Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File:                     WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier:          PJx48a7yTA+qucua3Gmg+0ypxB41OQB/6N2UwmBTs34=
Subject key identifier:   06:E1:8A:70:CD:98:65:F8:20:AB:BE:76:B4:AE:20:43:AD:B8:2B:09
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer:       /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial:       019DCED0A906D56E64415B19A5483D1710C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number:          0BAE
Signing time:             Mon 27 Apr 2026 12:01:14 +0000
Manifest this update:     Mon 27 Apr 2026 12:01:14 +0000
Manifest next update:     Tue 28 Apr 2026 12:01:14 +0000
Files and hashes:         1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: QZvu2DywSQmwJychcj0vD2jYc77HhlUbffrYuglnDJM=)
                          2: rzSZWBGG1mILDZWq_ejHiNaagug.roa (hash: E4TzWT1DdcBtP+Tvjygnl6VcTwVaPGsD2eWFKuV7qQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 12:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ce:d0:a9:06:d5:6e:64:41:5b:19:a5:48:3d:17:10:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
        Validity
            Not Before: Apr 27 12:01:14 2026 GMT
            Not After : Apr 28 12:01:14 2026 GMT
        Subject: CN=06e18a70cd9865f820abbe76b4ae2043adb82b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:22:8c:cd:cf:15:1d:53:b7:ad:31:28:ed:
                    6b:45:0a:b8:3c:8c:40:17:59:a7:4a:91:f0:57:69:
                    92:dd:2f:d2:5f:fd:a0:b6:2a:52:4b:e0:98:db:a8:
                    ed:2b:73:3a:fc:cf:f8:98:65:d9:57:91:c6:86:bf:
                    14:45:db:f6:11:ab:49:10:17:77:d6:cf:b0:0d:b8:
                    90:c2:b2:b0:6a:79:f3:e0:cd:d1:a9:ea:48:2b:de:
                    ab:69:f4:c9:cc:27:bf:dc:23:ab:b4:06:6b:83:49:
                    93:01:3c:59:f5:8e:35:26:04:a0:0c:62:7d:49:4c:
                    a9:78:cd:3f:f8:5b:d1:b4:65:9f:d9:46:77:97:49:
                    8b:ca:17:46:2c:08:a7:65:2f:26:2f:21:a7:3a:b5:
                    eb:2a:7c:fc:87:02:84:e9:2a:95:2b:3d:ef:1a:9e:
                    2b:36:2c:91:85:61:b2:c0:c6:b2:66:34:57:74:52:
                    a4:b9:5e:ec:2c:0f:26:f8:6b:8a:65:78:01:44:65:
                    70:f2:9e:34:01:da:f0:ee:66:ac:41:37:de:4f:0c:
                    9a:de:99:73:27:9a:85:06:2c:82:b6:a0:72:70:87:
                    fe:1c:f6:89:7c:43:0e:c5:a4:bb:59:1d:0d:85:df:
                    a9:09:fd:ec:fb:c1:f8:b4:d1:fb:0f:d4:92:55:19:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E1:8A:70:CD:98:65:F8:20:AB:BE:76:B4:AE:20:43:AD:B8:2B:09
            X509v3 Authority Key Identifier:
                keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:5e:0b:fa:8f:56:0a:6e:83:95:f5:7a:d8:8f:e4:17:3c:dc:
         d9:ed:8e:e1:bb:fc:ca:6c:60:c8:78:5d:af:c5:61:d8:4f:7f:
         70:b5:31:fb:f8:f8:df:2d:cd:7a:aa:45:37:57:5b:f3:54:bf:
         dc:12:3a:be:47:da:26:eb:20:fc:94:e6:31:a0:b4:81:60:07:
         94:2a:70:f1:7e:f1:a0:e1:54:7f:32:83:db:07:9a:f1:e3:a0:
         05:dd:a8:f8:44:e6:28:fd:90:61:71:d1:2c:5d:e3:2c:dd:49:
         bf:d6:df:93:a5:f6:d0:5a:cf:1f:4c:70:51:b0:ad:9f:75:aa:
         c9:e9:ce:ca:6b:77:e6:b5:97:cd:9a:81:40:f9:29:03:7c:63:
         af:c7:98:84:83:bc:31:da:e5:8f:db:dd:53:68:ff:4e:9c:98:
         19:0e:b6:27:6d:65:57:03:17:17:71:d9:c4:02:ea:fd:44:6c:
         62:2f:0a:5a:b4:94:7c:a0:57:97:51:64:d1:70:21:0e:15:98:
         f2:99:fd:d2:b1:02:23:d5:ea:e2:41:8f:d6:8c:29:37:34:57:
         6e:cd:c6:76:a5:42:0f:2c:26:c9:77:83:0d:5b:38:b5:84:cc:
         b7:fe:c5:cf:01:06:2a:98:88:32:5d:f1:c6:c9:93:05:07:a3:
         c4:ec:a3:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0KkG1W5kQVsZpUg9FxDDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMDJjYTgxYjlmMGE5NzEzYjA5OTY4N2RjODE1NTFjNDVl
M2Y4ZmMwHhcNMjYwNDI3MTIwMTE0WhcNMjYwNDI4MTIwMTE0WjAzMTEwLwYDVQQD
EygwNmUxOGE3MGNkOTg2NWY4MjBhYmJlNzZiNGFlMjA0M2FkYjgyYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc4ijM3PFR1Tt60xKO1rRQq4PIxA
F1mnSpHwV2mS3S/SX/2gtipSS+CY26jtK3M6/M/4mGXZV5HGhr8URdv2EatJEBd3
1s+wDbiQwrKwannz4M3RqepIK96rafTJzCe/3COrtAZrg0mTATxZ9Y41JgSgDGJ9
SUypeM0/+FvRtGWf2UZ3l0mLyhdGLAinZS8mLyGnOrXrKnz8hwKE6SqVKz3vGp4r
NiyRhWGywMayZjRXdFKkuV7sLA8m+GuKZXgBRGVw8p40Adrw7masQTfeTwya3plz
J5qFBiyCtqBycIf+HPaJfEMOxaS7WR0Nhd+pCf3s+8H4tNH7D9SSVRnkpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbhinDNmGX4IKu+drSuIEOtuCsJMB8GA1UdIwQY
MBaAFFoCyoG58KlxOwmWh9yBVRxF4/j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2Mt
NDU5ZGRjNjMxYmNjLzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2MtNDU5ZGRjNjMxYmNj
LzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZF4L+o9W
Cm6DlfV62I/kFzzc2e2O4bv8ymxgyHhdr8Vh2E9/cLUx+/j43y3NeqpFN1db81S/
3BI6vkfaJusg/JTmMaC0gWAHlCpw8X7xoOFUfzKD2wea8eOgBd2o+ETmKP2QYXHR
LF3jLN1Jv9bfk6X20FrPH0xwUbCtn3WqyenOymt35rWXzZqBQPkpA3xjr8eYhIO8
Mdrlj9vdU2j/TpyYGQ62J21lVwMXF3HZxALq/URsYi8KWrSUfKBXl1Fk0XAhDhWY
8pn90rECI9Xq4kGP1owpNzRXbs3GdqVCDywmyXeDDVs4tYTMt/7FzwEGKpiIMl3x
xsmTBQejxOyjpw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:48:56 2026 by rpki-client