Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
File:                     WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json)
Hash identifier:          6fHZ8fTaZ85dFGSGvA3mgAlc0w4VLmBbyyv4zHMdAoE=
Subject key identifier:   8D:59:40:7E:0D:D5:DC:72:2F:F7:1C:9D:9A:32:EE:C0:F5:0E:45:47
Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8
Certificate issuer:       /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
Certificate serial:       01A088673A0548F6D6D3D721001EC1BE3F07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
Manifest number:          1A46
Signing time:             Wed 09 Sep 2026 23:01:01 +0000
Manifest this update:     Wed 09 Sep 2026 23:01:01 +0000
Manifest next update:     Thu 10 Sep 2026 23:01:01 +0000
Files and hashes:         1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: q+I2RfO84roTtjOeglD7U4dDM43hXe3WvwmwKUkpFyM=)
                          2: rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa (hash: Hq6QRnbtYlfThxdla/oR5Z86FNJ4rl+SznGomi6Y9bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:88:67:3a:05:48:f6:d6:d3:d7:21:00:1e:c1:be:3f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8
        Validity
            Not Before: Sep  9 23:01:01 2026 GMT
            Not After : Sep 10 23:01:01 2026 GMT
        Subject: CN=8d59407e0dd5dc722ff71c9d9a32eec0f50e4547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:10:d2:3b:b1:f4:86:b4:2f:7f:78:8b:8c:2a:
                    b8:88:74:f2:a5:b0:c8:33:a4:65:f6:b0:22:01:fe:
                    67:4f:45:d1:7b:0e:be:81:82:07:15:d7:ab:4f:cd:
                    81:7c:18:2d:64:06:e3:09:46:ae:fa:1e:5f:72:52:
                    d4:c0:cf:d1:46:f8:61:71:ce:8a:a0:cc:9b:c9:fe:
                    46:7e:48:0f:03:94:13:ae:15:1b:64:c0:bd:7d:fd:
                    bf:c5:12:97:89:e9:7c:fd:8d:28:65:5e:a2:21:c3:
                    ec:91:c0:e1:b1:35:8f:40:3b:e3:d6:30:7f:73:28:
                    c3:2e:74:e9:62:1f:76:12:2a:21:3d:45:fb:4b:64:
                    2f:9c:cb:e2:ce:1a:32:af:2e:2b:b0:2c:51:a7:12:
                    e7:c4:72:54:b4:36:31:4b:61:b2:69:e8:d9:19:10:
                    f2:3b:a6:07:4a:e9:e4:77:fa:02:8c:24:56:c4:1c:
                    60:cf:de:11:d2:50:b9:a0:1d:16:6a:16:e1:f1:63:
                    d7:fd:bf:70:e3:de:51:41:b7:ac:df:96:8d:ca:5e:
                    c3:32:79:9d:dc:65:aa:1e:b0:48:8f:bf:ce:66:6d:
                    3a:4b:03:76:7e:d6:e4:ad:d1:22:a5:3e:ef:01:5b:
                    aa:1c:bc:d7:73:85:3e:72:0c:fc:60:12:75:66:0f:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:40:7E:0D:D5:DC:72:2F:F7:1C:9D:9A:32:EE:C0:F5:0E:45:47
            X509v3 Authority Key Identifier:
                keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:59:ac:f5:56:bf:7e:3c:1e:b6:d5:65:ba:78:d1:94:98:1f:
         74:e4:f2:3f:4d:2c:da:d2:28:4b:90:0e:5e:a6:34:d5:b4:5b:
         aa:7d:44:cb:27:a6:7c:71:ba:32:3d:43:b5:1f:20:f2:7f:a7:
         59:12:94:6d:23:e7:28:2c:21:89:9d:36:f0:3a:1e:90:a2:10:
         48:99:50:4d:f3:ed:2d:b9:7f:f7:f4:66:2c:53:db:de:c6:5f:
         67:7c:e4:f2:0e:87:7b:60:26:c0:29:a8:06:ee:58:c8:1a:65:
         8c:e9:e4:fd:89:30:b8:26:bb:a9:64:39:47:8a:e9:5d:10:a7:
         21:ff:39:38:18:20:7b:84:3d:43:c1:47:2c:88:c2:97:7c:0d:
         4d:5f:e1:a4:63:ce:b3:ef:d9:a7:68:1d:31:d2:00:15:a8:93:
         11:4e:1f:c9:19:cc:ad:52:89:90:ba:c5:70:38:66:6b:1b:bd:
         30:62:1c:a6:07:70:99:66:d2:80:5c:17:aa:24:6d:75:b0:78:
         31:91:18:7e:77:6b:9a:73:e7:22:b6:fb:08:da:07:bb:f8:9a:
         5c:10:14:36:55:85:ce:fe:50:e2:e6:ba:04:e2:d2:f2:2f:d6:
         6a:2f:b7:63:97:04:df:da:ec:0c:fb:21:d1:62:3e:d3:cb:34:
         8d:d9:c0:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCIZzoFSPbW09chAB7Bvj8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5
YTRiYzgwHhcNMjYwOTA5MjMwMTAxWhcNMjYwOTEwMjMwMTAxWjAzMTEwLwYDVQQD
Eyg4ZDU5NDA3ZTBkZDVkYzcyMmZmNzFjOWQ5YTMyZWVjMGY1MGU0NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBDSO7H0hrQvf3iLjCq4iHTypbDI
M6Rl9rAiAf5nT0XRew6+gYIHFderT82BfBgtZAbjCUau+h5fclLUwM/RRvhhcc6K
oMybyf5GfkgPA5QTrhUbZMC9ff2/xRKXiel8/Y0oZV6iIcPskcDhsTWPQDvj1jB/
cyjDLnTpYh92EiohPUX7S2QvnMvizhoyry4rsCxRpxLnxHJUtDYxS2GyaejZGRDy
O6YHSunkd/oCjCRWxBxgz94R0lC5oB0Wahbh8WPX/b9w495RQbes35aNyl7DMnmd
3GWqHrBIj7/OZm06SwN2ftbkrdEipT7vAVuqHLzXc4U+cgz8YBJ1Zg//PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1ZQH4N1dxyL/ccnZoy7sD1DkVHMB8GA1UdIwQY
MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt
NTgzZmJlNjRhOTU1LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1
LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFms9Va/
fjwettVlunjRlJgfdOTyP00s2tIoS5AOXqY01bRbqn1EyyemfHG6Mj1DtR8g8n+n
WRKUbSPnKCwhiZ028DoekKIQSJlQTfPtLbl/9/RmLFPb3sZfZ3zk8g6He2AmwCmo
Bu5YyBpljOnk/YkwuCa7qWQ5R4rpXRCnIf85OBgge4Q9Q8FHLIjCl3wNTV/hpGPO
s+/Zp2gdMdIAFaiTEU4fyRnMrVKJkLrFcDhmaxu9MGIcpgdwmWbSgFwXqiRtdbB4
MZEYfndrmnPnIrb7CNoHu/iaXBAUNlWFzv5Q4ua6BOLS8i/Wai+3Y5cE39rsDPsh
0WI+08s0jdnA/Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:17:10 2026 by rpki-client