Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
File:                     WpVcpFhGjFd2uNmTbf6bCyZocxw.mft (raw, json)
Hash identifier:          6w0hDoR5OxX1Vy4J/m+PTyRX/1UBPww8SQ5R92ir7kk=
Subject key identifier:   EB:2F:07:9A:C5:B4:35:98:B5:A5:78:50:E1:78:03:16:50:AA:B3:1F
Authority key identifier: 5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C
Certificate issuer:       /CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
Certificate serial:       01A16BA3D89390BE1052B421A99285390332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
Manifest number:          152A
Signing time:             Sat 24 Oct 2026 02:01:02 +0000
Manifest this update:     Sat 24 Oct 2026 02:01:02 +0000
Manifest next update:     Sun 25 Oct 2026 02:01:02 +0000
Files and hashes:         1: DghlG5g8kh3BeIC870myqIarxAw.roa (hash: jDUL776SurMFsX7IAknzdET8gzAlypgO2s6eGi65foY=)
                          2: RDq50lH1bmkT8vqHJA8F-7f2nmQ.roa (hash: IWGFsdcNHT1pJQgqJ040THMUt7oZlhEWCHXEnZys69k=)
                          3: WpVcpFhGjFd2uNmTbf6bCyZocxw.crl (hash: a29GB4+TBeTE/t9BcDleIc0R1DqVtixEHXvbrJx+jsc=)
                          4: um-Lorhk6tusr5ZZhejZsnrGt8I.roa (hash: DrlD6P/FnEJtBBpWVV2J3o/4TxhGlcEWI7wpBpxOr+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6b:a3:d8:93:90:be:10:52:b4:21:a9:92:85:39:03:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a955ca458468c5776b8d9936dfe9b0b2668731c
        Validity
            Not Before: Oct 24 02:01:02 2026 GMT
            Not After : Oct 25 02:01:02 2026 GMT
        Subject: CN=eb2f079ac5b43598b5a57850e178031650aab31f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9e:dd:0b:7b:61:01:25:83:d6:70:84:54:b6:
                    84:55:96:49:9a:20:64:72:72:0f:00:ed:2e:59:d4:
                    62:cb:1c:ed:75:41:c4:09:1f:b6:b8:c1:c0:76:7a:
                    9a:d3:50:2d:47:16:71:fc:9b:26:38:d6:41:d7:28:
                    d6:55:7f:17:b4:93:ca:8d:02:77:cb:95:2d:e7:5c:
                    38:85:84:0f:e8:f0:9e:43:ca:46:8b:f5:b4:79:d5:
                    7e:fd:58:2c:0a:6f:e1:be:be:7e:a3:50:92:ca:76:
                    e6:2e:31:38:57:88:50:43:eb:b0:ef:c4:f8:33:d8:
                    32:5c:65:05:d9:50:16:5e:e5:00:f5:03:6c:21:f6:
                    85:81:3c:35:ae:6b:71:36:47:b6:51:63:36:f6:98:
                    49:f8:cc:dc:2c:f1:69:06:51:7a:c3:a8:19:81:17:
                    de:51:2a:dd:1c:c6:fe:e3:02:83:bd:8d:d8:b2:74:
                    78:82:b4:7b:e0:e4:1f:ba:17:39:83:e5:b2:c3:89:
                    b2:5f:0f:b2:13:51:d1:a3:16:4b:a1:43:a2:d5:78:
                    a6:60:f0:2a:2b:09:92:c6:31:8e:7a:fa:30:3c:a5:
                    e1:52:09:7b:1b:68:b9:0e:07:81:03:46:e8:41:0f:
                    b0:fc:b8:67:84:81:f4:88:40:c3:6e:66:c6:52:38:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2F:07:9A:C5:B4:35:98:B5:A5:78:50:E1:78:03:16:50:AA:B3:1F
            X509v3 Authority Key Identifier:
                keyid:5A:95:5C:A4:58:46:8C:57:76:B8:D9:93:6D:FE:9B:0B:26:68:73:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpVcpFhGjFd2uNmTbf6bCyZocxw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/be9a00-e0b1-4541-9c0f-13858da85f53/1/WpVcpFhGjFd2uNmTbf6bCyZocxw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:68:f6:4c:ec:7a:c6:42:27:d0:6a:01:b8:dd:d4:cb:b7:ad:
         60:8d:af:b9:4b:ee:1d:7f:30:e8:80:38:6b:77:f5:df:cc:c3:
         a6:12:b3:dc:b9:b4:0f:62:d6:e7:d0:ee:a5:d5:82:8e:1e:9a:
         58:83:71:78:b3:28:a8:66:bb:5a:f9:df:c7:4d:77:ca:fa:9e:
         4c:d7:c6:72:92:d2:75:ec:39:35:5d:56:cf:ac:68:a9:cf:e8:
         22:1d:6a:e0:93:18:86:69:3c:a7:ad:a5:97:f1:ef:54:f8:02:
         8e:52:fe:fb:3d:af:e8:b9:e4:25:1a:9e:12:f0:62:a2:bb:81:
         74:0c:bd:eb:58:aa:e0:db:41:d9:70:dd:05:5f:89:e7:93:d7:
         57:01:e2:b4:b3:d3:19:4d:e0:a8:8e:e8:12:b6:d9:58:89:88:
         72:d6:c8:a4:79:ae:c4:a7:c7:8c:80:f9:47:5e:ed:c5:fe:9b:
         4f:c0:be:d4:96:57:30:ca:66:80:f8:54:42:f0:b0:ef:e0:01:
         ba:12:0f:9e:6b:c5:b5:2a:45:25:fb:f9:66:10:0b:04:bc:04:
         ac:a0:ea:bf:b1:95:f4:c7:c3:af:ee:2d:e6:37:78:9e:38:d3:
         08:9f:f8:f5:51:aa:3f:17:eb:90:5c:de:43:3e:c4:d0:22:26:
         01:e7:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:29:17 2026 by rpki-client