Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
File:                     WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft (raw, json)
Hash identifier:          /H1PVyixqJwB63Q9fTapaaMphLkCb0mBYsuXLVlS9BI=
Subject key identifier:   BC:1E:40:70:B0:41:F5:90:39:1E:48:4B:B1:0D:00:67:BF:F3:22:F6
Authority key identifier: 58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74
Certificate issuer:       /CN=5812db6bf70652bfb45bebfb25054a57f9799f74
Certificate serial:       01A1480584987314E32D7F19130B10AE81CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
Manifest number:          02BC
Signing time:             Sat 17 Oct 2026 04:01:23 +0000
Manifest this update:     Sat 17 Oct 2026 04:01:23 +0000
Manifest next update:     Sun 18 Oct 2026 04:01:23 +0000
Files and hashes:         1: 3wOnTweax7D9xXvrK7tkS44deow.roa (hash: rve4X/IPNJZQDXfQ4HfLs06mpP8EHtoyiwyVVImqNUI=)
                          2: WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl (hash: Nii+gO9wu6jbFP2hXXvS0VMOKn8xjEQtWoH+V6OlE84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:05:84:98:73:14:e3:2d:7f:19:13:0b:10:ae:81:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5812db6bf70652bfb45bebfb25054a57f9799f74
        Validity
            Not Before: Oct 17 04:01:23 2026 GMT
            Not After : Oct 18 04:01:23 2026 GMT
        Subject: CN=bc1e4070b041f590391e484bb10d0067bff322f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:9a:15:be:1d:1a:b2:e8:d7:fa:31:76:18:
                    1f:5b:70:8e:cb:1e:90:ec:ba:77:dc:8f:3f:0a:70:
                    c1:13:c9:80:67:f3:8a:63:82:ed:dc:77:c0:f2:65:
                    d8:4e:e7:21:1f:6c:99:89:ae:9b:8f:55:12:2f:f0:
                    8c:96:d6:e3:48:22:80:1b:3a:04:b4:71:68:a7:83:
                    d6:ee:81:ae:a4:64:e3:3a:03:ed:aa:0f:f7:df:27:
                    66:ac:aa:64:36:86:45:c4:cb:3a:bb:76:b9:70:c9:
                    a4:06:1d:3a:39:6b:b5:40:88:97:32:bc:44:c2:73:
                    88:16:5e:58:b8:f5:2b:7d:49:4d:2c:e7:64:8d:01:
                    8c:0c:86:5e:ff:1e:45:40:d4:86:28:c7:ff:e9:29:
                    81:48:7c:bd:f5:57:74:56:3d:ae:5f:f8:d5:b3:33:
                    e8:94:fa:4a:a7:f2:1f:bf:45:de:04:33:2c:da:f2:
                    5a:74:7b:a9:b2:16:20:54:ee:ec:09:9c:07:2d:43:
                    60:bc:2f:42:8c:fe:ff:b5:a4:c2:6d:2d:ce:75:9f:
                    77:ec:b0:53:af:34:88:00:d3:dd:62:e3:d7:3e:73:
                    1d:21:a1:75:59:bc:af:a3:f0:70:62:6a:3d:23:d3:
                    51:e0:36:c7:bd:c0:87:40:68:76:72:5a:26:2e:48:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1E:40:70:B0:41:F5:90:39:1E:48:4B:B1:0D:00:67:BF:F3:22:F6
            X509v3 Authority Key Identifier:
