Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File:                     W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier:          HF6EjbXUL2YSADKy97SL5BFHRU78mafaP4ElUNT1AzU=
Subject key identifier:   2C:E3:63:F1:1F:85:DB:5D:99:C3:1E:73:3C:6B:B0:13:9F:32:28:CE
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer:       /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial:       01A0C6D888187455E5E36BF8DB92E0747AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number:          051A
Signing time:             Tue 22 Sep 2026 02:01:14 +0000
Manifest this update:     Tue 22 Sep 2026 02:01:14 +0000
Manifest next update:     Wed 23 Sep 2026 02:01:14 +0000
Files and hashes:         1: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: I/IuNpeDHtY0aVwc5EY++cb0inEY42W75JJcDvZEGAk=)
                          2: fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa (hash: hJyQkOhG2dynFkXSSov+GNMjBt8nhvuX9AxIVC3sXH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:88:18:74:55:e5:e3:6b:f8:db:92:e0:74:7a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
        Validity
            Not Before: Sep 22 02:01:14 2026 GMT
            Not After : Sep 23 02:01:14 2026 GMT
        Subject: CN=2ce363f11f85db5d99c31e733c6bb0139f3228ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:d9:5f:63:8e:4c:70:46:7f:c5:05:91:2d:
                    1e:ab:e6:57:de:d1:94:78:9f:8a:8e:c8:11:ad:5c:
                    f1:3a:12:7d:a5:d7:db:68:94:ea:f8:43:f5:12:68:
                    8c:48:b2:7f:17:f0:fe:78:5b:fe:b6:f6:d3:03:73:
                    ed:10:52:a1:0e:f7:12:98:b4:12:39:21:72:58:3b:
                    75:c9:48:82:00:f0:de:69:86:99:48:4d:a1:31:0b:
                    8d:e6:46:29:8a:b2:7f:2e:b5:a7:88:52:41:b2:df:
                    47:8d:fd:c4:ab:08:fd:99:ee:b9:a1:6a:52:d2:1e:
                    26:5a:a3:94:d2:eb:5f:85:72:e0:de:59:49:e4:61:
                    0c:1b:c2:1d:f3:31:76:70:54:80:3c:1f:71:14:29:
                    46:33:8d:df:34:36:5c:58:2f:42:67:a0:18:dc:42:
                    f6:9f:90:b7:1b:a6:b5:0f:64:54:17:53:a5:a7:12:
                    2c:71:dc:44:f7:fa:ee:a9:91:13:81:68:be:f1:6c:
                    94:93:23:41:77:51:5a:eb:dd:a3:cb:05:ba:82:60:
                    30:0f:f4:cc:d7:5b:bd:71:b4:52:b4:d0:25:8e:79:
                    34:6e:b3:5e:3a:96:7d:c9:18:28:bd:09:f9:5d:e1:
                    17:15:b9:d8:9e:7e:c8:9e:ff:bc:b3:46:a5:a6:28:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E3:63:F1:1F:85:DB:5D:99:C3:1E:73:3C:6B:B0:13:9F:32:28:CE
            X509v3 Authority Key Identifier:
                keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d5:d8:ff:51:cc:63:b1:89:a9:76:25:bd:b4:be:f8:20:49:
         03:a2:f4:e5:87:01:e4:d7:33:04:6f:15:c0:4f:18:51:6e:e0:
         56:fa:c0:a9:49:c8:3e:4f:83:09:92:2c:e1:fc:c9:db:b0:f5:
         50:69:75:fa:1f:07:ba:4b:12:ef:72:f0:ea:c5:52:18:d5:0d:
         b9:0d:bb:3a:ad:36:79:32:84:71:0e:bc:0e:2d:c6:0d:44:2e:
         9a:38:fb:7b:78:43:cd:86:9e:f6:7d:6d:9d:79:f7:77:f3:90:
         c7:89:8d:e8:23:db:61:1f:06:8a:57:12:9c:f8:cb:4a:c5:5a:
         63:d2:60:14:5f:16:67:de:f0:d1:a9:bf:92:df:8a:cc:be:1a:
         c6:2c:ce:7f:7c:03:2b:2c:3f:48:e8:f5:3e:6a:5b:d1:4e:76:
         52:73:cc:c4:40:b4:d9:37:8b:39:8e:45:1e:0c:ed:4c:78:11:
         4c:c0:46:34:f3:de:d6:54:cc:fd:64:0d:69:73:ea:42:bb:ed:
         bb:8e:5a:45:5b:f0:8d:6c:6f:b9:89:02:34:be:d1:f1:6d:b0:
         be:4a:cd:f2:a4:f8:6e:dc:73:b8:83:b1:db:46:81:fb:e8:02:
         fa:11:c7:21:e9:f6:ee:a7:e1:2b:04:8e:02:2f:c4:1f:5c:fe:
         2a:10:be:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:18:29 2026 by rpki-client