Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File:                     WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier:          OtaLeqxiypZBk9glnlx4Q7fsNyBrM54cIPaD6ze/dXk=
Subject key identifier:   A3:B5:DF:CB:A9:93:74:8F:74:F6:BB:3B:47:F6:6D:9C:53:0E:60:05
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer:       /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial:       01A0DC177874A3A55A2D2AA1D1E5379F702D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number:          0577
Signing time:             Sat 26 Sep 2026 05:02:00 +0000
Manifest this update:     Sat 26 Sep 2026 05:02:00 +0000
Manifest next update:     Sun 27 Sep 2026 05:02:00 +0000
Files and hashes:         1: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: n0BuD7wm7Ik+ffYULvRgEXGM+NXIliAkmYvjBjEpoJM=)
                          2: ziF5LUxXxsiZsU2Zn5F9Vs8QBIU.roa (hash: JWHNPV4Q0ijWQ7FA9BlDGI8xfPLJfKs3pJXg1QGEDkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:17:78:74:a3:a5:5a:2d:2a:a1:d1:e5:37:9f:70:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
        Validity
            Not Before: Sep 26 05:02:00 2026 GMT
            Not After : Sep 27 05:02:00 2026 GMT
        Subject: CN=a3b5dfcba993748f74f6bb3b47f66d9c530e6005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b2:2a:dc:14:4f:8b:c1:28:30:f2:6d:8d:37:
                    8c:a0:e2:e9:0d:5d:54:64:f1:0f:66:64:8c:1f:fd:
                    37:fd:bc:02:e3:6a:2b:71:9d:e7:14:35:54:6e:aa:
                    10:3a:d0:bb:79:d2:d9:7f:58:e4:f1:83:2b:25:12:
                    26:58:6d:97:e3:eb:ba:d5:66:ae:82:e4:0e:55:c3:
                    af:56:98:1f:ea:87:b3:9c:79:6f:df:bc:4d:01:8c:
                    f3:d4:fa:fc:6f:18:82:3a:2e:d1:3b:59:28:02:62:
                    f8:5d:88:e3:26:ce:97:65:06:d2:3f:f3:2a:14:6b:
                    48:6d:0c:65:c2:6d:39:42:18:9a:c8:cf:ae:89:c8:
                    f0:41:1e:14:01:03:69:43:4c:88:79:8c:d8:6b:64:
                    d8:85:8c:59:f9:28:59:a2:2d:7d:7a:3f:46:e1:e3:
                    56:b9:86:ff:ae:db:0e:18:46:93:63:00:ac:70:26:
                    eb:ab:4d:72:be:40:4a:2d:59:de:90:7d:ec:53:5c:
                    9d:9d:bb:87:61:32:c5:d0:df:cf:44:8c:bb:ea:1f:
                    c7:a7:12:a6:8b:0b:a6:c1:68:32:f8:73:79:ca:ab:
                    ad:c3:64:aa:e2:e9:de:59:5f:1d:1c:15:de:2b:22:
                    c8:0e:88:91:93:15:d4:98:1d:ef:34:19:a9:83:cf:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:B5:DF:CB:A9:93:74:8F:74:F6:BB:3B:47:F6:6D:9C:53:0E:60:05
            X509v3 Authority Key Identifier:
                keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:04:df:9d:0d:a9:11:08:1f:f3:4f:1d:c6:7b:dd:cf:80:5f:
         f1:6a:40:95:23:5e:3a:63:2f:74:1a:46:f7:ef:57:dc:25:dc:
         f1:0f:33:b0:a4:08:63:62:66:58:15:37:bd:95:87:fe:32:5f:
         de:b3:c8:22:fa:43:fb:9c:43:79:82:97:0e:6f:03:53:1f:14:
         65:35:af:e9:d4:d3:37:1c:26:f4:23:39:6c:d7:28:c3:72:52:
         81:d7:b3:db:ee:3c:24:ff:c7:4b:ca:0d:fd:a1:9e:56:e8:0d:
         36:09:99:e2:aa:00:13:8a:32:e0:4f:1d:42:a6:a4:4c:80:71:
         f8:fd:3b:3c:e4:72:7d:00:dc:9f:12:1f:4d:69:3a:6f:38:d9:
         53:90:e6:71:61:c2:7d:f7:98:b6:42:5c:bd:87:ac:85:58:4d:
         01:85:2a:b5:4e:0d:7f:77:30:ae:24:eb:a5:e3:0d:9c:bb:a5:
         63:28:c5:e2:01:28:83:c7:29:b8:ac:28:d3:95:7a:1c:e8:62:
         d4:7a:54:30:52:3e:9a:95:e7:4f:10:69:f7:f6:42:ca:7f:9f:
         d3:95:ee:e1:87:63:45:41:f2:92:43:57:e6:f9:5e:0c:49:7e:
         3a:5c:c5:c0:53:db:13:b2:b0:82:cd:fb:60:7e:1d:26:a9:cc:
         b3:ae:2d:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDcF3h0o6VaLSqh0eU3n3AtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZDg5ZGMxODllMDA5MzYxYWNiMjY1NTY4MGU2NjljMGJj
NDc0NTYwHhcNMjYwOTI2MDUwMjAwWhcNMjYwOTI3MDUwMjAwWjAzMTEwLwYDVQQD
EyhhM2I1ZGZjYmE5OTM3NDhmNzRmNmJiM2I0N2Y2NmQ5YzUzMGU2MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprIq3BRPi8EoMPJtjTeMoOLpDV1U
ZPEPZmSMH/03/bwC42orcZ3nFDVUbqoQOtC7edLZf1jk8YMrJRImWG2X4+u61Wau
guQOVcOvVpgf6oeznHlv37xNAYzz1Pr8bxiCOi7RO1koAmL4XYjjJs6XZQbSP/Mq
FGtIbQxlwm05QhiayM+uicjwQR4UAQNpQ0yIeYzYa2TYhYxZ+ShZoi19ej9G4eNW
uYb/rtsOGEaTYwCscCbrq01yvkBKLVnekH3sU1ydnbuHYTLF0N/PRIy76h/HpxKm
iwumwWgy+HN5yqutw2Sq4uneWV8dHBXeKyLIDoiRkxXUmB3vNBmpg88upQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKO138upk3SPdPa7O0f2bZxTDmAFMB8GA1UdIwQY
MBaAFFjYncGJ4Ak2GssmVWgOZpwLxHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGIt
OWRmZjViZDU0ODhhLzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGItOWRmZjViZDU0ODhh
LzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHATfnQ2p
EQgf808dxnvdz4Bf8WpAlSNeOmMvdBpG9+9X3CXc8Q8zsKQIY2JmWBU3vZWH/jJf
3rPIIvpD+5xDeYKXDm8DUx8UZTWv6dTTNxwm9CM5bNcow3JSgdez2+48JP/HS8oN
/aGeVugNNgmZ4qoAE4oy4E8dQqakTIBx+P07PORyfQDcnxIfTWk6bzjZU5DmcWHC
ffeYtkJcvYeshVhNAYUqtU4Nf3cwriTrpeMNnLulYyjF4gEog8cpuKwo05V6HOhi
1HpUMFI+mpXnTxBp9/ZCyn+f05Xu4YdjRUHykkNX5vleDEl+OlzFwFPbE7Kwgs37
YH4dJqnMs64t4Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:01:42 2026 by rpki-client