Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
File:                     WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json)
Hash identifier:          pY8GZxXfS+GKnt1mmb0MQtcuHjGihmotL8ZpD92oxaM=
Subject key identifier:   09:71:87:23:1C:A5:97:17:47:49:D1:D7:D8:2A:19:53:3D:73:7A:92
Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E
Certificate issuer:       /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
Certificate serial:       01A1355A84AC66A805F5B536DC3059B02540
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
Manifest number:          10BB
Signing time:             Tue 13 Oct 2026 13:01:26 +0000
Manifest this update:     Tue 13 Oct 2026 13:01:26 +0000
Manifest next update:     Wed 14 Oct 2026 13:01:26 +0000
Files and hashes:         1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: 8B82xG4lFKE8wr/KCjSfFcpkbEzhi5Mgu3S69Jr6zoQ=)
                          2: cbzvxlYd2Sf5BPkKpVOxRrjDUx0.roa (hash: VqP2QOQPebJ1F3l2x635f2ND94zv4XuMIM8H7AehW9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:5a:84:ac:66:a8:05:f5:b5:36:dc:30:59:b0:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e
        Validity
            Not Before: Oct 13 13:01:26 2026 GMT
            Not After : Oct 14 13:01:26 2026 GMT
        Subject: CN=097187231ca597174749d1d7d82a19533d737a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:71:fc:fc:8f:10:0b:0a:35:a1:54:31:ac:92:
                    9a:69:12:c4:54:c8:48:5b:48:f0:29:5f:38:69:d2:
                    2c:79:9d:2a:4e:c0:46:14:3e:7f:84:1c:21:36:6c:
                    e1:14:4d:b7:ec:a9:05:b7:95:d1:35:f6:3c:34:68:
                    93:31:84:af:6f:40:a4:85:4d:7d:8a:0c:48:8d:53:
                    87:04:39:68:4c:03:27:62:a5:a1:19:88:b6:78:29:
                    27:17:60:84:b0:89:a1:9e:3b:97:c8:11:d4:75:7a:
                    b5:e1:a6:92:8f:47:bf:c5:33:51:f8:f8:cd:ec:41:
                    6e:21:0a:ac:cd:69:5d:29:71:6c:35:6f:18:b1:77:
                    a9:1c:38:82:8a:67:9b:be:b2:5c:47:52:40:c3:9b:
                    34:6b:58:dc:1f:ee:dc:85:09:ac:62:a1:97:e9:e9:
                    e9:79:e9:1b:7d:65:27:0a:af:8f:ce:ef:78:9a:45:
                    a9:ad:d9:df:76:85:e4:9f:c9:5c:b8:52:95:9d:e1:
                    f4:08:16:ac:e4:f9:54:39:30:67:1d:f2:5e:d2:a3:
                    c9:9e:83:1f:10:88:1e:d3:bc:ce:52:83:c3:6d:a1:
                    6e:ed:aa:e4:df:db:7e:42:ba:fa:7c:f2:69:25:09:
                    0e:ad:ee:c0:14:9a:dc:dd:96:ac:77:d3:71:d1:e5:
                    63:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:71:87:23:1C:A5:97:17:47:49:D1:D7:D8:2A:19:53:3D:73:7A:92
            X509v3 Authority Key Identifier:
                keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:8f:7f:c7:2d:af:ff:10:96:e6:27:fb:e7:ae:fb:fe:bd:48:
         59:d6:ef:8c:f3:e6:fd:c5:83:6f:78:14:4a:04:47:e6:13:0c:
         91:32:99:8f:31:64:ab:0c:c2:e4:0c:a1:c9:63:ab:a7:8c:6d:
         09:5f:0e:a7:9d:00:56:35:45:b5:fe:35:de:86:9c:e7:ac:c9:
         4a:b9:52:84:37:7a:30:cb:ca:a6:05:4e:e2:b3:d6:31:14:87:
         bf:fa:46:b8:d7:78:bd:fb:6d:c2:3e:9f:bc:03:61:8f:cf:4a:
         1d:85:a1:33:fa:5f:fd:21:8e:9e:76:1f:b3:89:7a:81:3e:0b:
         4d:a6:67:5c:f2:05:0c:a3:8d:00:dd:07:c8:2a:98:32:66:e9:
         b2:90:cd:89:e6:81:fd:ec:7e:cc:27:c9:f0:ed:bb:c4:c4:90:
         fb:0a:be:6a:a2:9b:d0:8d:51:6f:a1:b1:f3:a3:ca:80:9c:13:
         81:fd:74:4f:8a:2d:e4:29:94:05:b9:3c:50:79:4e:df:c9:ef:
         3f:0c:f1:10:25:c0:61:00:f5:34:4d:63:92:a6:87:2d:bd:72:
         dd:7d:b8:06:9a:4c:1b:53:14:0b:14:53:a6:3b:63:e2:63:ac:
         a7:07:5b:eb:ea:26:1d:ec:c8:7d:b9:ce:37:ea:12:69:a9:e3:
         8c:fa:7a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:12:50 2026 by rpki-client