Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
File:                     wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json)
Hash identifier:          GI2PK1wQYp8KOpdYLJ5e6iDR55SIDVD4cffIR3TOHiE=
Subject key identifier:   E6:83:D4:A0:CA:24:12:55:44:34:07:35:40:CC:EA:5C:83:D3:AF:6E
Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
Certificate issuer:       /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Certificate serial:       01A110E06C1B96AEC6BEEF331A6A711B2350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
Manifest number:          1A8E
Signing time:             Tue 06 Oct 2026 11:01:45 +0000
Manifest this update:     Tue 06 Oct 2026 11:01:45 +0000
Manifest next update:     Wed 07 Oct 2026 11:01:45 +0000
Files and hashes:         1: VcIFu4fr8pm6FLIUjmO70GIyZ-s.roa (hash: DJIAA47Hj5H0/8WK2sFz3aZBYGT+yJ5AlaBSOLy7SpY=)
                          2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: DIA9vDMGeyJj7MrDrre6NYc0R7x/8+m3EQX5Wl9UllM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:e0:6c:1b:96:ae:c6:be:ef:33:1a:6a:71:1b:23:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
        Validity
            Not Before: Oct  6 11:01:45 2026 GMT
            Not After : Oct  7 11:01:45 2026 GMT
        Subject: CN=e683d4a0ca2412554434073540ccea5c83d3af6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:79:c3:8c:9b:af:d0:70:09:f5:1f:45:ab:65:
                    82:7b:8b:ec:1f:da:d5:9a:99:6f:fc:d8:b4:e8:13:
                    7c:59:7d:bb:14:05:9d:28:82:ea:7c:9d:11:07:be:
                    88:2a:02:e2:08:f9:4b:f8:a3:32:cb:19:47:1b:b9:
                    b5:82:0d:b0:15:90:2b:cb:e9:4d:90:70:8b:94:af:
                    93:b0:97:89:ab:da:bc:65:0c:5c:0d:b7:b6:69:0d:
                    48:a9:2a:a7:c7:92:aa:81:d7:d0:d2:a8:67:5a:ba:
                    bf:25:84:0d:d3:f0:39:74:d2:6a:22:8a:37:f7:ed:
                    27:c8:de:8e:da:9b:c8:9e:b7:00:b9:32:1e:2b:04:
                    59:1e:2e:10:2a:7e:ad:7b:88:fb:62:80:d9:f3:47:
                    47:c2:7b:e8:3d:9d:f1:16:73:57:d7:9e:76:e7:e3:
                    32:c3:1d:c2:de:d0:36:c4:38:91:41:f3:a7:f6:de:
                    65:04:fe:f8:9b:a1:48:78:77:0c:2b:7c:78:97:e2:
                    03:56:ac:f1:fc:b2:a9:5f:e8:e6:60:87:92:f6:e3:
                    77:2d:64:0a:80:d8:f6:29:34:c6:d6:7f:3e:f8:31:
                    34:47:ad:8a:cc:a1:98:46:a8:d6:4a:07:a6:ed:14:
                    de:c8:f4:74:7f:e7:4a:63:2c:59:3c:fe:5e:6d:f2:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:83:D4:A0:CA:24:12:55:44:34:07:35:40:CC:EA:5C:83:D3:AF:6E
            X509v3 Authority Key Identifier:
                keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b9:3b:ef:9a:97:02:52:08:6b:56:3d:74:cc:2f:95:0d:bb:
         31:e9:49:ec:ca:4b:3f:c0:57:0b:19:e5:1e:a2:70:68:92:e4:
         74:7f:8e:ac:7e:02:fd:59:b6:be:41:7c:62:4a:3e:52:0d:72:
         cb:0e:3f:96:1f:dc:6e:72:41:70:47:f3:a0:d6:5c:a0:f4:1e:
         9c:e5:69:6b:1a:f5:fc:13:8e:79:2a:ac:b6:9f:05:ed:b6:d4:
         37:77:3c:c3:ca:03:c8:be:19:d9:59:43:cd:29:a8:73:3f:d0:
         cb:a2:47:ff:29:bd:eb:6a:d2:d1:87:1d:c3:23:a2:a6:9f:d3:
         4d:77:f6:57:a6:8d:c1:bf:eb:16:c7:6f:b0:92:a7:09:92:20:
         61:fc:9b:c8:44:98:7b:7c:fb:dd:dd:4e:c3:68:b1:d9:ed:f6:
         c4:b2:39:70:8e:61:61:e7:30:a4:4c:2d:5c:e4:0c:03:4a:ee:
         8e:f9:ca:9d:a7:85:69:fb:e5:39:dc:61:5d:26:a1:85:92:b9:
         49:4c:56:88:77:35:67:17:e0:3e:9c:fe:3f:29:8b:29:9b:b6:
         17:aa:01:fa:db:ba:10:82:3e:09:16:26:95:79:5d:fd:f1:22:
         b8:e9:a5:3f:a5:4d:37:4d:1a:bc:fa:2b:60:12:ab:92:46:8d:
         cd:08:cb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:45:34 2026 by rpki-client