Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
File:                     wmsHYHZubMcjnCdVotDTn74U7Xg.mft (raw, json)
Hash identifier:          eYZOKVzaQiVBRQDX5l2/JriJE0/BglYA0AMhGYEKgeM=
Subject key identifier:   6E:73:44:D4:1B:3A:B5:C2:44:34:41:EE:BC:FF:35:82:2B:76:1F:5E
Authority key identifier: C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
Certificate issuer:       /CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Certificate serial:       01A181505393F98C91BB01C309A5C8051A84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
Manifest number:          0E81
Signing time:             Wed 28 Oct 2026 07:01:27 +0000
Manifest this update:     Wed 28 Oct 2026 07:01:27 +0000
Manifest next update:     Thu 29 Oct 2026 07:01:27 +0000
Files and hashes:         1: wmsHYHZubMcjnCdVotDTn74U7Xg.crl (hash: bPls3dSabBRXEqmWNmwqOqP9Sa30oHtPzcSyhqwvEWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:81:50:53:93:f9:8c:91:bb:01:c3:09:a5:c8:05:1a:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
        Validity
            Not Before: Oct 28 07:01:27 2026 GMT
            Not After : Oct 29 07:01:27 2026 GMT
        Subject: CN=6e7344d41b3ab5c2443441eebcff35822b761f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:39:59:c1:2d:fb:03:d5:e6:3a:fc:16:82:
                    d1:1b:36:a6:0c:e5:bf:04:7e:2a:fe:98:68:c7:58:
                    79:17:ea:04:2e:b7:04:92:1a:87:1f:33:09:82:76:
                    a8:53:30:7e:cc:bf:7a:d7:b5:e1:d2:1a:50:5f:dd:
                    69:b5:9f:37:70:33:56:d3:c9:07:47:29:b5:f8:50:
                    47:96:f2:6c:05:d3:02:06:96:9f:87:07:79:89:ca:
                    e7:05:b5:8d:15:c0:a7:6e:90:4f:3d:9c:f6:4c:8c:
                    65:7b:53:ff:d8:4d:95:0c:51:1c:4f:69:56:d5:30:
                    15:35:2d:c0:29:61:88:ca:5c:25:f2:47:3c:8e:09:
                    53:d0:c5:4c:cd:82:80:60:4b:6a:a6:b3:bf:6f:ed:
                    ee:5b:41:2c:c7:29:da:94:a2:9e:54:60:4b:9c:3e:
                    c8:ca:f5:7f:24:3b:bd:02:ae:a9:d2:28:bc:80:7e:
                    60:f3:27:28:85:c5:90:fd:aa:91:a2:29:58:3f:84:
                    7b:a0:6b:28:e0:c2:6e:ff:82:f9:9c:96:56:5f:cf:
                    5b:c5:b3:ab:c1:1c:b1:7d:a0:76:1d:f4:c0:49:61:
                    f3:cf:ea:f3:f6:a1:d3:a2:a4:c9:2a:f1:4b:b3:f2:
                    3c:03:cd:c5:fd:4b:8b:ea:b2:3f:bb:cc:79:c3:54:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:73:44:D4:1B:3A:B5:C2:44:34:41:EE:BC:FF:35:82:2B:76:1F:5E
            X509v3 Authority Key Identifier:
                keyid:C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a4:0e:cb:82:97:0c:04:2c:7f:f1:2d:33:6a:b9:72:72:37:
         b0:4c:9a:a4:03:27:c2:80:b6:22:12:85:3a:3d:36:ae:31:a0:
         40:81:1c:67:f5:b3:84:3c:d4:fc:17:33:5d:05:bd:06:ca:fa:
         4f:37:93:66:d5:6f:93:ad:49:c6:2a:39:ac:0a:61:c7:65:1e:
         96:9f:d1:ef:3e:fd:5e:2d:ed:fd:cf:7c:78:4c:76:67:f7:01:
         72:26:f8:cd:02:5e:aa:7b:73:f0:30:90:30:7c:3f:78:f2:eb:
         bb:cd:29:37:71:a0:af:5e:8a:47:ca:6e:67:78:09:7b:e6:10:
         e5:70:32:d7:84:80:e8:cc:dd:1d:23:3e:eb:f0:79:e7:2c:33:
         0b:2c:af:e4:64:4e:e3:02:e7:e2:42:2f:f3:1d:42:70:e6:d9:
         9a:97:8e:aa:c3:08:9a:0b:56:6a:2d:41:1c:27:0d:8d:8d:ce:
         2a:f7:f9:f4:4a:91:21:cd:4c:02:b4:08:4f:52:f4:f5:f5:7b:
         02:1e:9b:33:b8:26:09:24:7b:b5:31:bb:65:c4:fb:a4:13:dc:
         9a:df:9a:3d:97:22:b2:af:22:ed:59:46:43:15:c7:53:a9:64:
         55:27:0c:e6:69:1a:8b:47:b1:77:a6:a3:cc:5c:ff:72:62:89:
         89:a9:fd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:44:23 2026 by rpki-client