Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          +Ij65qBA8J9O4S44Tg6/jMLgviRkmHpxuddoLRgf8zg=
Subject key identifier:   26:7F:33:D7:A2:A6:57:92:3E:F8:AE:7C:C0:0E:7F:55:8B:E1:12:30
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       01A0D012CD8573C72585FFF8B72CCE780842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          0934
Signing time:             Wed 23 Sep 2026 21:01:28 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:28 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:28 +0000
Files and hashes:         1: FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa (hash: cK6XeGopFBU42xQOw3pXSfyyWEVVyNojCMYqWc1ytZU=)
                          2: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: JisZ6WcSrv5IfLKOkglChCj7R7HAbJNEctdTtIMQLyg=)
                          3: nGiD_VuUEB-534WjNRVtjKrImS4.roa (hash: bHtWWwpySfNp2/DWZty3G/IOwsGExDDGytrN6bgjIio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:cd:85:73:c7:25:85:ff:f8:b7:2c:ce:78:08:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Sep 23 21:01:28 2026 GMT
            Not After : Sep 24 21:01:28 2026 GMT
        Subject: CN=267f33d7a2a657923ef8ae7cc00e7f558be11230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:d3:fe:77:dc:f3:a8:e5:30:c3:e2:d6:09:
                    54:1d:ae:12:65:4c:1c:29:5a:88:44:6d:52:44:00:
                    37:65:29:80:46:6b:b5:26:20:d3:2a:f3:17:d0:5e:
                    f6:dd:a2:d2:3d:99:21:bb:60:7e:99:a7:c5:69:b5:
                    c8:99:60:90:0e:5d:41:f4:fa:29:0f:2c:5c:ed:c6:
                    9d:d4:42:01:a6:e1:4a:f4:b3:1a:11:f4:31:1c:d3:
                    52:5d:52:cc:e0:78:68:77:74:64:c3:e4:57:5d:7e:
                    aa:3e:75:8a:0b:72:48:4d:9d:dd:71:0e:a2:e0:11:
                    eb:ae:27:8a:74:d3:fd:86:d3:a3:df:9e:33:61:57:
                    4f:89:32:56:a5:52:d4:53:0a:bb:67:b2:79:33:ac:
                    83:9e:78:cd:82:b8:18:ed:73:b2:70:3d:7b:ae:b4:
                    a0:06:83:f3:c2:56:8a:ac:2d:e6:e7:c7:0a:1d:9e:
                    0a:6b:7c:48:e3:52:6c:89:ae:61:4a:93:28:b4:5e:
                    e0:f7:5a:b8:9b:4c:5e:a3:96:ef:2a:21:48:f7:fb:
                    e1:80:ac:36:62:82:c0:92:f4:c5:b7:6b:a4:04:7e:
                    78:d3:3f:67:f2:4d:18:73:a5:60:c5:00:67:01:11:
                    b7:63:9b:d9:ad:3d:1d:61:f4:33:44:79:96:7a:6d:
                    bb:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7F:33:D7:A2:A6:57:92:3E:F8:AE:7C:C0:0E:7F:55:8B:E1:12:30
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:eb:f7:9e:5a:c6:f5:f7:e1:c5:3f:be:28:81:3e:2f:a1:
         dc:9f:8e:06:36:cb:a3:fa:0d:c0:d7:97:5c:e4:31:fd:07:82:
         e3:b7:ab:df:ce:e5:1f:ea:ee:91:fd:0a:4f:8e:8b:b2:3a:e6:
         c9:ba:3c:40:5e:1b:32:a6:fa:a5:e7:63:6d:fe:d4:fb:25:40:
         0f:8b:1f:f8:85:4c:0b:77:40:ca:c4:4d:44:7f:e2:f4:e9:9c:
         44:98:6e:e6:fc:54:1e:92:16:a5:35:68:f0:30:d1:c0:ce:eb:
         cf:dd:70:c1:50:89:e8:96:f1:7f:9f:a6:28:72:2e:e1:68:fc:
         b1:77:63:33:44:30:dd:0a:7f:3e:d4:2a:40:35:85:c8:3c:9b:
         3b:b7:25:08:f1:d0:92:97:6d:25:ec:3f:b1:5e:7f:14:14:4a:
         13:e4:41:ea:94:2f:6e:d8:92:75:d7:c2:5d:de:17:20:ac:ce:
         12:20:d7:0b:4a:98:d7:c7:45:86:4d:26:3e:7b:0d:bb:73:10:
         73:ef:fc:ff:63:4d:2e:c5:b3:d2:92:10:92:37:da:f0:84:a8:
         22:33:95:f0:09:64:ee:91:11:3e:97:6f:2c:c8:1a:3b:3f:07:
         c6:45:b8:3e:b9:b7:3d:b7:8b:8f:b0:48:95:5f:28:4d:04:91:
         da:be:f0:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:34:59 2026 by rpki-client