Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
File:                     WOBoeiTWo-QU15jZsvtsUlkcuyM.mft (raw, json)
Hash identifier:          I7CVk8wPFSh4qpP7/4iwYdLS0+6rvUzDCvKFCBWd4z8=
Subject key identifier:   4F:9D:C4:A5:57:E8:A4:EC:69:6C:45:AB:6E:E7:4B:CE:EB:54:21:A1
Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Certificate issuer:       /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Certificate serial:       01A0D872955B99A21E5EF16CBD144F6A48BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
Manifest number:          19BD
Signing time:             Fri 25 Sep 2026 12:03:02 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:02 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:02 +0000
Files and hashes:         1: WOBoeiTWo-QU15jZsvtsUlkcuyM.crl (hash: kCPaBkbmVDyokWQf9tQ2e8zU4APRA44jii2xJjM1Aus=)
                          2: bzPhIyIk3bkSlzP2o9esoTOxto4.roa (hash: bHsK8idh673TzfIsYx4NifZMv509YFTLtqIqIVG+nuA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:95:5b:99:a2:1e:5e:f1:6c:bd:14:4f:6a:48:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
        Validity
            Not Before: Sep 25 12:03:02 2026 GMT
            Not After : Sep 26 12:03:02 2026 GMT
        Subject: CN=4f9dc4a557e8a4ec696c45ab6ee74bceeb5421a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:74:b1:37:aa:6c:de:09:72:a5:bf:b7:78:f0:
                    3c:23:94:83:87:fe:ed:4d:d7:3f:94:18:c8:54:88:
                    47:9b:da:c5:42:c6:4f:d8:d4:94:70:7a:d6:52:0b:
                    3c:0d:14:03:6b:4d:fb:3f:ad:64:bb:01:52:83:46:
                    9c:51:80:ff:4a:b5:99:47:4b:30:8a:85:74:0b:64:
                    0a:31:94:98:7e:c1:44:51:66:d8:42:df:c7:92:1b:
                    4c:23:3a:82:86:d0:2d:9c:7e:81:75:5a:bd:2f:d8:
                    91:62:68:39:d4:a6:bf:fa:3c:df:ad:ac:af:f9:c3:
                    29:b8:80:3f:15:be:90:35:03:35:9e:0b:4f:09:83:
                    cf:8a:8b:83:de:1c:ca:a2:d9:f3:2e:d0:ba:86:8a:
                    f1:da:50:81:b7:a0:b9:42:5c:9c:04:35:a8:1e:94:
                    86:b0:0b:6a:c5:3e:58:b9:04:1c:13:54:fc:2e:5b:
                    70:95:e6:d2:be:57:b2:6b:84:c8:db:f4:df:b1:c2:
                    56:14:1a:af:5d:9f:83:8a:09:fc:17:c2:4c:de:71:
                    63:52:5a:a9:c2:8b:2d:01:ec:7f:89:9e:4c:d9:f2:
                    b6:44:cf:00:4a:f9:e4:5c:4c:41:87:00:be:81:26:
                    26:ca:94:33:84:e1:6c:a3:42:d7:1b:ee:08:60:f2:
                    90:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9D:C4:A5:57:E8:A4:EC:69:6C:45:AB:6E:E7:4B:CE:EB:54:21:A1
            X509v3 Authority Key Identifier:
                keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:91:01:f2:a6:ad:02:53:12:87:ef:0e:8b:0d:18:fe:ee:
         9a:05:2c:91:a9:3c:e2:73:2e:45:4d:0a:f5:b4:23:73:9b:bf:
         ae:85:ad:19:0b:ce:cb:89:16:29:a0:76:fb:97:45:77:e9:85:
         1f:a8:97:c1:ef:3a:96:08:4d:08:cb:55:2d:98:9e:60:e0:cb:
         f2:49:e9:dd:b1:7a:cb:82:71:06:a8:e6:dd:71:2b:58:66:2b:
         bf:44:83:83:f0:99:0b:73:c7:9b:fd:b0:73:3a:c4:15:d0:79:
         1b:35:3a:99:6d:92:b1:05:05:41:f4:e2:8c:f1:92:5e:ca:87:
         34:6f:1d:91:0f:51:a7:ee:ff:f8:53:7f:1c:e6:4e:48:f4:3c:
         c0:e1:f1:44:e9:71:1a:40:e4:ce:23:c6:f8:b7:cd:17:ea:04:
         10:f2:14:32:10:32:3b:3e:03:fb:15:74:d7:9f:f9:cd:8a:b5:
         b9:97:8d:e7:e5:40:00:e2:31:24:0a:ea:7d:0a:ff:23:e2:72:
         f1:79:38:9a:d5:3c:bf:63:8d:87:11:d0:b0:db:bf:ae:a0:02:
         c8:0b:ac:af:02:f1:f7:10:11:cb:e5:a3:b5:6a:75:bf:8a:a4:
         a2:e5:74:6d:4f:08:bf:4f:66:a6:1b:fc:24:e7:f2:88:17:29:
         de:a7:fe:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:40:00 2026 by rpki-client