Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
File:                     WK1g2lJnHpCDzzmGTsoqojJBvp4.mft (raw, json)
Hash identifier:          qWwLtvEErNuRJ+4RLHqIOBLqElfTQo++Ndi3xkYxHio=
Subject key identifier:   DD:30:BC:A5:7B:EC:66:36:61:98:44:FD:45:99:00:90:47:F7:A3:2B
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Certificate issuer:       /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial:       01A0CCDA41847C6870F170B44D7510FC6075
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
Manifest number:          0C80
Signing time:             Wed 23 Sep 2026 06:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 06:00:50 +0000
Manifest next update:     Thu 24 Sep 2026 06:00:50 +0000
Files and hashes:         1: 1-iWOVrefjs9HBIASRdjsq7CSI7Q.roa (hash: m7ouBQ2qviW5hyE9F7O8F0y6LhZUjUrkwEJiugNgPHU=)
                          2: 8GcZVYe92v13intCg5ID91bOLno.roa (hash: b3DSszyVIPa0dAbS/Sd5p3m5O/sg4MNTHqFlJONsIZM=)
                          3: 8gD4Yehfx3KQKAgzNtRDdrpxTOE.roa (hash: GdLqnXXuc74TK0f1OfY8VEAVhHit7ftS+gMGAs+ZxL8=)
                          4: 90fbs6INI7k6L2dcFgAyFPdas3Q.roa (hash: aMrXwblbKo0nbHJFMktLKEieI5pQLYv3eyj9v/R4Das=)
                          5: J3R2IeAW_m0d02uAQasK7sttZCQ.roa (hash: 20fGt425z6WH78gh3mBbdekTdMzKNuIzu/Znp+h8cBU=)
                          6: RjlJyxrYJIpppY-il0IsnWaY1Yk.roa (hash: +L3StqZUGVJBR17tezGmEcfXdni/G3W+qWpSte6mPqk=)
                          7: So3FOdy3cbnSF1z2AtX9fXb3td0.roa (hash: g+qyeZK3+h679wAEDeuXb8IaxcqohHNX+e/kSP0wnSQ=)
                          8: Uo1B8ZqW8ahN3n4iMgkQ9E5NMA8.roa (hash: jK+oCYMLPr8WRuiPIxuvKDK2N1EAkUXmk9TrZ4+llQU=)
                          9: V0MQL1QSGaHPg-fuZpiIbQ95It8.roa (hash: /iEauArFETSHt+oVh4X0P9XauroZqIQkKpyGkW/oVAA=)
                          10: WK1g2lJnHpCDzzmGTsoqojJBvp4.crl (hash: +V8GWz0+yd8sZ8Cg1GjkpP8U/ltBMKZ6pibJOBtgr+o=)
                          11: Yw4-PtKyeDh-ymIr_sDr7zP5g6A.roa (hash: JGM16ISa/46csgGvHClDjZZZszeySN0POEu+d9nm5EA=)
                          12: iCvG4p2QaTydD8b84J_nnzVlKvI.roa (hash: xqa+whns2NrmkgIeSClWzUrNsZIzDnw7vlvDjgURIVc=)
                          13: jRBO3dP6kjdGEjvIueUWE3Kxrao.roa (hash: YEsBiZfHK0/Af6mEc8Xvxso1vKN+auBD28oICzOdIyk=)
                          14: jZAyOp4p2x1_hIZ-aojjByMUepA.roa (hash: Fql5ZKPISHsS9zt2EiXQ3bC49O7thvtmkZ/k5Y01q+0=)
                          15: mHxiPQqYSd3YgtMiY7ZJnFapo4c.roa (hash: oW19pS7k2lDKE0UhQi3S2JkcEpqW7TXCa+ItAXdJrqU=)
