Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File:                     W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier:          l6c/Ufvak1gCg09s1MjBZNhSQexVU/ZmGwnLt5gy2aw=
Subject key identifier:   D1:44:5D:AA:F0:44:9E:BA:96:75:6B:32:3C:68:9F:B2:72:A5:73:D9
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer:       /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial:       01A1C1E66CC04AD09AB47C3EF3108745B308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number:          059C
Signing time:             Mon 09 Nov 2026 20:01:06 +0000
Manifest this update:     Mon 09 Nov 2026 20:01:06 +0000
Manifest next update:     Tue 10 Nov 2026 20:01:06 +0000
Files and hashes:         1: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: n4T7S2kEO5dlaO1h4sf14mTw3UoVLIxMnLcnRMDfqO4=)
                          2: fOEnPAWhsxTOpFt7roZ3tUcQEpA.roa (hash: hJyQkOhG2dynFkXSSov+GNMjBt8nhvuX9AxIVC3sXH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Nov 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:c1:e6:6c:c0:4a:d0:9a:b4:7c:3e:f3:10:87:45:b3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
        Validity
            Not Before: Nov  9 20:01:06 2026 GMT
            Not After : Nov 10 20:01:06 2026 GMT
        Subject: CN=d1445daaf0449eba96756b323c689fb272a573d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:cf:fc:57:00:30:77:31:d7:48:c8:24:0a:9d:
                    15:60:cb:bc:57:97:97:e6:4b:96:96:00:e7:87:1a:
                    20:d8:e9:b7:ba:2a:33:b0:f4:bc:74:48:fb:71:46:
                    48:92:72:0b:61:0a:84:8a:e5:eb:96:e3:f2:f0:f1:
                    f3:e2:89:1e:b3:43:b1:d6:a7:c3:4a:2c:80:22:14:
                    51:a5:fc:3b:24:a3:e1:e0:36:4d:41:d1:f2:b7:3b:
                    0b:b2:05:90:5a:da:2e:7b:f2:86:b1:67:f2:05:1c:
                    3e:76:87:a6:47:88:a2:90:6e:49:b3:8d:ae:21:d6:
                    f0:02:c3:f7:9f:4d:da:c6:b0:e5:fb:ca:83:ea:94:
                    77:b6:ce:ba:b8:fa:b2:6f:11:b6:a0:9e:5b:92:47:
                    a3:16:9a:ad:f2:a1:37:9e:68:ad:65:b9:da:92:28:
                    39:44:2d:75:5c:86:75:51:b1:05:86:4b:35:2f:7d:
                    bc:c7:b8:fd:63:1e:91:7d:69:2b:fe:47:3a:7a:12:
                    bb:78:7c:06:69:e7:ff:fb:a8:57:c7:ad:bd:9d:ec:
                    d2:3e:dd:50:d7:7d:33:3f:64:9f:42:0b:c8:74:01:
                    87:11:d7:6d:4b:6b:b5:b1:73:35:47:af:53:09:c8:
                    2a:60:13:3c:8f:d6:22:ab:91:1d:ba:bd:2c:14:c7:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:44:5D:AA:F0:44:9E:BA:96:75:6B:32:3C:68:9F:B2:72:A5:73:D9
            X509v3 Authority Key Identifier:
                keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:63:fd:b2:2c:d9:1a:4f:78:1f:8a:f0:2b:0d:eb:d3:e6:30:
         b4:7b:c9:3c:3a:1f:2d:c7:59:b6:ea:23:e0:84:67:7f:f0:71:
         fa:04:4d:e3:9e:64:df:5b:fb:0b:ad:a9:d9:23:70:17:66:b5:
         2b:f5:85:c2:97:a9:4b:e0:ea:d0:b9:c7:de:b7:b0:fb:ad:4e:
         06:fb:2a:d6:da:42:cc:79:f1:f4:2c:5d:37:98:fd:ad:02:b6:
         43:9c:7d:25:ef:16:49:9e:33:54:b2:76:2a:86:dc:c2:f6:5d:
         4c:39:28:23:0e:9c:bc:cb:e4:5a:1d:0a:e4:46:64:45:7f:84:
         1c:ae:b0:1f:45:e9:62:1a:50:c5:26:f4:eb:a5:ab:9a:77:66:
         3d:54:33:6d:45:39:b8:dd:fc:fe:bf:32:ee:22:99:1e:61:77:
         6d:f5:96:11:9d:c4:1e:95:74:7f:f7:e0:48:91:39:fb:03:a5:
         c0:f5:d4:5c:dc:fc:48:8a:91:db:b3:d7:2b:a3:c2:5d:c6:21:
         1e:61:8d:f6:a9:50:7a:ca:22:c8:27:7f:b8:9f:30:4f:dc:ef:
         58:6d:98:6b:9a:e1:25:8f:e7:cf:ff:ce:49:65:a6:04:02:82:
         63:ec:a6:24:31:7c:12:d8:ca:9d:f0:c7:f0:c8:cc:0f:75:b8:
         08:5d:3a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:57:25 2026 by rpki-client