Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.mft
File:                     WpeXZRRv5Qv_lV-kmuBbYqli9ms.mft (raw, json)
Hash identifier:          V67dIA24J3s6IpHi+409w796gTYetLz3sKmhwlSh4+o=
Subject key identifier:   14:35:43:CA:5D:13:BB:48:55:BD:E6:9E:A0:AE:86:AE:41:26:AE:B6
Authority key identifier: 5A:97:97:65:14:6F:E5:0B:FF:95:5F:A4:9A:E0:5B:62:A9:62:F6:6B
Certificate issuer:       /CN=5a979765146fe50bff955fa49ae05b62a962f66b
Certificate serial:       01A125E73CC3C5275B93E1B3082E1D11AEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpeXZRRv5Qv_lV-kmuBbYqli9ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.mft
Manifest number:          DD
Signing time:             Sat 10 Oct 2026 13:01:13 +0000
Manifest this update:     Sat 10 Oct 2026 13:01:13 +0000
Manifest next update:     Sun 11 Oct 2026 13:01:13 +0000
Files and hashes:         1: WpeXZRRv5Qv_lV-kmuBbYqli9ms.crl (hash: +l6xqIPsPALwxIIov1EM8QVyE711pvN715S7dOrwi3o=)
                          2: Zx8I6BSP-_0J3OmO8E2uY2OmQIk.roa (hash: ONR+1hvtbQYcmwb/CpfgwjNWmSDEyPCmRyY0swJVv+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpeXZRRv5Qv_lV-kmuBbYqli9ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:e7:3c:c3:c5:27:5b:93:e1:b3:08:2e:1d:11:ae:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a979765146fe50bff955fa49ae05b62a962f66b
        Validity
            Not Before: Oct 10 13:01:13 2026 GMT
            Not After : Oct 11 13:01:13 2026 GMT
        Subject: CN=143543ca5d13bb4855bde69ea0ae86ae4126aeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:f9:21:56:b6:9d:97:e2:ab:b1:64:b2:a0:
                    d5:53:98:f3:55:c1:aa:91:fe:4c:07:ea:d2:ba:70:
                    bc:19:53:06:72:bc:d1:78:cf:e4:a4:8c:fd:13:7b:
                    92:b6:e3:df:97:d0:69:b8:5d:75:ac:65:b7:03:7f:
                    44:47:dc:e9:91:0c:de:fa:5c:4c:70:ae:01:3c:19:
                    1b:e6:39:3b:79:bd:fb:dd:67:4f:e3:7f:7f:99:09:
                    62:88:32:f2:ee:04:28:c3:5c:cd:da:66:90:0a:eb:
                    33:07:d8:d4:ff:ee:b7:a5:43:85:97:4e:bb:27:65:
                    d7:d9:a7:52:df:46:0e:58:2e:dc:d3:53:5e:04:d3:
                    8b:b5:85:c6:c7:4f:d2:53:97:73:e5:51:ce:48:f7:
                    6b:84:a1:e0:cf:42:60:68:f5:ef:a3:ea:d2:bd:60:
                    ad:f2:7a:62:27:f4:94:23:34:33:ef:de:9b:bf:f2:
                    2e:8b:d2:98:d8:92:24:18:52:7b:7e:f6:b6:b9:b3:
                    ee:3f:20:ad:f3:35:c5:6b:0c:92:77:c7:33:09:89:
                    d5:ca:d5:40:e2:99:ef:22:a2:7d:af:5f:7a:37:10:
                    77:99:7c:0a:ea:f9:7c:3e:10:cc:bf:b2:9f:46:04:
                    4d:21:d2:cf:1d:72:f2:31:55:77:5c:9a:4a:88:30:
                    a7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:35:43:CA:5D:13:BB:48:55:BD:E6:9E:A0:AE:86:AE:41:26:AE:B6
            X509v3 Authority Key Identifier:
                keyid:5A:97:97:65:14:6F:E5:0B:FF:95:5F:A4:9A:E0:5B:62:A9:62:F6:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXZRRv5Qv_lV-kmuBbYqli9ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e5868b-0e79-4c25-94a9-64264962dcd5/1/WpeXZRRv5Qv_lV-kmuBbYqli9ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4b:76:39:45:c7:c6:ab:b1:ec:09:52:5b:d0:e8:68:ef:40:
         b1:96:35:f1:56:5d:9c:ef:98:24:23:a8:84:e5:84:84:37:5a:
         f3:76:ed:49:1c:44:a7:b7:d4:bd:95:e7:27:5d:6b:2e:82:b2:
         a0:ad:80:c4:ac:1a:5c:ed:75:89:07:e0:12:67:0c:8a:c1:44:
         7e:4a:68:45:76:7c:58:a1:f0:13:c3:c8:e2:9a:8a:ac:9e:fc:
         d8:e7:6d:b6:4b:a0:ea:d1:c5:59:31:5a:00:42:a2:9e:b9:64:
         41:6f:96:26:45:3d:93:0e:51:db:46:84:98:f1:ba:b7:88:48:
         74:ff:81:f3:ba:18:21:f7:58:07:20:8b:30:91:22:56:f1:4a:
         11:34:a3:fa:21:14:9d:6e:ef:4c:3c:f6:36:0b:21:12:8d:44:
         c6:e3:d7:15:cb:4f:fb:8b:c4:2a:8e:5d:c2:cb:78:77:f1:0c:
         08:c1:48:5c:55:89:29:5b:88:d3:d6:c2:86:31:64:41:4b:e6:
         7a:11:07:53:eb:30:aa:e8:00:94:f8:dd:76:c2:16:a2:aa:17:
         bf:fb:4e:eb:eb:ce:61:88:a5:b3:72:a9:d1:97:13:66:80:22:
         c2:fe:f0:96:91:6c:cd:a6:96:d0:dd:af:c9:66:ce:b7:9c:3e:
         df:d0:3d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:08:50 2026 by rpki-client