:82:7e:dd:18:4b:11:4c:33:c4:d2:ea:81:99:
         cc:09:6c:f9:b6:0f:3c:21:08:6d:b8:6d:8b:51:a6:f5:d5:cb:
         9d:d9:0e:82:24:84:56:0d:98:6d:cf:99:fc:48:2a:5e:78:e4:
         d3:e3:61:84:dc:2b:e0:6d:19:c5:54:4d:db:d2:7c:70:88:e4:
         6c:47:b1:e6:99:5a:bf:a0:8f:0a:b9:68:cb:06:1d:d7:98:56:
         38:62:e2:59:2a:d0:55:30:8d:04:bb:ce:58:01:0e:7c:f1:e5:
         17:af:0b:32:a0:7f:f9:35:22:94:ac:20:6e:03:47:63:24:5c:
         01:3c:68:1d:35:75:74:18:d0:8b:a0:95:c1:a8:02:60:42:84:
         52:b4:86:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDdzqchXWaynkCPznGRoN1QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Y2JmZTA4MzRmOGU2NjUxMmY1NWJkNzhjYzA3NWI3ZWQ1
NmY0MDkwHhcNMjYwOTI2MTMwMTQyWhcNMjYwOTI3MTMwMTQyWjAzMTEwLwYDVQQD
EygxYjY5NWJlNWVmN2I0NDMwNmFjZWUwYTYxZThjNzI5MTdhYWI0OTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEmtGqYOf0hiePuWfaGrDPAfWb4C
wp89xXuA5yJEF+uEoBBc2vtuEr0rtT0GXnvwqXOvBCNWloPxs8Jfj9jpNPUED68v
p8AXsVgev0ITMF9m0pRKL8ttp8Ggu79Q/GA08wyOkZ2z8PWMc+ReS0AT6YzCFcGh
WKczNiI+7DS1psOGZ3pTiRt3U+StJudBZul46PLbWm3X60w4SYsS3mAY2JfbUe6Z
qrNsG8wFcD+zJsYrmW9iJBB3FiIHEdIuS7tX410NQTNCKA5fjEH0MhDRo2YMrKUu
86W0YNco1aQybj3JKP10uTx74+dPK+lrax2AGiPeEurhTltceias1Z0q4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtpW+Xve0Qwas7gph6McpF6q0koMB8GA1UdIwQY
MBaAFFjL/gg0+OZlEvVb14zAdbftVvQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDIt
NDA5NDEwNjc4NmE5LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDItNDA5NDEwNjc4NmE5
LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPUVKLoH6
0iSVoT0p5Vyomicow4FqEvbKzICpAFRAfkjPdd9fE2Lcfp5X9iTifOaE5lROpUX7
rnSQIDtgyd1mxew9zqYkytZWYtbQh9+rCjIBTL/ONTWVr4+WTet906zYet+SVpbH
tW37hYhaEXs8S82Cft0YSxFMM8TS6oGZzAls+bYPPCEIbbhti1Gm9dXLndkOgiSE
Vg2Ybc+Z/EgqXnjk0+NhhNwr4G0ZxVRN29J8cIjkbEex5plav6CPCrloywYd15hW
OGLiWSrQVTCNBLvOWAEOfPHlF68LMqB/+TUilKwgbgNHYyRcATxoHTV1dBjQi6CV
wagCYEKEUrSGvw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 19:44:38 2026 by rpki-client