Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
File:                     Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json)
Hash identifier:          l62Tvt1pZwIjgCJE79O3/KdknF5eWPO8bc7OjKM0q2c=
Subject key identifier:   DE:81:F7:AE:02:92:1A:1D:38:8C:A2:5D:95:7F:FB:54:37:4F:41:39
Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11
Certificate issuer:       /CN=5acf902c6280eb5feaf675c98989d05cd1574411
Certificate serial:       01A0E587A50B919DBAC9D58FA26E629667D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
Manifest number:          1A72
Signing time:             Mon 28 Sep 2026 01:01:07 +0000
Manifest this update:     Mon 28 Sep 2026 01:01:07 +0000
Manifest next update:     Tue 29 Sep 2026 01:01:07 +0000
Files and hashes:         1: WX-JjlZr2_9em86_V6vZFQ4B8cg.roa (hash: wU2wM6tMwVxmxZj/4qQ1Khr+94PlBhLHSf6Ng/445Vw=)
                          2: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: X6mmZcVlYSxYKa4WejV2Ue+goQ1S1NjKSWt8xCZa5EM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:87:a5:0b:91:9d:ba:c9:d5:8f:a2:6e:62:96:67:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411
        Validity
            Not Before: Sep 28 01:01:07 2026 GMT
            Not After : Sep 29 01:01:07 2026 GMT
        Subject: CN=de81f7ae02921a1d388ca25d957ffb54374f4139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:5c:45:8a:52:0c:98:61:89:0c:de:78:e5:
                    e4:a7:2e:53:56:ee:6a:9a:29:9f:42:83:e0:d0:c7:
                    76:e0:42:1d:f4:a9:08:de:56:e4:22:97:ae:61:e9:
                    c0:0d:a6:20:d7:b4:d3:ff:45:ee:40:f1:51:5f:23:
                    a9:37:e7:fa:52:48:f2:9b:c4:2f:ac:2d:76:57:3b:
                    92:d1:aa:39:72:05:72:70:6e:03:07:4d:1c:29:e9:
                    92:13:75:47:47:95:bc:f3:fc:9c:e2:6a:c0:55:4e:
                    46:99:e3:cb:6d:9b:77:ff:b3:7a:b1:6e:8c:44:2b:
                    d8:69:ca:70:8e:6b:6b:a2:67:c5:97:0a:f4:a7:b7:
                    ce:e6:25:4d:8e:e3:14:ef:b6:6e:67:c4:19:67:b5:
                    53:74:9a:7e:43:03:9a:70:0d:8c:19:f0:cc:32:24:
                    b4:e1:50:92:44:02:07:b2:06:c8:09:27:bb:ed:6e:
                    22:8c:31:7e:c2:70:b6:4a:15:12:88:b4:b2:d2:ee:
                    bb:cb:41:44:8c:63:1e:d5:52:c8:4a:a0:f2:ee:b6:
                    06:b8:1b:4d:b2:54:2e:d6:da:3f:4b:75:c9:01:01:
                    b3:34:9b:c0:92:37:80:5b:4e:cd:3c:5c:ac:1d:33:
                    50:08:b7:1d:57:db:b4:06:57:28:82:b3:91:3c:d0:
                    a7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:81:F7:AE:02:92:1A:1D:38:8C:A2:5D:95:7F:FB:54:37:4F:41:39
            X509v3 Authority Key Identifier:
                keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:26:2f:5b:27:33:ae:53:a5:62:f5:9c:82:64:4c:d7:fa:ac:
         99:dc:24:d1:a7:bb:3c:29:91:d7:2c:41:da:fe:34:e7:9f:55:
         36:88:6a:fb:94:80:a1:75:19:e9:21:7f:db:58:6b:fb:7b:09:
         2f:b6:3b:a6:af:71:fe:f0:84:85:52:f9:a1:33:cf:b3:fd:4c:
         c4:6a:8e:fd:c6:2f:a1:d9:6e:34:c3:ac:46:cd:46:75:79:c8:
         61:6b:80:fb:cb:e1:e9:12:5f:a2:f2:b3:ff:bb:e6:2d:9f:1e:
         95:c8:1d:57:fa:26:71:62:88:0b:4d:4f:1d:8f:23:de:16:e7:
         70:2f:7b:41:f6:b4:20:1a:28:5e:ed:eb:ff:14:63:03:51:dc:
         3d:b0:2e:c4:41:af:c0:da:f1:60:af:7c:d6:a1:d4:b7:83:0b:
         35:f2:c5:55:02:58:39:ab:f5:c6:a5:49:b8:18:3e:87:b0:58:
         4e:54:99:43:bb:70:6d:88:52:e2:b3:77:23:6d:4a:93:f5:2d:
         e7:8d:aa:8a:92:52:aa:5f:b2:86:23:d0:51:bf:b9:d9:7c:82:
         e8:36:ca:3d:d2:bd:9b:49:6c:ef:37:e1:26:d9:9a:c1:21:c8:
         5e:07:01:39:09:fc:77:45:fb:e0:d0:f6:84:f9:ef:80:31:99:
         7c:53:c0:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDlh6ULkZ26ydWPom5ilmfSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2Y5MDJjNjI4MGViNWZlYWY2NzVjOTg5ODlkMDVjZDE1
NzQ0MTEwHhcNMjYwOTI4MDEwMTA3WhcNMjYwOTI5MDEwMTA3WjAzMTEwLwYDVQQD
EyhkZTgxZjdhZTAyOTIxYTFkMzg4Y2EyNWQ5NTdmZmI1NDM3NGY0MTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSRcRYpSDJhhiQzeeOXkpy5TVu5q
mimfQoPg0Md24EId9KkI3lbkIpeuYenADaYg17TT/0XuQPFRXyOpN+f6Ukjym8Qv
rC12VzuS0ao5cgVycG4DB00cKemSE3VHR5W88/yc4mrAVU5GmePLbZt3/7N6sW6M
RCvYacpwjmtromfFlwr0p7fO5iVNjuMU77ZuZ8QZZ7VTdJp+QwOacA2MGfDMMiS0
4VCSRAIHsgbICSe77W4ijDF+wnC2ShUSiLSy0u67y0FEjGMe1VLISqDy7rYGuBtN
slQu1to/S3XJAQGzNJvAkjeAW07NPFysHTNQCLcdV9u0BlcogrORPNCnswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6B964CkhodOIyiXZV/+1Q3T0E5MB8GA1UdIwQY
MBaAFFrPkCxigOtf6vZ1yYmJ0FzRV0QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODct
ODliNWI2N2I3MjM0LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODctODliNWI2N2I3MjM0
LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSYvWycz
rlOlYvWcgmRM1/qsmdwk0ae7PCmR1yxB2v40559VNohq+5SAoXUZ6SF/21hr+3sJ
L7Y7pq9x/vCEhVL5oTPPs/1MxGqO/cYvodluNMOsRs1GdXnIYWuA+8vh6RJfovKz
/7vmLZ8elcgdV/omcWKIC01PHY8j3hbncC97Qfa0IBooXu3r/xRjA1HcPbAuxEGv
wNrxYK981qHUt4MLNfLFVQJYOav1xqVJuBg+h7BYTlSZQ7twbYhS4rN3I21Kk/Ut
542qipJSql+yhiPQUb+52XyC6DbKPdK9m0ls7zfhJtmawSHIXgcBOQn8d0X74ND2
hPnvgDGZfFPAvA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:25:34 2026 by rpki-client