Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File:                     WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier:          v8PvbV+Tbh/osRDNroIGgiNFJCsIIE+6EMLQK3upzUQ=
Subject key identifier:   46:F8:18:13:BF:4D:FB:41:BC:7C:CF:0C:41:E3:09:03:95:4B:6A:12
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer:       /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial:       01A0DC84CC3579492CA80E777710F076B354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number:          1A71
Signing time:             Sat 26 Sep 2026 07:01:25 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:25 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:25 +0000
Files and hashes:         1: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: ubslApzoqvgD1TFgGSOIHnqXBHMB8WScb+lGf8Up25s=)
                          2: ubDRCyGTNPH280nyPWUjQFlxXwo.roa (hash: aQLrEZhn3B0wMZ5KJdawYUdqKjoKHetb4pEObkiH9xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 07:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:84:cc:35:79:49:2c:a8:0e:77:77:10:f0:76:b3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
        Validity
            Not Before: Sep 26 07:01:25 2026 GMT
            Not After : Sep 27 07:01:25 2026 GMT
        Subject: CN=46f81813bf4dfb41bc7ccf0c41e30903954b6a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:1a:09:02:ad:85:e3:c6:e6:ee:8b:ca:7e:8e:
                    49:f3:39:2c:5c:48:59:11:d1:c6:4a:d1:4a:4f:8f:
                    ed:c8:26:8a:b8:df:23:9c:de:40:c3:44:c9:57:20:
                    38:ad:c7:12:78:b3:ea:18:5d:61:84:a0:6b:86:32:
                    15:0c:15:2f:9e:e7:24:58:75:42:d5:d6:98:73:88:
                    c9:f7:a5:16:72:f4:0d:50:dd:b7:cf:d9:43:e0:6d:
                    67:1b:bb:04:4c:18:a1:bd:a6:9b:b5:db:3b:be:58:
                    5c:da:2c:b3:14:8c:8e:c7:8e:d2:29:2e:6b:ca:c2:
                    ea:38:b2:72:09:a3:51:37:47:ba:98:41:47:57:c0:
                    b0:f9:9a:8e:be:af:c3:30:b1:87:9a:f7:c2:88:01:
                    6e:7b:a2:f9:b3:78:73:ca:62:33:a2:07:01:fe:46:
                    fc:3d:01:49:1d:74:4e:bd:34:35:6e:9f:0a:b7:7b:
                    2b:ae:28:ec:1b:69:d9:21:59:8b:29:bc:a3:1b:ea:
                    f3:66:09:6e:44:7a:84:3d:9f:de:af:90:7f:47:92:
                    a5:95:65:e9:b6:20:92:76:61:79:92:16:7f:54:33:
                    10:ee:ea:ce:9d:c2:15:91:4d:60:69:6c:47:18:14:
                    a9:10:65:e6:46:9c:f5:56:87:c9:d3:f4:e7:93:de:
                    52:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F8:18:13:BF:4D:FB:41:BC:7C:CF:0C:41:E3:09:03:95:4B:6A:12
            X509v3 Authority Key Identifier:
                keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e8:94:b6:77:c3:88:32:b1:d5:82:a8:49:94:1e:64:a1:c6:
         d4:22:1d:35:cb:35:47:af:03:be:e8:33:e6:96:6f:06:c9:f6:
         01:8b:23:b1:0b:18:94:5f:da:a7:3f:8f:da:5c:87:ba:5d:70:
         63:27:e5:0d:64:3a:0d:dc:c6:18:fd:75:fa:09:13:a4:d1:7d:
         6a:7e:a5:9a:fb:44:be:ef:9d:f1:90:67:5a:6d:0a:45:35:fb:
         21:d5:70:3a:5c:aa:09:f7:16:24:58:af:62:01:c3:c9:c3:7c:
         05:09:e3:45:96:9e:2c:96:e6:71:ee:04:97:53:77:53:43:79:
         ae:07:99:ff:a8:b4:87:c9:a1:90:ee:29:db:d3:ed:16:b0:46:
         7c:2e:fc:0f:f9:60:96:18:e1:58:56:44:a9:24:87:2b:cd:46:
         f8:d7:3c:7e:1c:55:2e:eb:e8:80:d4:c2:6d:59:5e:c3:66:ee:
         f5:b4:bc:4d:dc:b2:07:6e:2e:cf:8f:0a:1a:cb:2e:35:a4:65:
         a3:1f:ca:ab:bf:80:18:9a:19:be:e7:19:cf:26:44:69:49:fe:
         56:3b:e6:e1:d3:6d:5b:e0:6c:b7:99:7a:7a:09:bc:5a:07:98:
         9e:76:ae:22:8b:bf:d3:ec:1d:ef:1f:f5:03:21:48:20:29:d9:
         5b:47:bd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:40:51 2026 by rpki-client