Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
File:                     WVUSBp5lxZCALs5b972H5muPNdM.mft (raw, json)
Hash identifier:          uB0zahP4ZCuz8Iy3URRwLc/642orl5h0Z552xSZ5HdA=
Subject key identifier:   64:99:F5:01:5C:6F:1E:43:65:EB:89:09:42:0C:F0:7B:75:6F:79:89
Authority key identifier: 59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3
Certificate issuer:       /CN=595512069e65c590802ece5bf7bd87e66b8f35d3
Certificate serial:       01A181BDE2DBD7F82900D72E9F6662ABDEBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
Manifest number:          0990
Signing time:             Wed 28 Oct 2026 09:01:07 +0000
Manifest this update:     Wed 28 Oct 2026 09:01:07 +0000
Manifest next update:     Thu 29 Oct 2026 09:01:07 +0000
Files and hashes:         1: FsKLRcGjm9bbdj3zzhOsbPHB2hQ.roa (hash: cK6XeGopFBU42xQOw3pXSfyyWEVVyNojCMYqWc1ytZU=)
                          2: WVUSBp5lxZCALs5b972H5muPNdM.crl (hash: e77DxLO4l0CH2elCTuOZI2BvYABf913OtcNMsOxgc0g=)
                          3: nGiD_VuUEB-534WjNRVtjKrImS4.roa (hash: bHtWWwpySfNp2/DWZty3G/IOwsGExDDGytrN6bgjIio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:bd:e2:db:d7:f8:29:00:d7:2e:9f:66:62:ab:de:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595512069e65c590802ece5bf7bd87e66b8f35d3
        Validity
            Not Before: Oct 28 09:01:07 2026 GMT
            Not After : Oct 29 09:01:07 2026 GMT
        Subject: CN=6499f5015c6f1e4365eb8909420cf07b756f7989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b6:5c:a8:b8:52:f3:c3:f3:6c:3a:56:e0:3d:
                    39:98:a8:43:b0:c0:6e:f4:53:1c:7f:13:96:d2:f9:
                    2c:41:2b:dc:78:0e:06:2c:93:39:cf:44:e5:d0:27:
                    a4:d5:79:3d:71:6f:21:5c:37:14:d7:12:0c:0c:5d:
                    a6:b8:17:40:7f:65:d1:b0:dd:3a:c0:5d:b7:bd:0a:
                    94:c7:7c:48:77:c7:d1:53:e5:9a:c6:21:92:35:f6:
                    ff:bd:81:18:6b:cb:0d:e2:f0:89:7e:14:be:d6:a0:
                    c0:c5:03:da:20:41:16:51:70:89:8a:cc:c1:68:8b:
                    f4:40:91:0d:9f:ec:8c:cf:eb:dc:26:0d:e9:75:d0:
                    d7:d6:10:4c:cc:ca:80:dd:c6:db:45:9a:4e:e2:13:
                    03:1c:36:2b:b9:39:e7:40:aa:90:3c:ff:2c:53:21:
                    1c:9f:7e:58:c9:e2:b7:74:b2:f5:48:9f:67:09:1b:
                    5a:03:37:53:2f:29:3d:2c:ae:2a:a7:15:7c:20:f0:
                    03:ef:44:2d:48:3a:6c:25:c9:96:a0:bd:7d:71:cc:
                    b8:3c:1a:33:fa:7a:6d:d9:09:93:d9:f7:e0:2f:40:
                    93:48:bb:7e:f0:c3:df:34:29:41:44:d5:10:93:36:
                    9b:32:f1:71:de:f0:37:fa:ae:e9:60:d2:a0:47:b0:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:99:F5:01:5C:6F:1E:43:65:EB:89:09:42:0C:F0:7B:75:6F:79:89
            X509v3 Authority Key Identifier:
                keyid:59:55:12:06:9E:65:C5:90:80:2E:CE:5B:F7:BD:87:E6:6B:8F:35:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVUSBp5lxZCALs5b972H5muPNdM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1bed17-5e33-43a1-bb8f-43a43da9289a/1/WVUSBp5lxZCALs5b972H5muPNdM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:1c:73:8e:72:1b:6c:f0:1c:96:cf:75:b4:85:0e:1b:04:f5:
         69:5b:02:bc:ce:82:7a:84:ef:dc:58:c4:2a:04:f1:96:d1:dd:
         92:81:28:4f:ac:b0:65:8f:48:b4:25:96:8b:85:86:ee:4f:90:
         01:43:13:12:30:12:c1:1f:9a:22:21:c9:13:aa:68:54:a6:65:
         62:e8:1c:dd:fa:ba:53:2f:97:5a:e0:d4:bb:a1:86:67:57:0d:
         46:4a:a2:29:6c:06:a8:ab:7d:bd:49:76:67:0f:9f:0c:f9:f1:
         ba:13:f9:74:37:70:f6:c4:6d:72:eb:64:e8:cd:ce:25:dd:b3:
         10:ae:54:2a:79:8b:ac:3a:db:cf:96:67:4b:84:34:85:09:9a:
         69:9e:8c:85:16:81:fc:85:8c:a1:10:b4:42:46:84:61:9a:a8:
         ec:4a:89:da:60:e6:74:ae:98:b9:8d:8f:6a:b4:65:9d:49:e1:
         05:4c:19:1d:82:20:f3:72:50:14:c3:b5:19:23:57:9b:dc:26:
         aa:fc:b7:df:3e:3c:70:9e:f7:98:2d:0e:92:4b:54:71:18:5e:
         38:20:ea:fd:6b:03:01:e9:b0:a9:f2:b2:83:36:c6:7b:f5:f0:
         b5:d0:2a:de:27:45:4a:84:40:01:a7:5d:37:17:2b:65:5f:35:
         fd:ae:f1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:34:21 2026 by rpki-client