Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
File:                     WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json)
Hash identifier:          HGtHcM9lfSjAXThSC+dHDarm/h49c5/Z6AEOfQnLfSI=
Subject key identifier:   BD:C8:50:13:5A:D4:30:7B:20:EF:2F:2D:98:6F:67:5B:55:99:F2:1F
Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10
Certificate issuer:       /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
Certificate serial:       01A0EBF980DC2E9421146F97C0F197F61D86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
Manifest number:          1A79
Signing time:             Tue 29 Sep 2026 07:03:12 +0000
Manifest this update:     Tue 29 Sep 2026 07:03:12 +0000
Manifest next update:     Wed 30 Sep 2026 07:03:12 +0000
Files and hashes:         1: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: JPCYr+LN3zxJh0HQhY88esncaW2hen+PTwHtWOwYEcs=)
                          2: ubDRCyGTNPH280nyPWUjQFlxXwo.roa (hash: aQLrEZhn3B0wMZ5KJdawYUdqKjoKHetb4pEObkiH9xU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 07:03:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:f9:80:dc:2e:94:21:14:6f:97:c0:f1:97:f6:1d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610
        Validity
            Not Before: Sep 29 07:03:12 2026 GMT
            Not After : Sep 30 07:03:12 2026 GMT
        Subject: CN=bdc850135ad4307b20ef2f2d986f675b5599f21f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:61:cd:2e:dd:83:15:14:5f:13:d1:15:ac:4f:
                    cd:fa:58:95:fa:3f:52:4c:ef:89:2f:ad:3e:03:27:
                    21:d4:e5:81:93:02:64:3b:ab:4f:cd:6b:07:c2:9c:
                    ad:b2:85:10:5e:07:3b:a6:3e:33:e3:96:72:25:70:
                    0e:3c:2b:68:d5:26:d5:47:a4:88:1b:e0:ca:6b:ee:
                    77:8b:03:5e:85:5a:8f:66:eb:d7:32:bc:24:39:15:
                    37:97:d7:21:02:a9:da:7a:95:21:5d:e0:e9:2b:fc:
                    51:6f:58:cd:0f:9d:7a:af:dd:07:bd:34:ee:fb:73:
                    25:bb:39:60:6a:ce:b0:5d:88:a0:cf:e0:b3:ae:3a:
                    fd:41:6d:a1:4e:f5:26:28:b7:93:d3:2a:04:55:3c:
                    00:12:3b:74:21:29:29:71:2e:c6:49:4b:54:a0:fe:
                    f1:cd:93:e9:91:36:fd:7e:b0:27:a9:63:95:fd:3f:
                    3e:7d:bf:10:b7:0b:8d:c5:d8:6a:a7:90:73:dd:57:
                    96:13:2a:67:a9:9b:41:04:de:e0:9d:11:2c:0d:df:
                    b7:c2:ed:f1:ac:1f:c9:20:e6:a2:1f:78:a5:78:f9:
                    f2:71:2d:86:86:b8:39:f0:bd:f1:9a:08:2a:59:03:
                    94:db:ec:74:01:69:6b:e6:ea:0e:7c:4e:8b:62:73:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C8:50:13:5A:D4:30:7B:20:EF:2F:2D:98:6F:67:5B:55:99:F2:1F
            X509v3 Authority Key Identifier:
                keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:08:c2:a5:9d:a7:64:79:c5:78:18:37:0a:63:36:8e:ea:1d:
         f1:8f:f3:f6:30:fc:0e:d2:a8:94:11:2a:ca:21:a6:19:bb:a9:
         76:08:d8:8a:c6:f8:e2:c0:f7:7a:e8:87:d1:f3:87:aa:7d:8e:
         46:de:4a:41:71:52:f4:e3:a1:cd:e6:43:7e:08:8d:01:f7:31:
         2d:dd:b6:90:e3:fe:4b:a7:5c:c3:bf:aa:19:10:a2:0c:75:c7:
         38:3a:28:c4:18:42:2e:2f:41:e2:1e:0c:56:8f:04:a0:07:70:
         44:b2:6d:69:59:20:32:d5:6d:14:a0:04:56:72:d1:33:f3:29:
         ab:73:c3:06:9b:9d:d7:8c:aa:5b:52:ea:a8:f7:f2:9f:5d:78:
         35:dc:27:4c:bb:af:93:27:51:85:c2:d5:cb:e7:62:66:77:dc:
         b4:74:74:90:c5:85:48:fd:ac:3f:41:ff:b0:ed:ec:52:52:a4:
         7c:a2:7a:fa:ca:ca:f7:32:83:89:0b:ce:de:b3:d4:05:e7:72:
         c5:83:75:6a:9c:b8:d2:5b:a6:5a:35:b4:b9:44:ba:e3:76:ef:
         91:a1:ce:2d:54:94:bc:c7:ce:29:fd:20:c9:5a:ab:79:cb:f4:
         90:7c:51:99:ba:56:7d:b6:47:5a:ec:23:b0:99:ff:91:c6:56:
         8f:cd:47:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:14:42 2026 by rpki-client