                keyid:58:12:DB:6B:F7:06:52:BF:B4:5B:EB:FB:25:05:4A:57:F9:79:9F:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBLba_cGUr-0W-v7JQVKV_l5n3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a03f3f-e120-4e97-a280-a058c4a55e2b/1/WBLba_cGUr-0W-v7JQVKV_l5n3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c9:db:c1:1d:a7:55:41:da:fa:67:7e:c9:a3:c4:2a:ed:d9:
         f0:37:53:4f:88:9f:d3:18:31:79:43:ca:cd:8c:e6:e3:b2:b4:
         39:b4:ee:30:1a:3f:c8:54:49:a3:36:95:f6:12:47:59:1a:1e:
         c7:e1:32:d8:1f:0d:fe:d4:b6:14:e9:68:9f:c2:33:ce:c7:26:
         95:f2:43:3b:14:88:79:5d:82:1a:b7:64:99:fd:5a:bf:f9:28:
         51:3c:de:56:06:98:6f:0f:1f:f8:ee:8a:64:f6:81:35:6d:f2:
         ef:df:f2:56:ac:fa:c4:11:99:49:4c:a5:0e:20:06:38:74:22:
         60:00:ea:96:f9:e7:3c:01:a4:31:62:4f:ff:e7:16:6b:cf:33:
         86:19:c6:6e:08:b4:43:ff:97:e6:34:ca:a1:bd:cc:27:59:ae:
         90:a2:71:9a:06:c6:58:37:2b:1f:73:d2:3a:f8:30:4c:33:38:
         55:f9:f5:f0:ff:73:91:00:06:46:b4:08:be:08:aa:1f:ad:ba:
         34:a9:a5:00:b5:7a:fb:fd:f0:57:f9:83:17:df:7a:f4:30:0a:
         a6:2c:bf:19:fd:15:2b:f7:71:b5:95:74:89:50:1d:1d:2f:8b:
         da:be:45:be:e7:c6:ad:d9:87:bc:f8:dd:25:3d:54:c5:97:cf:
         e2:37:31:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFIBYSYcxTjLX8ZEwsQroHKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTJkYjZiZjcwNjUyYmZiNDViZWJmYjI1MDU0YTU3Zjk3
OTlmNzQwHhcNMjYxMDE3MDQwMTIzWhcNMjYxMDE4MDQwMTIzWjAzMTEwLwYDVQQD
EyhiYzFlNDA3MGIwNDFmNTkwMzkxZTQ4NGJiMTBkMDA2N2JmZjMyMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxOaFb4dGrLo1/oxdhgfW3COyx6Q
7Lp33I8/CnDBE8mAZ/OKY4Lt3HfA8mXYTuchH2yZia6bj1USL/CMltbjSCKAGzoE
tHFop4PW7oGupGTjOgPtqg/33ydmrKpkNoZFxMs6u3a5cMmkBh06OWu1QIiXMrxE
wnOIFl5YuPUrfUlNLOdkjQGMDIZe/x5FQNSGKMf/6SmBSHy99Vd0Vj2uX/jVszPo
lPpKp/Ifv0XeBDMs2vJadHupshYgVO7sCZwHLUNgvC9CjP7/taTCbS3OdZ937LBT
rzSIANPdYuPXPnMdIaF1Wbyvo/BwYmo9I9NR4DbHvcCHQGh2clomLkilnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLweQHCwQfWQOR5IS7ENAGe/8yL2MB8GA1UdIwQY
MBaAFFgS22v3BlK/tFvr+yUFSlf5eZ90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JMYmFfY0dVci0wVy12N0pRVktWX2w1bjNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hMDNmM2YtZTEyMC00ZTk3LWEyODAt
YTA1OGM0YTU1ZTJiLzEvV0JMYmFfY0dVci0wVy12N0pRVktWX2w1bjNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9hMDNmM2YtZTEyMC00ZTk3LWEyODAtYTA1OGM0YTU1ZTJi
LzEvV0JMYmFfY0dVci0wVy12N0pRVktWX2w1bjNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgMnbwR2n
VUHa+md+yaPEKu3Z8DdTT4if0xgxeUPKzYzm47K0ObTuMBo/yFRJozaV9hJHWRoe
x+Ey2B8N/tS2FOlon8IzzscmlfJDOxSIeV2CGrdkmf1av/koUTzeVgaYbw8f+O6K
ZPaBNW3y79/yVqz6xBGZSUylDiAGOHQiYADqlvnnPAGkMWJP/+cWa88zhhnGbgi0
Q/+X5jTKob3MJ1mukKJxmgbGWDcrH3PSOvgwTDM4Vfn18P9zkQAGRrQIvgiqH626
NKmlALV6+/3wV/mDF9969DAKpiy/Gf0VK/dxtZV0iVAdHS+L2r5FvufGrdmHvPjd
JT1UxZfP4jcxVA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 15:47:31 2026 by rpki-client