Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
File:                     WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json)
Hash identifier:          2E+zLrJnstkHaRYrQJcf5oucT2DZVvgKGry+L2bidpk=
Subject key identifier:   C9:C2:75:4D:14:AB:D5:D3:32:D1:01:34:4D:32:B5:AF:24:1D:6C:6B
Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF
Certificate issuer:       /CN=59007408bbf8ad9044de68046587c7589b72ebef
Certificate serial:       01A1822C1E1D469B88F28FC1440E21AC9E80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
Manifest number:          1446
Signing time:             Wed 28 Oct 2026 11:01:31 +0000
Manifest this update:     Wed 28 Oct 2026 11:01:31 +0000
Manifest next update:     Thu 29 Oct 2026 11:01:31 +0000
Files and hashes:         1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: 6ipVZqRaa6QfscOMOGulpxCA992o5aGwwTtBc6ylf/Y=)
                          2: ka19YE-lwJpjJjrTaa8oR-zm8cQ.roa (hash: FzSdZ/YpygqnfWYncmTrr2N4Qhos4PCaZytfKDth4O0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:82:2c:1e:1d:46:9b:88:f2:8f:c1:44:0e:21:ac:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef
        Validity
            Not Before: Oct 28 11:01:31 2026 GMT
            Not After : Oct 29 11:01:31 2026 GMT
        Subject: CN=c9c2754d14abd5d332d101344d32b5af241d6c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:9e:e7:8b:44:dc:30:d5:48:80:2f:86:07:
                    d0:3b:e2:85:01:7c:47:9d:dd:e8:0e:c8:64:19:ea:
                    56:fe:7d:cf:53:ea:88:22:d5:e6:55:3d:2b:e7:48:
                    f0:be:1b:cd:44:bf:5a:9d:42:bd:65:22:db:9a:a0:
                    9a:bf:3a:b4:64:fc:b2:ac:22:29:68:9e:8e:58:af:
                    cf:a7:8b:b0:f3:04:79:85:13:0c:7e:74:46:f8:5d:
                    c7:a9:e0:41:a0:44:6b:93:f0:0d:7c:cb:2e:6e:54:
                    60:74:da:01:4b:b3:0b:07:21:be:9e:89:42:3a:30:
                    a1:1c:e9:7c:f1:58:97:d1:07:94:a9:e6:67:8a:ca:
                    60:f7:6b:96:68:e0:c0:28:0b:2a:0a:33:c0:dc:ba:
                    2b:4b:91:bb:06:7a:e5:a5:64:8a:ca:e3:e9:e5:93:
                    47:f7:f1:b8:f6:c2:da:bc:5d:f7:b5:4a:61:ec:44:
                    f4:ff:d1:ff:c7:5a:df:c5:d4:dc:40:09:44:ee:e7:
                    b7:d3:d3:c4:11:9e:64:03:96:fa:09:46:a3:c0:ea:
                    9a:c6:04:da:9f:84:7b:b4:86:ae:a4:d8:b4:f7:9d:
                    11:1a:0f:7b:6d:46:41:43:f1:67:25:63:63:f4:43:
                    3d:8e:ba:eb:2c:b6:df:63:fc:40:67:8f:b7:e8:98:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C2:75:4D:14:AB:D5:D3:32:D1:01:34:4D:32:B5:AF:24:1D:6C:6B
            X509v3 Authority Key Identifier:
                keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:ed:a8:66:1f:8c:dc:0e:cb:ba:5b:30:6f:c3:30:e9:3b:
         9b:08:18:fd:41:5f:27:e7:4f:6e:a6:44:11:37:d4:50:31:f9:
         c1:11:a0:4b:c7:d3:71:35:07:01:e3:15:db:48:a7:33:0b:d2:
         b7:4e:17:7c:c7:fc:1f:8c:e6:18:86:7d:ad:17:42:71:2e:39:
         a5:7e:ea:0d:43:5b:f4:88:8b:68:ba:8c:6a:ab:da:31:d7:9e:
         bd:a5:25:ef:e1:09:dc:89:c1:54:6d:c4:77:5d:b5:aa:9f:92:
         40:78:91:ff:af:d6:0b:ad:7f:d9:bf:54:a6:60:e6:5c:f4:df:
         ba:66:09:eb:68:cf:b5:10:21:8c:83:82:41:56:05:4c:d5:59:
         5c:cb:57:a9:f6:61:b8:d9:e4:7e:13:60:86:29:99:fe:28:c4:
         7a:ba:f7:b9:ea:57:ec:5e:41:32:46:45:cf:c3:c6:ab:c0:59:
         07:7e:53:90:c2:d9:be:87:bc:75:86:46:7e:30:24:bf:1f:a5:
         b6:3c:46:b2:44:f6:5d:a7:00:ba:17:36:61:9d:b4:9f:98:a0:
         ff:64:12:0c:a1:70:1e:84:ba:0d:02:7e:95:1b:e8:68:06:8e:
         5a:86:27:7f:4c:b8:89:53:fd:d6:1c:a4:d5:86:d5:93:9b:c2:
         ec:a5:56:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCLB4dRpuI8o/BRA4hrJ6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDA3NDA4YmJmOGFkOTA0NGRlNjgwNDY1ODdjNzU4OWI3
MmViZWYwHhcNMjYxMDI4MTEwMTMxWhcNMjYxMDI5MTEwMTMxWjAzMTEwLwYDVQQD
EyhjOWMyNzU0ZDE0YWJkNWQzMzJkMTAxMzQ0ZDMyYjVhZjI0MWQ2YzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpqe54tE3DDVSIAvhgfQO+KFAXxH
nd3oDshkGepW/n3PU+qIItXmVT0r50jwvhvNRL9anUK9ZSLbmqCavzq0ZPyyrCIp
aJ6OWK/Pp4uw8wR5hRMMfnRG+F3HqeBBoERrk/ANfMsublRgdNoBS7MLByG+nolC
OjChHOl88ViX0QeUqeZnispg92uWaODAKAsqCjPA3LorS5G7BnrlpWSKyuPp5ZNH
9/G49sLavF33tUph7ET0/9H/x1rfxdTcQAlE7ue309PEEZ5kA5b6CUajwOqaxgTa
n4R7tIaupNi0950RGg97bUZBQ/FnJWNj9EM9jrrrLLbfY/xAZ4+36JjP+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnCdU0Uq9XTMtEBNE0yta8kHWxrMB8GA1UdIwQY
MBaAFFkAdAi7+K2QRN5oBGWHx1ibcuvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMt
OWM3MDhkYWMxZDkyLzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMtOWM3MDhkYWMxZDky
LzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhvtqGYf
jNwOy7pbMG/DMOk7mwgY/UFfJ+dPbqZEETfUUDH5wRGgS8fTcTUHAeMV20inMwvS
t04XfMf8H4zmGIZ9rRdCcS45pX7qDUNb9IiLaLqMaqvaMdeevaUl7+EJ3InBVG3E
d121qp+SQHiR/6/WC61/2b9UpmDmXPTfumYJ62jPtRAhjIOCQVYFTNVZXMtXqfZh
uNnkfhNghimZ/ijEerr3uepX7F5BMkZFz8PGq8BZB35TkMLZvoe8dYZGfjAkvx+l
tjxGskT2XacAuhc2YZ20n5ig/2QSDKFwHoS6DQJ+lRvoaAaOWoYnf0y4iVP91hyk
1YbVk5vC7KVW2Q==
-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:16 2026 by rpki-client