Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          zOYWFRHdxpO5wiT31kRQ1jnGMJgVsTP2QnE2Db4HxBM=
Subject key identifier:   E5:C5:18:47:13:D3:2A:F2:40:CB:38:73:46:30:B1:85:BF:3F:DB:AC
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       01A0DF17C3DD3A222FE8263C77A18F24CE86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          1A8C
Signing time:             Sat 26 Sep 2026 19:01:11 +0000
Manifest this update:     Sat 26 Sep 2026 19:01:11 +0000
Manifest next update:     Sun 27 Sep 2026 19:01:11 +0000
Files and hashes:         1: 546UWvWGhdpJ8v98hderCrojdtA.roa (hash: 6DzrGXudmyoXg8jTIJPljYFkr7htCLIXi2BjYcFDJmE=)
                          2: ME3cETnapLDHP6DWdBAQQoKbaeM.roa (hash: W28I+8J7qnVyHnps7J0q4RxiUOdB6ciorvAbvq4SRpY=)
                          3: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: uV8CYVYStEzoqhjn+fibaBQV3HPSWdXU+6w1rNWoGHo=)
                          4: klXMh69HPg_6eKMxQVgx6zhe1QE.roa (hash: vG86oygd0IFm9Rxuz3bX4pixPzbUrSLnke23ygFfpi4=)
                          5: p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa (hash: r27HfBWDMYwyRF//qyu0OtsF9qIPudC+kjCHFI00zPo=)
                          6: pgoXDP1h0nWBwbv9FG2W5mHI85k.roa (hash: OZdZQ/KCgv22adlJuUYrt3hL7fGkm6hBd3n3kVRfbgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:17:c3:dd:3a:22:2f:e8:26:3c:77:a1:8f:24:ce:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Sep 26 19:01:11 2026 GMT
            Not After : Sep 27 19:01:11 2026 GMT
        Subject: CN=e5c5184713d32af240cb38734630b185bf3fdbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e7:ea:bf:ed:c4:7c:12:c7:68:3d:d4:02:78:
                    9d:0c:db:14:b2:d7:e8:2d:ac:ae:13:89:06:03:b6:
                    c5:6d:6b:f1:a9:c2:29:6c:b7:0f:59:6b:d9:d4:e9:
                    65:af:f4:82:9a:6f:14:31:47:a4:8f:1d:19:51:ad:
                    d1:7f:43:ec:cb:f7:6f:ae:bb:78:54:f8:9f:14:e2:
                    af:36:66:e8:e6:6e:21:02:3d:3b:e2:36:4e:f7:98:
                    c1:1d:34:45:e3:46:7c:69:36:d1:e1:14:28:22:0d:
                    ac:5c:e8:a7:aa:c4:ed:38:4a:85:ef:10:bc:8e:79:
                    71:11:b8:92:16:0b:e2:2c:6d:10:1a:54:04:99:3c:
                    cb:dc:16:e7:54:f3:f9:65:70:c9:81:b3:d6:11:fb:
                    fd:27:39:f5:c7:86:ed:d6:d2:4b:43:0e:71:91:66:
                    5c:7b:a6:73:c7:d2:5f:da:3c:93:66:af:29:44:5f:
                    ec:06:3f:29:d2:51:a0:27:55:23:cc:4c:a5:75:88:
                    d9:03:bf:b4:29:ce:86:a6:f0:df:2f:33:db:06:eb:
                    fc:08:31:3c:e7:b3:75:45:6b:79:4b:d5:bc:16:2a:
                    0f:c0:ad:c4:ae:0e:6f:59:ce:b8:2a:68:71:6d:19:
