Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
File:                     WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json)
Hash identifier:          3VT9g6eCFHvfLo5ty4tBHla61VIhm177EUP1g2nfKdE=
Subject key identifier:   43:D3:68:07:43:F0:16:C0:92:A9:83:B2:FE:73:6B:91:CF:FD:8F:59
Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56
Certificate issuer:       /CN=58d89dc189e009361acb2655680e669c0bc47456
Certificate serial:       01A0C8C6F5D023391FC4446A006F1B2E86C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
Manifest number:          056D
Signing time:             Tue 22 Sep 2026 11:01:17 +0000
Manifest this update:     Tue 22 Sep 2026 11:01:17 +0000
Manifest next update:     Wed 23 Sep 2026 11:01:17 +0000
Files and hashes:         1: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: uXHy/FGzwYUUGfSwUfTzGlYf1HKqtZgkfDUwiEucrg0=)
                          2: ziF5LUxXxsiZsU2Zn5F9Vs8QBIU.roa (hash: JWHNPV4Q0ijWQ7FA9BlDGI8xfPLJfKs3pJXg1QGEDkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:c6:f5:d0:23:39:1f:c4:44:6a:00:6f:1b:2e:86:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456
        Validity
            Not Before: Sep 22 11:01:17 2026 GMT
            Not After : Sep 23 11:01:17 2026 GMT
        Subject: CN=43d3680743f016c092a983b2fe736b91cffd8f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:03:25:ad:b0:52:c0:b6:4a:39:f5:2d:e2:97:
                    0c:6b:94:da:09:b5:67:46:f8:89:19:c3:b1:77:08:
                    f1:99:77:6b:fb:30:09:18:f3:b4:90:0e:15:9e:18:
                    fc:35:c9:43:c3:22:9e:0a:7e:c5:64:44:f6:6d:fe:
                    a8:85:92:06:ad:49:60:52:57:10:39:bf:df:c7:e4:
                    6d:8e:e0:11:92:9a:d4:ed:d8:b6:92:f5:dd:04:7d:
                    46:7d:77:43:1c:1c:b7:c8:56:71:ac:b3:03:b4:e8:
                    b0:f3:0f:64:54:e8:3d:0b:fb:be:d5:47:51:b1:09:
                    35:07:d0:56:35:9f:52:8d:17:cc:c5:af:2b:35:da:
                    15:7f:e9:6d:4d:15:97:36:26:a0:3b:0b:e7:ce:b7:
                    32:f5:10:bd:92:09:07:2a:10:01:89:60:2c:2b:14:
                    c1:60:18:3a:51:19:a8:af:ea:9e:32:0b:02:3e:8c:
                    a6:0f:d6:b1:3d:0e:71:96:f8:94:e1:af:82:1d:0c:
                    9c:00:a6:7c:03:9f:1b:22:54:36:50:32:b6:5d:2c:
                    50:a7:a2:b9:1b:3a:10:5b:2e:b7:d6:60:ec:10:84:
                    b8:a6:27:7d:4f:56:10:59:a5:0f:88:7e:64:f7:71:
                    fc:4d:bc:e8:b6:f7:e1:40:4f:80:e4:7b:7d:64:20:
                    37:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D3:68:07:43:F0:16:C0:92:A9:83:B2:FE:73:6B:91:CF:FD:8F:59
            X509v3 Authority Key Identifier:
                keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:89:5f:9f:bc:1f:62:fc:a4:63:e7:bf:17:e5:f5:42:f1:1b:
         d6:0b:d4:4f:8b:c2:45:14:0a:f2:47:ae:d8:e4:17:29:bf:86:
         2e:cf:c1:b1:68:2b:1d:27:4b:28:66:91:5f:ab:e9:c3:2b:ec:
         e3:18:24:0c:5a:68:18:91:6c:a9:d3:fc:2e:42:d9:57:f7:cc:
         ab:0d:fa:98:fc:32:6b:d4:71:a1:4b:e3:e3:c7:90:f8:8a:b3:
         04:b9:c6:ed:d4:9f:84:c8:ff:17:d1:35:86:24:ad:6b:2b:73:
         56:61:98:1c:e6:10:7f:ff:59:f8:82:8e:ea:6f:87:93:8f:d6:
         d3:1d:c5:47:95:ad:cd:b5:83:c4:bf:76:82:0a:74:67:fd:89:
         11:48:60:6b:74:2c:1f:d6:ab:b9:4d:0e:c3:d7:0b:fb:ca:54:
         43:1a:0e:dd:b5:94:f2:33:e0:73:8c:91:28:31:a2:c2:90:63:
         43:c9:6e:09:94:ff:0a:a8:e9:63:63:c5:03:c5:e7:6e:52:6d:
         b9:9b:c6:9e:20:0f:2e:b3:aa:d6:ca:d2:31:6d:3c:0a:ee:ec:
         e7:3c:1e:ab:db:9f:99:a0:08:be:fa:ee:9c:2a:16:61:f7:b3:
         9a:0f:85:cd:b3:7e:29:4e:fa:37:ba:86:99:70:16:fc:95:53:
         fb:b5:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:17:31 2026 by rpki-client