Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          UIU7hM9+dcePzKOFC/9Yns3SHCIlMAWRebliPv7+8J0=
Subject key identifier:   CB:7C:14:61:A3:67:97:F5:2A:33:60:20:AF:DC:82:93:D6:12:FB:1D
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       01A17C97646B47081634237EEAAEBED1FB1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          1AD4
Signing time:             Tue 27 Oct 2026 09:00:58 +0000
Manifest this update:     Tue 27 Oct 2026 09:00:58 +0000
Manifest next update:     Wed 28 Oct 2026 09:00:58 +0000
Files and hashes:         1: 1-LUU4VhlFrR5CgNLExqkgedMVto.roa (hash: pvcrd5yvfwxcXIiMFnqQbB/N6236xrQdUjUSB0U70o4=)
                          2: Ev3rmxRidqYnZfMQSlLC-Dhz2FU.roa (hash: T8qErGjhlycgYZldrRbrFryAuFGEKdte6aYXXPvklds=)
                          3: IuiY9XwgtBBm0mMcl-Xq8bOHNRU.roa (hash: XWTII6LxqzZdBssyoVpR4SzyATC5Jy429E4WpR2BVcA=)
                          4: JW2H-k6inKAmiu_xO-pjW9SUDCM.roa (hash: O5xldJEyzfSXVxVHkGJoTu1u2Z9cZzEh4tBSU/2pKJ4=)
                          5: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: oOB64mDhpcBwbvJXyUPEf3sSTNLhALjdvM0tLmfmo/8=)
                          6: lZEX5TKEx5hCkasDPbRjOyHPXGI.roa (hash: tjb5iXKbv01rpTz7gJYnJJIH0J2+gq3FvhNX1/NC5Xs=)
                          7: nSQ4UZ-by9gRAicLs5JgR2Rs_6A.roa (hash: Gra3zwoakBGSkCcu16wzOodm0VWbtqrQgGrX7oS3hXo=)
                          8: nf_G4qFgrBWhWiUbJTn1rMwWnX8.roa (hash: PcWHMPz7nWBOqD5CBhgFwkGq6i8u3owR4SDy4BG6U4I=)
                          9: oSHcrJoHQTnsgntMnrCNm4AWAlA.roa (hash: a3cCgw339HSCSt92rk1/y/YUB3elccT+VxUcVU9x2aI=)
                          10: rDG-AsNjvl2_saHLd2-gAR4GSFk.roa (hash: /VNpKM5bPDeHxjflPXNKFB2OTbOQfLdehbQgPeBJtwI=)
                          11: wkMyARVAEK6ngoKTk8EgMpnUcVk.roa (hash: wcvFk1z1SNJIRcMkZjxwKmprK9VrbDiDHtDPmzOHhaM=)
                          12: z1v_CqVe5ZwJ1gQtmOYLBo6UsVs.roa (hash: HaP1DsKf8T5Q7ZQlqy2eroqHMykQQFoPO6mXCoW8Rzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:64:6b:47:08:16:34:23:7e:ea:ae:be:d1:fb:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Oct 27 09:00:58 2026 GMT
            Not After : Oct 28 09:00:58 2026 GMT
        Subject: CN=cb7c1461a36797f52a336020afdc8293d612fb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d4:3e:75:54:ed:63:26:f5:7c:b2:d1:d2:a5:
                    cf:32:f7:0b:6b:89:46:0d:56:ea:ce:a1:33:22:5e:
                    27:83:cb:d6:6b:a3:40:14:a6:df:df:46:89:74:d5:
                    ab:d4:4c:cb:eb:72:bf:7c:f9:ee:4f:68:de:e5:67:
                    25:72:44:db:9e:27:b9:fb:d5:c8:01:b6:d3:50:e6:
                    38:38:71:ac:70:dc:a5:78:dc:5d:67:50:6d:e2:06:
                    94:0d:5f:25:f8:c6:12:3e:8c:fb:b3:8c:43:c2:0c:
                    df:9a:ae:2c:6e:13:49:80:d2:77:44:92:75:c1:24:
                    85:d4:53:07:b5:56:e9:b9:2b:9c:f5:52:7e:0b:1b:
                    e9:c8:6e:20:e7:c5:2f:af:a4:17:87:3a:b1:cc:73:
                    0d:f2:53:46:d4:25:07:59:c6:6e:a8:5b:57:97:f1:
                    42:50:39:53:c2:6d:a9:57:36:cc:33:60:c6:36:7e:
                    fe:0c:e9:95:44:93:8a:5c:94:6e:16:56:32:be:80:
                    9f:f9:2f:9b:88:9b:55:57:af:b5:14:fc:95:bc:4a:
                    fa:20:b3:cf:aa:de:e7:04:e8:98:4f:2d:ba:3f:76:
                    e9:1e:2f:d4:63:e4:56:86:08:15:eb:c6:12:e2:84:
                    78:05:3e:8c:68:68:a5:7c:08:ff:9d:c8:68:98:b8:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:7C:14:61:A3:67:97:F5:2A:33:60:20:AF:DC:82:93:D6:12:FB:1D
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:cc:71:7b:c4:50:53:61:e1:1d:a6:1b:d5:1e:f0:8b:f3:0b:
         b5:c4:5a:bf:c0:fb:b0:d1:d5:88:a8:ab:d3:34:54:78:f5:ea:
         5c:e5:1d:27:bb:ae:f3:b9:3c:74:35:0d:45:3c:d1:4d:1e:87:
         49:6a:99:42:f5:24:5a:22:45:d6:06:44:f9:7e:7f:96:45:99:
         dc:f3:52:ee:d0:8c:ea:f1:3e:4c:65:61:ed:0a:59:d0:02:22:
         67:b1:15:4e:6e:3b:e8:9f:2d:e1:8c:0d:56:39:87:6c:04:33:
         5c:a5:56:dc:46:40:c0:a6:30:39:23:9e:17:1a:72:76:ee:a0:
         d3:5f:e4:eb:1c:c6:8d:83:41:06:52:5e:cb:62:d1:36:98:9e:
         b5:92:5f:a0:c2:74:92:44:a0:d1:f2:43:87:bf:31:dc:c8:73:
         5f:ec:f0:e8:99:33:d1:37:83:05:4b:fc:6a:90:20:10:c8:48:
         93:b4:ec:4e:f5:86:eb:01:55:e4:39:e7:f7:32:14:06:db:96:
         0f:3e:fd:05:9b:a8:d8:b2:e3:31:91:73:2c:97:cc:10:90:08:
         04:09:b1:51:2a:17:0f:c8:be:56:94:16:cb:8c:2f:3b:30:f9:
         8d:69:61:aa:cc:97:eb:e9:4c:67:2b:9e:52:23:f8:24:a3:99:
         99:fb:a5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:47:36 2026 by rpki-client