Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
File:                     wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json)
Hash identifier:          sCiq0MuUaV72aTZlxMdZ7VeeX3vLSOuSIJ/5verwtDs=
Subject key identifier:   41:CB:B1:EC:9C:FF:F2:69:89:EC:C7:E8:E7:2D:1D:FB:79:90:BE:64
Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96
Certificate issuer:       /CN=c1c6e4060e269e08b936660702c978ae8b3a1996
Certificate serial:       01A1317DBFD27325B01341196EBBC5D0CC52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
Manifest number:          0884
Signing time:             Mon 12 Oct 2026 19:01:26 +0000
Manifest this update:     Mon 12 Oct 2026 19:01:26 +0000
Manifest next update:     Tue 13 Oct 2026 19:01:26 +0000
Files and hashes:         1: ra29butMifiezKtKfx76h0-beS4.roa (hash: CSRhvGkVJgI5m+Ih+PZR1asLchKiPtTXHdFmOp2umxE=)
                          2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: dJfUdCUdoqN7BrRY5q0+XtLQuiEOOJCAFgKoCOIIeTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:7d:bf:d2:73:25:b0:13:41:19:6e:bb:c5:d0:cc:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996
        Validity
            Not Before: Oct 12 19:01:26 2026 GMT
            Not After : Oct 13 19:01:26 2026 GMT
        Subject: CN=41cbb1ec9cfff26989ecc7e8e72d1dfb7990be64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:55:32:f0:c2:fd:e9:15:dd:d0:bf:53:5e:
                    33:99:8d:13:2d:88:79:4b:cb:78:f8:4e:62:86:84:
                    03:c4:cd:08:1d:f2:f3:05:ff:c2:6f:e6:66:26:8d:
                    cf:17:0b:1d:a1:8a:32:96:56:77:f0:a7:e2:40:90:
                    f0:12:de:f2:f3:89:b4:08:51:3c:c1:e3:ad:98:2a:
                    8d:d7:6d:27:60:b7:ce:a2:08:37:00:46:a7:d9:e9:
                    67:e7:8a:e6:80:1f:b7:6e:c4:d3:f1:29:52:10:3d:
                    9f:93:30:f1:47:c3:ba:1d:48:e4:fc:de:cc:cd:ae:
                    5b:49:4e:d1:eb:98:0d:83:9b:7e:29:d7:63:21:c0:
                    23:00:b3:bd:f4:c4:e2:c2:22:88:cd:de:88:b3:79:
                    76:31:7f:4f:76:2e:d4:c2:9a:d6:84:6d:ea:2c:0e:
                    01:59:06:d5:05:8a:d3:d2:32:2d:25:72:14:f2:7d:
                    6b:08:45:48:ff:02:ef:40:84:53:3d:0b:5d:5a:90:
                    04:2d:18:47:1f:cf:11:aa:fb:d3:0d:ab:49:9b:65:
                    62:ca:49:29:22:6c:76:63:2b:b1:84:4c:24:b0:77:
                    6b:b6:09:99:a2:d9:87:36:a4:e0:c8:b7:a0:4e:4a:
                    78:22:03:b9:48:33:c5:3d:f8:60:58:d2:7a:8d:55:
                    c5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CB:B1:EC:9C:FF:F2:69:89:EC:C7:E8:E7:2D:1D:FB:79:90:BE:64
            X509v3 Authority Key Identifier:
                keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:95:d7:17:89:63:3e:16:7b:a0:3e:3f:b3:d7:e4:2b:e9:d5:
         f8:e8:54:d5:6f:80:e3:05:28:b2:d9:52:39:7c:cb:7a:26:50:
         2b:72:b2:1b:f5:1e:a9:7c:f5:2b:0c:04:02:e8:62:91:f3:28:
         50:59:1f:1c:69:98:a3:c3:a4:21:3e:95:fc:2c:ab:05:8c:6d:
         eb:dc:3d:d4:21:b8:d0:b9:07:ad:1d:13:9a:f5:47:fa:ee:ae:
         79:53:54:f0:c9:15:c6:b4:3d:a0:c2:d0:fc:43:c5:d1:3e:eb:
         ac:af:6f:20:b7:c2:7f:d9:f3:6c:c8:fc:69:a7:b4:87:df:5d:
         a4:3f:c6:b9:26:5c:a6:64:61:19:b0:3f:00:76:72:48:2a:15:
         45:ea:37:a8:f8:fc:b6:27:6f:84:cc:28:93:c4:a4:76:95:6a:
         94:b5:b2:d3:3d:2a:cf:08:af:d3:80:b9:20:7c:2d:f8:d5:42:
         21:85:92:7d:03:fb:8c:a0:39:99:12:ab:48:6a:b7:aa:a8:f5:
         db:7b:88:24:58:dc:d2:29:c7:55:21:80:f0:f5:41:7d:dc:f2:
         a7:1e:60:24:cb:61:ff:d2:67:65:08:9c:37:7f:39:8a:ca:de:
         21:49:4a:1d:59:7f:c5:b4:0b:ef:85:ba:e6:9e:da:66:cb:52:
         57:fc:07:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:28:31 2026 by rpki-client