                          16: o9LeVuyG4zwZfl9X19i5EI5YY1w.roa (hash: IhxdWhfxb6x1vtP/bQGfsWt6Bv7vG9Bd56mOjcaVmC0=)
                          17: o_cRQiJ3E3badh4n57mdFmTgOSI.roa (hash: Dmv2qqcyseH0g1R1WzOI5iGgnfkcnNawQwle4nojSsk=)
                          18: ogCVM0_FD3R6QEvyBDBHVazHJl0.roa (hash: P5tzcX+u+5K9X4wyuw7Cue/raY9HNdmFL+lkgKXUyB4=)
                          19: oiOso2ah4DIMtsn2kxKAzGDyirs.roa (hash: aLcgxvos1HLAujPoJMMu3Y2LHkeSWIRqhOML8XYEQlQ=)
                          20: rvqu1safjRLAF6KvzQ7EIXBDtAw.roa (hash: l1iJNOWrCthSzMX4gh9W3WWiCyK3s7TGkqXWkdDcu9c=)
                          21: tgSRqnQnZUD0Fu4ANbQFDigMoEo.roa (hash: NZR02viri4xDg6oLTnJWANSbonEFpMqlapgOxg1s9+0=)
                          22: vjO8ZBNOGz3aVrJM5o_VXTmGeVU.roa (hash: JULRiIFQZ+iF95rVirRL+zxVbr6tTkj3Gel2uhllVeU=)
                          23: xmtjwxeBLOAWcHZqUbjEPq2TVyA.roa (hash: 6LvCGqyMBfudMs9Yh6sSAhcgOZ+ICy/M8PUt4CxnzIg=)
                          24: zjtWKp4QSsuMA2qXcFJ_tDFcwMQ.roa (hash: sw1zjdsmrJIpjnwBSZaC74oL0tezRwjeC04OXwIHglo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:da:41:84:7c:68:70:f1:70:b4:4d:75:10:fc:60:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
        Validity
            Not Before: Sep 23 06:00:50 2026 GMT
            Not After : Sep 24 06:00:50 2026 GMT
        Subject: CN=dd30bca57bec6636619844fd4599009047f7a32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:04:a8:20:0c:35:75:66:00:ea:c5:9b:ee:
                    3a:04:3a:31:e4:b5:20:d7:4a:0f:87:92:b1:86:3a:
                    73:36:fe:6f:49:3c:cb:21:9a:a7:fe:18:83:5b:5f:
                    12:d9:fd:00:e0:b9:0e:3b:58:23:f5:33:2a:2e:43:
                    9e:bd:bf:e1:ab:dc:b9:de:a7:a4:76:74:0a:f5:da:
                    e5:1f:e9:23:59:a8:d2:55:0b:a0:13:5c:16:fe:95:
                    26:4d:5a:38:11:94:2b:51:8a:ff:69:e5:d4:ed:75:
                    e9:91:11:d3:13:fa:59:e5:d0:55:33:db:fc:1e:2e:
                    48:91:e9:ee:94:4d:9a:dc:ca:44:07:5a:d0:3b:42:
                    0d:22:d8:d0:48:a8:5f:d8:09:36:a1:1a:e5:f6:f2:
                    1e:a7:7b:9c:3a:b9:ed:6d:c5:6c:3b:8e:33:50:4e:
                    3a:f2:e9:a4:97:96:45:ae:54:4c:c2:de:91:fa:d5:
                    af:c6:e5:07:02:cb:3b:76:dc:06:1b:74:d2:a9:49:
                    43:da:0d:1a:8b:be:12:2b:d9:6a:f6:01:56:57:e3:
                    12:fc:91:20:cf:dc:e4:c3:93:1a:52:63:cc:35:62:
