Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
File:                     WGsBghBbsnsMi88oQr08GoUWS9E.mft (raw, json)
Hash identifier:          b40e6h30QTbPFI1Up4LlMRD2NYlUlObOrgaeJAmu48E=
Subject key identifier:   4E:32:3C:96:E7:16:21:C2:C0:7C:22:8F:FC:2E:93:01:03:7B:A7:59
Authority key identifier: 58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1
Certificate issuer:       /CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
Certificate serial:       01A0C9D940D19AF42AA9D21524D3202FC4AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
Manifest number:          1A81
Signing time:             Tue 22 Sep 2026 16:00:53 +0000
Manifest this update:     Tue 22 Sep 2026 16:00:53 +0000
Manifest next update:     Wed 23 Sep 2026 16:00:53 +0000
Files and hashes:         1: 546UWvWGhdpJ8v98hderCrojdtA.roa (hash: 6DzrGXudmyoXg8jTIJPljYFkr7htCLIXi2BjYcFDJmE=)
                          2: ME3cETnapLDHP6DWdBAQQoKbaeM.roa (hash: W28I+8J7qnVyHnps7J0q4RxiUOdB6ciorvAbvq4SRpY=)
                          3: WGsBghBbsnsMi88oQr08GoUWS9E.crl (hash: A4QtvxvK+9DYW7K8taUfm8Z3KVZ6pIS7/HVY5wQirIg=)
                          4: klXMh69HPg_6eKMxQVgx6zhe1QE.roa (hash: vG86oygd0IFm9Rxuz3bX4pixPzbUrSLnke23ygFfpi4=)
                          5: p8t0PIwIf-OZP0tJQpmINvt3qpQ.roa (hash: r27HfBWDMYwyRF//qyu0OtsF9qIPudC+kjCHFI00zPo=)
                          6: pgoXDP1h0nWBwbv9FG2W5mHI85k.roa (hash: OZdZQ/KCgv22adlJuUYrt3hL7fGkm6hBd3n3kVRfbgM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:d9:40:d1:9a:f4:2a:a9:d2:15:24:d3:20:2f:c4:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586b0182105bb27b0c8bcf2842bd3c1a85164bd1
        Validity
            Not Before: Sep 22 16:00:53 2026 GMT
            Not After : Sep 23 16:00:53 2026 GMT
        Subject: CN=4e323c96e71621c2c07c228ffc2e9301037ba759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:92:bf:b5:eb:92:cf:41:4d:a3:c8:90:d1:1a:
                    b4:80:66:90:5c:5e:70:9c:29:37:30:18:6c:4e:80:
                    67:c2:a2:2b:d3:6c:8f:97:e4:da:08:7e:15:4f:0e:
                    61:b3:87:ff:40:6c:a7:9b:35:3b:33:74:e2:50:b0:
                    89:3e:03:2d:1e:fd:7f:75:d2:fb:ae:d9:60:d5:18:
                    ca:0d:29:eb:2f:6a:41:76:8f:b1:3a:f4:1f:bc:32:
                    86:ea:fa:8d:3a:75:0e:a0:78:3c:bd:de:c3:96:d6:
                    f2:44:b0:c0:11:30:4f:7b:83:e3:a6:ea:36:26:c6:
                    8b:a9:24:e5:d5:4a:b8:02:1d:e0:7b:11:37:9f:49:
                    3b:e5:0a:4d:40:55:f6:f5:77:e7:fc:f4:41:49:83:
                    83:0f:5d:a0:ef:4b:03:12:c1:75:a4:22:08:96:e5:
                    fa:d0:19:8a:34:d6:34:96:b0:d7:93:9e:9f:26:a9:
                    39:8a:5c:8a:0a:4e:56:ab:0b:3d:92:09:92:26:eb:
                    86:10:1a:8e:fe:ee:06:58:06:30:71:13:37:29:0d:
                    55:f8:03:fe:37:37:5b:d6:b6:b8:6a:a0:0e:f1:bc:
                    ed:24:83:2d:40:14:cd:8f:cc:38:b5:c4:f2:41:8c:
