Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
File:                     WL58UZyUIEI80vkGQL1RyYtKFTY.mft (raw, json)
Hash identifier:          EaseN37lzm4Zf0vKnhlSRuNalwEqu8k3MXaoLOq2vlM=
Subject key identifier:   22:31:E1:FF:BD:5F:DB:97:E6:61:45:07:1C:8B:04:C5:1D:CB:6B:9B
Authority key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36
Certificate issuer:       /CN=58be7c519c9420423cd2f90640bd51c98b4a1536
Certificate serial:       01A089E767C852F8E3027C0F26974C106C84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
Manifest number:          11E8
Signing time:             Thu 10 Sep 2026 06:00:38 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:38 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:38 +0000
Files and hashes:         1: WL58UZyUIEI80vkGQL1RyYtKFTY.crl (hash: EuYM0+fEUxGnzbGKrC4jsDXKUmHFDtaH4DphVyz+XDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:67:c8:52:f8:e3:02:7c:0f:26:97:4c:10:6c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58be7c519c9420423cd2f90640bd51c98b4a1536
        Validity
            Not Before: Sep 10 06:00:38 2026 GMT
            Not After : Sep 11 06:00:38 2026 GMT
        Subject: CN=2231e1ffbd5fdb97e66145071c8b04c51dcb6b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:4d:c5:21:15:25:4b:19:f1:69:46:a7:56:
                    9f:f2:73:e9:9e:d5:d2:19:b5:ad:7b:4d:cd:35:cf:
                    1b:5b:e2:06:d5:b5:65:08:5f:06:d3:1a:91:4c:c9:
                    23:d9:c0:f0:3a:fd:49:51:be:64:dc:6a:72:80:b9:
                    4d:0e:95:15:4d:2c:97:b7:f8:24:d2:b3:df:58:5a:
                    0e:bd:ee:af:65:0b:01:42:4c:be:9f:8f:eb:f8:be:
                    c1:92:c3:b1:2f:5d:36:db:b6:1e:da:4d:77:55:a8:
                    af:42:59:ca:bf:90:f0:e5:73:2e:0c:7a:fe:cb:a1:
                    33:51:23:7f:6d:2c:15:56:d8:36:ca:c8:d0:7d:8a:
                    c1:ac:1a:13:26:c9:96:bf:c8:d6:14:bb:80:c5:42:
                    19:fe:ce:99:02:9a:66:95:a5:43:f6:92:f6:09:78:
                    e5:00:c7:fa:fa:c5:bf:90:c6:af:5a:fe:18:98:47:
                    e3:06:f6:ef:45:1a:72:a9:37:61:31:7b:18:c8:18:
                    ac:28:59:22:da:16:fe:79:bf:af:92:c3:1d:12:53:
                    ce:66:08:8c:e6:28:e3:63:9d:66:d7:14:ad:76:a5:
                    d1:fd:a7:7a:54:00:0b:48:73:f1:98:5b:ac:c8:f8:
                    b6:39:95:f6:1b:f8:c9:ec:96:12:f4:22:24:0e:b6:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:31:E1:FF:BD:5F:DB:97:E6:61:45:07:1C:8B:04:C5:1D:CB:6B:9B
            X509v3 Authority Key Identifier:
                keyid:58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:08:b2:6a:2b:ce:0f:1d:ac:82:46:11:0a:a8:98:3f:c7:
         8d:69:10:9d:6f:f7:b3:f4:58:7f:95:b4:90:35:f7:4a:55:f3:
         9a:01:16:3f:ca:e5:2c:10:9f:02:51:e1:f2:bd:47:90:25:79:
         dd:66:1d:b4:e7:4e:d5:8f:49:9e:cc:aa:a7:14:cf:9c:5b:b5:
         90:80:c3:8f:83:95:ee:db:d1:da:70:e4:c3:49:73:94:01:86:
         24:53:84:b3:d4:e8:5f:1e:70:fe:64:c2:8c:ca:35:bb:1f:d2:
         96:03:31:72:8b:c0:65:a8:14:73:9f:13:30:07:2c:ee:b0:c4:
         f0:a7:52:43:b5:f1:1c:f6:66:a4:45:74:bf:26:2f:97:28:f1:
         49:d5:d3:25:7e:82:7f:32:65:b1:5b:af:71:76:d8:c1:78:ac:
         3e:ec:0a:52:9e:f3:44:38:23:c6:07:04:33:c6:59:07:be:f5:
         7d:00:6a:ca:02:31:cc:2d:59:2b:24:21:45:46:94:b6:86:2a:
         4c:cb:60:4a:db:e0:0d:17:b1:ef:9e:18:40:19:9b:7b:74:b5:
         76:47:e1:bf:b6:95:89:ca:d0:e3:4b:a8:ae:93:ef:45:11:9c:
         b7:c4:93:a7:98:5c:2e:07:91:1c:a8:77:fb:1d:47:5d:0f:17:
         dc:56:48:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:04:00 2026 by rpki-client