Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
File:                     wb_RnDPps9MzU8_rZBee9z0yMys.mft (raw, json)
Hash identifier:          tDtkFqU2ZZRos6zXIAg2aDRFUa0s08cSqn4ofPvnNhQ=
Subject key identifier:   36:70:13:CF:D1:6C:DA:8E:B1:C8:E3:CF:3B:BC:F7:62:69:5E:91:0A
Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Certificate issuer:       /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Certificate serial:       01A08B6888E381DA2713FA8D0AE6B386B7E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 13:01:18 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:18 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:18 +0000
Files and hashes:         1: 61mqPCCWhNbX67BIUF71mtqBCdI.roa (hash: 0DCVdUX6gKmCd0/r1uVqZ3Z8KDhNYPwW1WvEER9Boj0=)
                          2: wb_RnDPps9MzU8_rZBee9z0yMys.crl (hash: E6Z72fghT8UNBClHGq2xRUJWCNxiY0BGfRo/pM4s89Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:88:e3:81:da:27:13:fa:8d:0a:e6:b3:86:b7:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
        Validity
            Not Before: Sep 10 13:01:18 2026 GMT
            Not After : Sep 11 13:01:18 2026 GMT
        Subject: CN=367013cfd16cda8eb1c8e3cf3bbcf762695e910a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:73:8d:5c:9b:0b:b3:c0:a7:20:16:8f:14:71:
                    f0:2b:87:8e:64:5f:1d:c2:8b:0f:08:48:aa:42:00:
                    51:65:46:dc:95:cc:af:5a:e0:38:da:52:94:92:2b:
                    1b:96:05:d1:61:7d:8c:84:1a:33:f5:73:c8:9a:5d:
                    6c:29:c1:82:ba:02:3d:9b:69:5e:a5:83:75:19:54:
                    7e:58:ab:1d:53:a9:c8:c3:aa:b0:16:f2:1e:27:fe:
                    7c:3d:13:4a:5c:be:38:1a:f4:19:51:a4:51:92:c7:
                    aa:11:fb:5c:6e:ec:14:dd:d4:a3:df:3b:c3:1c:61:
                    cd:a3:1c:41:2d:46:46:0a:5b:df:57:40:21:b0:c1:
                    c1:9b:99:34:a4:0f:7d:e5:bd:4c:6e:1b:82:cc:96:
                    fa:0b:39:e1:ba:ec:7b:57:22:3f:fe:1b:8d:80:01:
                    11:cb:5d:a1:4c:c0:8f:14:14:f8:8e:de:ba:50:9b:
                    ff:06:1c:9b:7a:69:27:4d:67:10:97:fd:78:ca:97:
                    57:c4:48:54:7c:c0:60:c5:bf:d1:d2:ca:1b:f1:ea:
                    3f:17:95:7c:ca:e5:87:a3:11:87:2c:d4:43:a3:bb:
                    56:1b:5c:84:57:76:fb:3e:56:bb:eb:21:a6:df:e8:
                    5d:86:b5:4c:7d:6a:a0:38:dc:90:5d:bb:52:08:64:
                    76:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:70:13:CF:D1:6C:DA:8E:B1:C8:E3:CF:3B:BC:F7:62:69:5E:91:0A
            X509v3 Authority Key Identifier:
                keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:dd:e3:5f:b5:7e:44:5d:05:ef:81:01:4a:30:2d:57:6e:
         27:3c:a3:8e:fa:23:6f:2f:93:00:aa:91:72:79:2d:7f:4c:80:
         2a:19:e4:46:ac:19:50:d8:b0:64:8c:22:bd:7b:33:bc:a6:0f:
         a0:13:33:38:fd:a9:34:0f:77:bb:34:c3:80:47:cb:b7:b6:1d:
         dc:e1:08:54:33:b3:11:90:5d:0c:4d:39:bb:1e:2e:94:19:a8:
         85:db:b7:8c:79:84:c1:f8:9f:be:f9:bb:4a:f2:c9:12:6c:bc:
         a2:b5:34:4d:8f:ec:e7:be:d4:9c:c6:38:33:a5:76:57:d7:79:
         63:13:ab:a9:cb:f4:1a:dd:14:1f:7d:4f:84:dd:81:11:7c:8b:
         ee:61:58:77:ad:d7:e1:57:a3:64:ab:21:b9:8f:af:a6:75:c4:
         28:3a:33:ea:e3:8b:57:b9:03:d1:57:be:6b:8e:43:ef:e4:b1:
         e2:5c:3d:67:ec:9a:41:12:dd:f0:b8:c9:b4:ac:66:fd:f7:04:
         a1:3f:42:7b:3c:28:a6:ca:0b:d3:46:d6:e7:2a:ec:76:4a:b5:
         f9:b5:f8:f3:29:d8:1b:8c:90:be:11:da:41:e7:b6:a4:d1:f1:
         e0:21:b8:f9:1d:8d:cb:18:a3:44:d2:21:0e:29:b2:2f:b2:ed:
         c2:99:94:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaIjjgdonE/qNCuazhrfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYmZkMTljMzNlOWIzZDMzMzUzY2ZlYjY0MTc5ZWY3M2Qz
MjMzMmIwHhcNMjYwOTEwMTMwMTE4WhcNMjYwOTExMTMwMTE4WjAzMTEwLwYDVQQD
EygzNjcwMTNjZmQxNmNkYThlYjFjOGUzY2YzYmJjZjc2MjY5NWU5MTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXONXJsLs8CnIBaPFHHwK4eOZF8d
wosPCEiqQgBRZUbclcyvWuA42lKUkisblgXRYX2MhBoz9XPIml1sKcGCugI9m2le
pYN1GVR+WKsdU6nIw6qwFvIeJ/58PRNKXL44GvQZUaRRkseqEftcbuwU3dSj3zvD
HGHNoxxBLUZGClvfV0AhsMHBm5k0pA995b1MbhuCzJb6Cznhuux7VyI//huNgAER
y12hTMCPFBT4jt66UJv/BhybemknTWcQl/14ypdXxEhUfMBgxb/R0sob8eo/F5V8
yuWHoxGHLNRDo7tWG1yEV3b7Pla76yGm3+hdhrVMfWqgONyQXbtSCGR2+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZwE8/RbNqOscjjzzu892JpXpEKMB8GA1UdIwQY
MBaAFMG/0Zwz6bPTM1PP62QXnvc9MjMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mYjQxZjktM2MyZS00Y2MzLWIyNGQt
NWQ4YzdhZGM3OTYyLzEvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9mYjQxZjktM2MyZS00Y2MzLWIyNGQtNWQ4YzdhZGM3OTYy
LzEvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5rd41+1
fkRdBe+BAUowLVduJzyjjvojby+TAKqRcnktf0yAKhnkRqwZUNiwZIwivXszvKYP
oBMzOP2pNA93uzTDgEfLt7Yd3OEIVDOzEZBdDE05ux4ulBmohdu3jHmEwfifvvm7
SvLJEmy8orU0TY/s577UnMY4M6V2V9d5YxOrqcv0Gt0UH31PhN2BEXyL7mFYd63X
4VejZKshuY+vpnXEKDoz6uOLV7kD0Ve+a45D7+Sx4lw9Z+yaQRLd8LjJtKxm/fcE
oT9CezwopsoL00bW5yrsdkq1+bX48ynYG4yQvhHaQee2pNHx4CG4+R2NyxijRNIh
DimyL7LtwpmU0A==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:05 2026 by rpki-client