                    04:3a:8d:de:e2:45:b7:78:76:07:4c:58:fe:0d:e4:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:32:3C:96:E7:16:21:C2:C0:7C:22:8F:FC:2E:93:01:03:7B:A7:59
            X509v3 Authority Key Identifier:
                keyid:58:6B:01:82:10:5B:B2:7B:0C:8B:CF:28:42:BD:3C:1A:85:16:4B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGsBghBbsnsMi88oQr08GoUWS9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/52b481-f303-4a96-97dd-7370fd80df6c/1/WGsBghBbsnsMi88oQr08GoUWS9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:43:c9:57:91:33:7a:ca:cd:e3:bd:d2:26:ab:cb:90:66:d0:
         80:8c:c7:8c:00:97:25:72:05:21:5a:f6:55:e6:32:d8:a1:e7:
         da:d5:ec:bd:7e:49:6d:3d:b0:ad:8c:b1:68:51:88:b3:d3:6e:
         06:54:d2:ea:5e:b8:b8:40:fb:c0:2b:97:2e:32:14:41:ef:24:
         a1:76:53:8d:b3:0e:a9:68:3a:6d:0c:8a:47:19:c8:60:f7:4a:
         38:fa:66:88:43:a9:a6:d6:50:8a:11:c4:b6:87:ad:20:a0:1b:
         21:51:2c:4a:a1:0f:61:ff:15:48:3c:4c:c5:0a:89:c3:90:33:
         e8:20:d1:54:ee:95:45:73:83:f0:ce:d5:ea:dd:54:b0:8b:99:
         3e:84:1f:e3:f0:d0:d4:b6:2d:db:44:65:ce:3e:ed:09:43:15:
         43:c1:2a:eb:7a:7c:35:41:9a:d1:71:f0:07:55:32:f6:52:18:
         8b:29:1a:0b:9a:77:22:af:37:65:9a:6b:a8:44:62:ee:41:33:
         dd:e5:77:d8:fd:65:87:24:a4:05:a5:a1:dd:af:05:77:c4:a1:
         13:f6:c1:d6:7c:f0:c0:df:5b:d0:08:f5:ba:a7:49:bd:4c:3b:
         4f:90:b4:d8:2e:ad:81:cc:4d:a0:59:fe:f2:e7:34:f2:da:81:
         3c:02:55:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2UDRmvQqqdIVJNMgL8StMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NmIwMTgyMTA1YmIyN2IwYzhiY2YyODQyYmQzYzFhODUx
NjRiZDEwHhcNMjYwOTIyMTYwMDUzWhcNMjYwOTIzMTYwMDUzWjAzMTEwLwYDVQQD
Eyg0ZTMyM2M5NmU3MTYyMWMyYzA3YzIyOGZmYzJlOTMwMTAzN2JhNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5K/teuSz0FNo8iQ0Rq0gGaQXF5w
nCk3MBhsToBnwqIr02yPl+TaCH4VTw5hs4f/QGynmzU7M3TiULCJPgMtHv1/ddL7
rtlg1RjKDSnrL2pBdo+xOvQfvDKG6vqNOnUOoHg8vd7DltbyRLDAETBPe4Pjpuo2
JsaLqSTl1Uq4Ah3gexE3n0k75QpNQFX29Xfn/PRBSYODD12g70sDEsF1pCIIluX6
0BmKNNY0lrDXk56fJqk5ilyKCk5Wqws9kgmSJuuGEBqO/u4GWAYwcRM3KQ1V+AP+
Nzdb1ra4aqAO8bztJIMtQBTNj8w4tcTyQYwEOo3e4kW3eHYHTFj+DeSdNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4yPJbnFiHCwHwij/wukwEDe6dZMB8GA1UdIwQY
MBaAFFhrAYIQW7J7DIvPKEK9PBqFFkvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQt
NzM3MGZkODBkZjZjLzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81MmI0ODEtZjMwMy00YTk2LTk3ZGQtNzM3MGZkODBkZjZj
LzEvV0dzQmdoQmJzbnNNaTg4b1FyMDhHb1VXUzlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0PJV5Ez
esrN473SJqvLkGbQgIzHjACXJXIFIVr2VeYy2KHn2tXsvX5JbT2wrYyxaFGIs9Nu
BlTS6l64uED7wCuXLjIUQe8koXZTjbMOqWg6bQyKRxnIYPdKOPpmiEOpptZQihHE
toetIKAbIVEsSqEPYf8VSDxMxQqJw5Az6CDRVO6VRXOD8M7V6t1UsIuZPoQf4/DQ
1LYt20Rlzj7tCUMVQ8Eq63p8NUGa0XHwB1Uy9lIYiykaC5p3Iq83ZZprqERi7kEz
3eV32P1lhySkBaWh3a8Fd8ShE/bB1nzwwN9b0Aj1uqdJvUw7T5C02C6tgcxNoFn+
8uc08tqBPAJVXg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:05:13 2026 by rpki-client