                    53:49:b2:a8:da:1d:89:d1:03:48:74:f7:f8:d2:51:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C5:18:47:13:D3:2A:F2:40:CB:38:73:46:30:B1:85:BF:3F:DB:AC
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:da:cf:fe:ae:63:ac:fc:fb:b2:1b:97:19:4c:4f:93:4d:0f:
         8c:b4:a2:57:b7:8c:95:42:a6:ea:18:22:75:d0:4c:c0:61:99:
         dc:de:d7:0e:ec:3c:42:b4:21:39:c9:13:f5:5c:4a:22:59:93:
         7b:64:ce:6b:97:87:2b:fe:06:34:cb:2e:72:28:5f:e3:02:b6:
         f7:f7:76:8a:db:55:7a:05:e4:a5:4c:08:7c:1d:ea:56:88:bb:
         2b:bb:e5:de:22:90:cd:55:31:cf:73:0a:ca:d2:7e:b2:09:37:
         14:cc:59:02:12:d5:35:67:4d:d4:9c:0c:8c:34:4d:ed:fc:09:
         7c:08:49:15:9f:3d:a8:bb:7f:d1:33:df:c6:1c:e4:30:47:91:
         2b:c1:68:40:a8:d4:2d:59:d2:db:dc:c2:d0:93:8e:37:1f:e4:
         4b:b5:23:c7:a6:26:bf:3c:e1:5b:6b:bd:44:de:f8:cf:ee:b0:
         ea:41:52:68:1c:21:a2:17:90:9d:a7:cf:96:98:b8:62:d0:74:
         d6:87:d0:3c:f8:5e:d2:f7:cf:bb:55:09:3a:74:60:39:6d:bf:
         e0:4e:05:83:7e:27:3c:56:7b:55:8e:08:6f:dd:0b:bd:15:c8:
         77:f8:19:9c:83:a5:ea:21:79:6d:15:a4:ee:11:b3:97:00:dd:
         38:8f:24:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfF8PdOiIv6CY8d6GPJM6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NmIwMTgyMTA1YmIyN2IwYzhiY2YyODQyYmQzYzFhODUx
NjRiZDEwHhcNMjYwOTI2MTkwMTExWhcNMjYwOTI3MTkwMTExWjAzMTEwLwYDVQQD
EyhlNWM1MTg0NzEzZDMyYWYyNDBjYjM4NzM0NjMwYjE4NWJmM2ZkYmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+fqv+3EfBLHaD3UAnidDNsUstfo
LayuE4kGA7bFbWvxqcIpbLcPWWvZ1Ollr/SCmm8UMUekjx0ZUa3Rf0Psy/dvrrt4
VPifFOKvNmbo5m4hAj074jZO95jBHTRF40Z8aTbR4RQoIg2sXOinqsTtOEqF7xC8
jnlxEbiSFgviLG0QGlQEmTzL3BbnVPP5ZXDJgbPWEfv9Jzn1x4bt1tJLQw5xkWZc
e6Zzx9Jf2jyTZq8pRF/sBj8p0lGgJ1UjzEyldYjZA7+0Kc6GpvDfLzPbBuv8CDE8
57N1RWt5S9W8FioPwK3Erg5vWc64KmhxbRlTSbKo2h2J0QNIdPf40lHSVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXFGEcT0yryQMs4c0YwsYW/P9usMB8GA1UdIwQY
MBaAFFhrAYIQW7J7DIvPKEK9PBqFFkvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQt
NzM3MGZkODBkZjZjLzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQtNzM3MGZkODBkZjZj
LzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABdrP/q5j
rPz7shuXGUxPk00PjLSiV7eMlUKm6hgiddBMwGGZ3N7XDuw8QrQhOckT9VxKIlmT
e2TOa5eHK/4GNMsucihf4wK29/d2ittVegXkpUwIfB3qVoi7K7vl3iKQzVUxz3MK
ytJ+sgk3FMxZAhLVNWdN1JwMjDRN7fwJfAhJFZ89qLt/0TPfxhzkMEeRK8FoQKjU
LVnS29zC0JOONx/kS7Ujx6YmvzzhW2u9RN74z+6w6kFSaBwhoheQnafPlpi4YtB0
1ofQPPhe0vfPu1UJOnRgOW2/4E4Fg34nPFZ7VY4Ib90LvRXId/gZnIOl6iF5bRWk
7hGzlwDdOI8k2Q==
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:02:18 2026 by rpki-client