Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
File:                     WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft (raw, json)
Hash identifier:          GDYBss4uhGJoxdTgbxdNx0JoKI9dclT2QeSLSO/IMis=
Subject key identifier:   54:B2:0A:73:3F:92:89:08:C7:15:12:23:58:F3:71:67:7D:39:11:E1
Authority key identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57
Certificate issuer:       /CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
Certificate serial:       01A08AFA1D0F9EE8EA52A0C3E8EFB3F683AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
Manifest number:          1A4A
Signing time:             Thu 10 Sep 2026 11:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 11:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 11:00:42 +0000
Files and hashes:         1: NuZANK5Y2pq06F_aaqEFEzMCKPs.roa (hash: ebap13c4g1got53ocFULOxVlWLzAt5eAM9gnlYjXpvM=)
                          2: WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl (hash: A59a+zSHB4jxOCvY1Atvl6tdOrGZpljAilWBeycMxAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:fa:1d:0f:9e:e8:ea:52:a0:c3:e8:ef:b3:f6:83:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
        Validity
            Not Before: Sep 10 11:00:42 2026 GMT
            Not After : Sep 11 11:00:42 2026 GMT
        Subject: CN=54b20a733f928908c715122358f371677d3911e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:4a:f9:6f:3c:b7:e3:b1:bf:bd:72:82:9e:
                    43:8a:2a:d9:e8:91:07:ea:0e:21:d0:4d:02:6f:2e:
                    f2:8d:e7:e0:fd:c4:f5:a9:97:44:05:4a:b8:24:f8:
                    24:cb:ba:f4:7d:b5:c5:0a:06:f0:27:b2:96:36:87:
                    54:d2:41:fa:99:81:01:e6:7f:34:17:3e:9b:57:35:
                    8a:4e:3d:30:7b:fe:bf:f2:7c:b5:c2:e9:22:8a:e3:
                    3d:f0:83:85:90:48:a0:07:40:28:52:51:e5:e4:b9:
                    d7:50:77:dc:fd:5a:6a:e7:01:d6:be:d4:ea:86:24:
                    ff:81:e1:c0:62:58:57:50:d6:48:54:0b:47:ec:af:
                    27:10:b8:e7:80:2b:dd:e1:f7:68:c0:b1:55:fd:2f:
                    3a:c8:c4:8b:18:a0:a4:39:dd:46:c4:ae:4c:5c:63:
                    4f:d1:d2:a9:5f:74:8c:51:29:d7:29:82:e9:8d:71:
                    be:df:14:bc:c0:5e:b8:4b:e9:23:9c:11:aa:49:18:
                    28:dd:b4:10:f2:5a:9e:7f:02:b4:55:3e:ad:f2:4c:
                    6e:d5:57:86:36:92:ea:ed:6d:50:cc:28:94:bc:0d:
                    75:f8:ca:f6:17:ef:a2:5d:ff:16:35:39:82:31:90:
                    fc:97:26:22:1f:12:0f:96:79:eb:46:1b:e2:01:4c:
                    ce:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B2:0A:73:3F:92:89:08:C7:15:12:23:58:F3:71:67:7D:39:11:E1
            X509v3 Authority Key Identifier:
                keyid:59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:76:8d:77:11:60:cf:fa:bd:ca:90:20:c8:7d:56:3a:76:62:
         e7:b0:50:f9:4d:d1:4e:64:29:84:77:a2:77:71:6d:b0:5d:86:
         51:d4:95:84:a2:3c:79:af:52:b4:e7:6e:ae:68:65:0b:0e:2c:
         62:ce:ec:ed:12:b9:f7:bc:c6:63:5d:22:7f:39:86:56:32:70:
         d4:96:2d:b8:24:11:0f:1c:cb:18:f9:b4:ee:0f:31:ec:8d:89:
         c3:55:fa:09:d1:7e:ba:14:11:2c:0d:2c:5f:6d:f9:96:6f:fd:
         57:7d:c9:62:7c:2a:de:49:28:ff:b0:63:c0:3f:f7:fb:56:42:
         a6:73:bb:05:eb:f5:c4:5b:72:ea:ae:90:5b:83:c0:30:07:1c:
         ee:40:b6:0a:46:9c:8a:3e:f4:09:78:0c:e6:51:9b:0c:26:a2:
         07:95:d1:ad:63:25:cb:be:02:20:a9:d3:ae:61:d3:db:9b:65:
         76:13:34:be:9f:ae:5e:96:82:98:29:83:df:a5:98:dd:e2:92:
         38:a2:3b:f9:ab:ab:c0:e8:23:82:2e:7b:87:5e:ed:92:b6:2f:
         22:31:9a:a6:f4:81:12:53:44:a5:b5:35:e7:e6:46:3f:8b:7a:
         8b:43:5e:d4:a5:49:08:2d:c6:53:57:dc:24:0c:e0:d4:bf:8f:
         8c:a2:53:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:02:40 2026 by rpki-client