Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
File:                     WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json)
Hash identifier:          Wn99Djfyodt2bMkI+ZcSujd5jfBgrn2CkJe+mI6SSF4=
Subject key identifier:   8D:E6:0F:A9:BB:76:95:03:F8:67:40:CA:22:03:7D:D4:03:2F:04:83
Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB
Certificate issuer:       /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
Certificate serial:       01A1013594C723CDFBA97CE94F6D7F6B6F31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
Manifest number:          11E0
Signing time:             Sat 03 Oct 2026 10:00:51 +0000
Manifest this update:     Sat 03 Oct 2026 10:00:51 +0000
Manifest next update:     Sun 04 Oct 2026 10:00:51 +0000
Files and hashes:         1: SgMIjUcR2c12DzERn5Ts_2Ui6dU.roa (hash: GYGPZLvxKXca2OxhVOyvlt9mnOVKXNEirW2JBi+fWL4=)
                          2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: Ow65u/qcR/UHVpJE0I7lfEbouD1y9y9yvmHTaOsCkes=)
                          3: XIThFyPTW5lXLvwW5lsLjLVEtsw.roa (hash: zsPoZ1kKOA5gCoYw0cog9xPEs778Ebzg1Uy38hXQLVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:35:94:c7:23:cd:fb:a9:7c:e9:4f:6d:7f:6b:6f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db
        Validity
            Not Before: Oct  3 10:00:51 2026 GMT
            Not After : Oct  4 10:00:51 2026 GMT
        Subject: CN=8de60fa9bb769503f86740ca22037dd4032f0483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:c0:19:ac:90:4c:82:57:cb:58:95:d6:43:
                    00:44:ef:68:57:b9:14:ae:f8:e8:50:0f:ee:98:39:
                    df:07:26:1d:60:fb:58:7c:ce:8f:b7:a2:c5:60:6e:
                    bf:00:30:98:b4:44:14:b5:07:28:e1:0c:2a:cd:b2:
                    74:df:42:15:0f:2b:8a:74:0c:82:92:00:57:ea:9c:
                    32:49:12:5d:c0:3f:36:0a:18:93:67:7a:65:71:71:
                    42:91:d0:b6:4a:c2:a1:51:53:de:fd:85:be:20:a5:
                    16:b6:d3:e2:45:33:f3:6d:2b:16:a8:ee:3c:04:07:
                    59:9f:56:19:bb:72:94:bf:a9:4b:a2:39:3d:59:b2:
                    14:5e:a4:b5:68:fa:2c:25:98:09:53:3c:b5:4f:21:
                    1a:98:05:8c:2b:c8:b9:34:4c:8c:de:a6:ca:b7:6e:
                    ba:9c:3e:bd:3f:d2:08:ad:d7:06:6d:8a:d9:4d:b2:
                    ab:02:93:30:de:4c:42:12:9b:37:11:ba:1e:60:aa:
                    53:30:e0:bf:a8:4a:24:e3:59:e9:be:d5:4a:bd:a1:
                    91:bf:5d:64:ad:d1:89:61:a5:ce:ee:48:d4:dd:fc:
                    8b:23:9e:f9:fc:c3:01:2f:4e:01:00:44:ba:be:44:
                    34:94:3a:46:c6:cb:af:06:df:5e:d3:0c:d5:e7:45:
                    0c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E6:0F:A9:BB:76:95:03:F8:67:40:CA:22:03:7D:D4:03:2F:04:83
            X509v3 Authority Key Identifier:
                keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c6:58:16:ca:10:aa:f9:1b:fa:ce:45:7c:8c:c4:1d:7d:d5:
         5d:07:d5:45:44:eb:71:6c:14:8d:06:17:ad:57:00:fb:0d:d9:
         9f:e3:bc:08:c9:a9:12:b8:68:94:c5:84:1a:81:72:be:c4:91:
         2c:66:74:5a:44:73:47:5f:96:eb:4b:c8:a0:07:97:56:98:ff:
         67:9c:59:a4:9f:e9:70:29:6e:46:34:0c:ab:b1:a4:e2:3d:a6:
         26:b8:11:de:f6:43:11:1a:3c:de:a5:7b:32:54:ca:ec:9f:2e:
         8f:ba:89:e4:a7:ae:48:c3:1b:a6:8f:55:17:63:18:da:6a:1a:
         24:3b:5a:26:16:38:7b:58:b3:25:3c:d2:ba:08:81:ce:4f:fc:
         5a:34:e7:66:1b:86:ae:cf:fd:8d:a1:85:77:57:d2:cc:22:3a:
         1f:ff:3d:df:b7:6c:3c:73:14:87:aa:29:25:85:d7:78:44:17:
         16:ba:f5:31:aa:06:3a:45:7a:dc:e3:09:04:88:b7:22:63:45:
         72:76:f3:3c:02:8a:01:c5:da:f7:62:01:93:42:6e:49:ca:e0:
         62:eb:f8:23:d9:04:fd:93:35:a3:03:9d:d8:5d:2a:02:1e:73:
         4e:df:da:0c:ce:95:5d:dd:e3:18:43:d6:00:07:ab:1f:cc:9c:
         8c:24:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:39:34 2026 by rpki-client