Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
File:                     WeTW-rd6x3n0m_b8irgeI61GdXY.mft (raw, json)
Hash identifier:          fuJ0JIotR5Ojn/0WO15AnbOXHE0KnzxoQVr8tfv6roY=
Subject key identifier:   80:E9:38:58:97:E7:3A:04:9D:A4:FD:AF:DB:B5:9A:30:46:C4:5E:8D
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Certificate issuer:       /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial:       01A177DE69CF27D481CDE16EB33EDFF6442D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
Manifest number:          1ADD
Signing time:             Mon 26 Oct 2026 11:00:27 +0000
Manifest this update:     Mon 26 Oct 2026 11:00:27 +0000
Manifest next update:     Tue 27 Oct 2026 11:00:27 +0000
Files and hashes:         1: OGZYNH_ub9WEC2VDtNIIdxioraM.roa (hash: mxW6PYWZAT0skvfActi6xk4FhEyZUpuKH/kbvthxrvo=)
                          2: WeTW-rd6x3n0m_b8irgeI61GdXY.crl (hash: N+6iC7oGNrbLjFiKtCgCbcIrIy8KbXAQqW6vSGrO/AY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:de:69:cf:27:d4:81:cd:e1:6e:b3:3e:df:f6:44:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
        Validity
            Not Before: Oct 26 11:00:27 2026 GMT
            Not After : Oct 27 11:00:27 2026 GMT
        Subject: CN=80e9385897e73a049da4fdafdbb59a3046c45e8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f5:62:57:ac:56:39:b8:57:2c:44:2b:54:f5:
                    85:da:5c:c4:21:46:c8:0d:04:e3:ec:14:29:8a:23:
                    78:aa:96:6e:ba:26:21:c8:aa:64:e1:3a:2c:2a:d3:
                    ae:58:a5:d1:2a:eb:ee:4c:64:5f:bb:00:ea:44:22:
                    25:15:0d:75:f5:6a:9e:56:09:21:23:3a:64:93:60:
                    21:62:2e:66:08:32:f3:56:ac:e3:11:1c:58:74:04:
                    6c:3a:e9:0b:a5:2f:b7:42:c1:9b:8f:11:25:82:61:
                    29:cd:79:90:50:18:17:5a:36:ff:71:56:30:13:bc:
                    bc:e9:72:82:ff:e9:ff:d0:15:46:b2:03:83:7c:b3:
                    35:9a:be:95:58:f7:c2:a9:42:8e:41:2e:b4:4a:94:
                    a3:4d:45:33:e3:a9:f0:2e:0f:29:98:ec:3e:44:c6:
                    22:31:61:0a:c4:1f:7c:6b:70:0e:ef:c7:97:bb:91:
                    ce:e9:dc:c7:09:1f:40:61:76:ac:fa:c9:20:6b:21:
                    7a:3e:7f:99:6d:50:59:8c:50:5e:92:c9:c6:ca:c6:
                    39:af:32:71:be:e1:38:92:75:ed:43:72:5b:19:c8:
                    5f:9b:95:8f:1f:64:ac:a3:c5:78:2b:92:e4:50:85:
                    26:60:b2:99:1a:33:0c:a2:76:32:78:87:95:b9:f5:
                    4c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E9:38:58:97:E7:3A:04:9D:A4:FD:AF:DB:B5:9A:30:46:C4:5E:8D
            X509v3 Authority Key Identifier:
                keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:a5:cd:41:03:72:c4:84:81:50:ec:f7:3d:fa:18:c0:7e:0d:
         88:4e:0c:73:6a:14:55:22:70:59:a7:e6:a9:8a:83:2a:7e:b1:
         4b:e7:c4:52:5b:d0:be:7e:cb:c2:9f:cc:3e:87:b3:ac:86:6b:
         38:28:42:4d:3a:20:71:7d:bc:bd:7b:53:88:b7:c9:92:d9:e2:
         ef:04:4e:6c:6c:6e:52:c0:60:2e:68:ef:1f:e4:91:61:32:28:
         f3:67:31:f3:fa:ca:cb:77:29:95:dc:f7:64:4f:f0:41:f7:3a:
         2f:4c:f7:32:4d:bc:3e:56:d0:52:e1:f1:fa:21:92:c7:53:58:
         ac:e6:63:be:72:af:2e:27:17:61:51:22:9b:2b:17:08:d2:8f:
         f6:f0:f2:d9:3b:3c:30:5a:68:d0:ef:fd:99:47:56:10:18:5a:
         48:d9:0c:f6:32:0a:30:d2:d8:2d:01:55:2d:c7:e3:f3:1f:23:
         85:6a:6d:6c:1a:e1:fc:2b:87:ef:0c:22:b4:11:59:85:5b:67:
         51:ca:64:40:12:86:c1:d2:27:ae:92:01:a1:7a:00:fe:47:cc:
         68:65:50:48:68:32:d4:29:83:cf:6d:42:49:3b:40:1d:53:21:
         33:f3:1f:17:0f:4b:19:2e:ef:bb:1d:67:8c:b5:53:82:ee:7a:
         a9:0f:7f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:24 2026 by rpki-client