                    9e:4a:38:21:be:86:53:ec:a2:b9:93:09:8c:20:7d:
                    51:93:16:ee:2a:1e:a3:e0:12:aa:5c:b2:20:b8:12:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:30:BC:A5:7B:EC:66:36:61:98:44:FD:45:99:00:90:47:F7:A3:2B
            X509v3 Authority Key Identifier:
                keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:20:c6:0f:8e:f0:e1:94:45:dc:10:cd:e6:ce:7c:9e:f3:44:
         7d:67:c3:5c:72:75:7c:ed:c0:0f:21:a8:b9:e5:22:43:27:3b:
         aa:50:8e:16:b4:23:31:d7:ce:be:e8:92:da:d1:6a:72:c7:5a:
         73:62:1b:9b:9b:f6:a5:19:8c:3f:0c:f8:20:a4:c3:4f:7c:70:
         2e:a1:19:84:4e:9f:00:9c:7d:2f:6b:1f:d3:55:ab:65:c3:e8:
         71:38:52:40:06:a5:d4:43:40:a9:ca:84:27:b4:10:b4:29:9c:
         3f:9b:cc:65:f7:8e:42:4d:76:10:7a:16:97:11:8a:5a:77:b2:
         22:79:48:dd:00:39:44:5c:d5:fb:fe:e8:d3:42:1e:48:7d:cd:
         4a:60:58:d4:4f:94:33:38:13:c3:20:b4:d7:d0:32:c4:d8:cd:
         9b:1d:40:9b:db:13:80:29:f5:9d:87:b2:9e:2e:e1:82:71:b3:
         1f:dd:1d:9b:4e:6d:ae:fc:5d:c2:38:83:73:98:01:0e:df:b2:
         b2:9b:4d:5d:91:9f:8d:fa:a7:ea:ef:8e:ef:72:4b:23:b0:49:
         90:e6:cd:1a:8b:1f:09:8a:1a:6b:6a:be:f8:47:2e:60:5a:55:
         65:fa:05:60:2b:aa:8a:64:79:20:24:af:99:03:20:d6:90:69:
         9b:ee:4d:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2kGEfGhw8XC0TXUQ/GB1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwOTIzMDYwMDUwWhcNMjYwOTI0MDYwMDUwWjAzMTEwLwYDVQQD
EyhkZDMwYmNhNTdiZWM2NjM2NjE5ODQ0ZmQ0NTk5MDA5MDQ3ZjdhMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wIEqCAMNXVmAOrFm+46BDox5LUg
10oPh5KxhjpzNv5vSTzLIZqn/hiDW18S2f0A4LkOO1gj9TMqLkOevb/hq9y53qek
dnQK9drlH+kjWajSVQugE1wW/pUmTVo4EZQrUYr/aeXU7XXpkRHTE/pZ5dBVM9v8
Hi5IkenulE2a3MpEB1rQO0INItjQSKhf2Ak2oRrl9vIep3ucOrntbcVsO44zUE46
8umkl5ZFrlRMwt6R+tWvxuUHAss7dtwGG3TSqUlD2g0ai74SK9lq9gFWV+MS/JEg
z9zkw5MaUmPMNWKeSjghvoZT7KK5kwmMIH1RkxbuKh6j4BKqXLIguBLSCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0wvKV77GY2YZhE/UWZAJBH96MrMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABCDGD47w
4ZRF3BDN5s58nvNEfWfDXHJ1fO3ADyGoueUiQyc7qlCOFrQjMdfOvuiS2tFqcsda
c2Ibm5v2pRmMPwz4IKTDT3xwLqEZhE6fAJx9L2sf01WrZcPocThSQAal1ENAqcqE
J7QQtCmcP5vMZfeOQk12EHoWlxGKWneyInlI3QA5RFzV+/7o00IeSH3NSmBY1E+U
MzgTwyC019AyxNjNmx1Am9sTgCn1nYeyni7hgnGzH90dm05trvxdwjiDc5gBDt+y
sptNXZGfjfqn6u+O73JLI7BJkObNGosfCYoaa2q++EcuYFpVZfoFYCuqimR5ICSv
mQMg1pBpm+5Nyg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:17:51 2026 by rpki-client