Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          77/Ou7OhnIq4dvAUcbgkps1O+Gc9/GlPO77DbHIy0ZI=
Subject key identifier:   22:AC:BF:E1:4A:C6:CE:80:0F:95:09:71:C7:E6:4B:43:B4:9D:38:F8
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       01A0E99B37635359B080C6CFCEAAF4B0C8D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          0A32
Signing time:             Mon 28 Sep 2026 20:00:58 +0000
Manifest this update:     Mon 28 Sep 2026 20:00:58 +0000
Manifest next update:     Tue 29 Sep 2026 20:00:58 +0000
Files and hashes:         1: QjOXLGjz8ds-7sCauorJ8W8aVN4.roa (hash: BmFWBCryjEjKWhVriCT0YrDHfiFmLKZXY1G064wUhCw=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: xI1f+f5ednPVxRfhm4yJYhFmayCsIkVo3YUVHRqniUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e9:9b:37:63:53:59:b0:80:c6:cf:ce:aa:f4:b0:c8:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Sep 28 20:00:58 2026 GMT
            Not After : Sep 29 20:00:58 2026 GMT
        Subject: CN=22acbfe14ac6ce800f950971c7e64b43b49d38f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:86:bd:ad:2d:5d:5f:3d:30:bc:46:7f:00:
                    28:92:59:16:9f:2f:37:4f:5f:1e:07:1e:43:84:1e:
                    8f:d0:7f:d2:4b:67:00:c7:6b:cc:38:d7:7d:5e:02:
                    a4:b9:3b:37:67:10:10:4f:bb:89:6b:0d:11:a2:a4:
                    28:68:d3:d4:c9:fb:5d:15:7e:69:b4:5d:9e:4f:f6:
                    8a:22:7f:ab:e7:2d:9e:3e:c5:29:7c:e8:1a:e7:23:
                    58:d2:a7:15:f8:76:65:06:83:91:54:07:55:ae:a2:
                    56:1f:49:77:1f:29:a8:f5:86:52:44:77:f2:61:d0:
                    89:25:54:38:12:71:09:e9:8f:fe:59:f0:b3:e1:42:
                    e9:61:e5:21:00:a9:d0:0b:7b:b4:c7:6c:45:17:4b:
                    a0:2a:46:cb:d1:fe:95:33:a8:eb:6e:5c:90:59:3d:
                    01:bc:8f:a3:39:c3:d6:c2:eb:2a:c7:a5:3f:ff:d2:
                    5a:2c:4f:04:46:93:ba:4a:a3:9f:9b:6e:7c:55:39:
                    48:8d:0b:41:16:f6:3f:ea:bb:aa:ee:c2:a2:4a:5c:
                    09:e5:43:2c:94:1a:dc:b2:70:95:84:d6:6c:0a:b7:
                    a4:4b:c6:ef:47:ba:94:cd:2d:d5:71:ea:d6:fe:21:
                    f4:03:09:5d:f0:3b:95:cf:d8:fd:90:9a:44:e4:10:
                    48:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AC:BF:E1:4A:C6:CE:80:0F:95:09:71:C7:E6:4B:43:B4:9D:38:F8
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9e:b2:a2:21:74:27:73:e0:5b:98:43:40:2d:64:c1:34:59:
         b6:54:06:63:d0:88:70:5b:9a:e4:7f:73:cd:cd:76:54:10:e7:
         7d:eb:42:ba:51:b5:05:9c:56:af:65:a8:ec:8e:1d:f9:55:24:
         0e:cf:6d:83:00:3a:04:69:31:25:54:ee:04:91:12:f1:5a:92:
         98:06:c2:6d:b0:1a:07:d6:88:29:a2:58:ad:20:f7:c5:7a:fd:
         bd:53:ba:d0:96:ae:e0:48:2a:7b:0b:9e:fe:41:7e:8d:0e:a2:
         43:57:fb:54:fd:d9:f8:af:00:f8:1c:06:25:71:96:4d:a5:b3:
         f3:c2:b6:b3:35:8f:80:e2:2e:1a:f7:6c:dc:04:20:dd:86:db:
         77:2e:ed:63:e6:c8:ae:0c:86:97:bb:91:cd:85:c7:fe:f2:63:
         fd:12:9e:48:c6:50:43:cd:ae:24:b8:40:93:8c:ce:31:40:e8:
         ea:1a:5d:9b:a9:83:79:3c:d1:f1:59:bd:5b:39:eb:4b:8f:a4:
         a1:13:8d:52:82:de:9e:37:54:77:4b:b5:40:8d:03:04:8d:ed:
         3c:61:69:65:f4:a1:2e:2c:1e:e7:5a:85:fa:b9:7c:b1:e6:24:
         de:a5:96:d6:80:07:c4:11:db:e0:54:c5:aa:80:33:0c:93:59:
         fe:7d:71:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDpmzdjU1mwgMbPzqr0sMjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZGIwNDFhZmFiZmQ4YzExZjBiMTBiNTIzNzk5YjY1Y2Zk
ZTM5MDgwHhcNMjYwOTI4MjAwMDU4WhcNMjYwOTI5MjAwMDU4WjAzMTEwLwYDVQQD
EygyMmFjYmZlMTRhYzZjZTgwMGY5NTA5NzFjN2U2NGI0M2I0OWQzOGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYuGva0tXV89MLxGfwAoklkWny83
T18eBx5DhB6P0H/SS2cAx2vMONd9XgKkuTs3ZxAQT7uJaw0RoqQoaNPUyftdFX5p
tF2eT/aKIn+r5y2ePsUpfOga5yNY0qcV+HZlBoORVAdVrqJWH0l3Hymo9YZSRHfy
YdCJJVQ4EnEJ6Y/+WfCz4ULpYeUhAKnQC3u0x2xFF0ugKkbL0f6VM6jrblyQWT0B
vI+jOcPWwusqx6U//9JaLE8ERpO6SqOfm258VTlIjQtBFvY/6ruq7sKiSlwJ5UMs
lBrcsnCVhNZsCrekS8bvR7qUzS3VcerW/iH0Awld8DuVz9j9kJpE5BBIxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCKsv+FKxs6AD5UJccfmS0O0nTj4MB8GA1UdIwQY
MBaAFMHbBBr6v9jBHwsQtSN5m2XP3jkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAt
MmZiMDk0NGI1MTk0LzEvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAtMmZiMDk0NGI1MTk0
LzEvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ6yoiF0
J3PgW5hDQC1kwTRZtlQGY9CIcFua5H9zzc12VBDnfetCulG1BZxWr2Wo7I4d+VUk
Ds9tgwA6BGkxJVTuBJES8VqSmAbCbbAaB9aIKaJYrSD3xXr9vVO60Jau4Egqewue
/kF+jQ6iQ1f7VP3Z+K8A+BwGJXGWTaWz88K2szWPgOIuGvds3AQg3Ybbdy7tY+bI
rgyGl7uRzYXH/vJj/RKeSMZQQ82uJLhAk4zOMUDo6hpdm6mDeTzR8Vm9WznrS4+k
oRONUoLenjdUd0u1QI0DBI3tPGFpZfShLiwe51qF+rl8seYk3qWW1oAHxBHb4FTF
qoAzDJNZ/n1xpQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:43:07 2026 by rpki-client