Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
File:                     WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json)
Hash identifier:          GmEexZMEY1mtb9vHxrpywLxog73nOOJicFKj5pFjt/g=
Subject key identifier:   CE:E7:66:BD:0D:A0:A5:7A:30:C3:49:7E:EA:CF:EA:EC:14:48:0A:21
Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Certificate issuer:       /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Certificate serial:       01A177A760F09B62E9E67A0EFC2615939E9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
Manifest number:          13F3
Signing time:             Mon 26 Oct 2026 10:00:20 +0000
Manifest this update:     Mon 26 Oct 2026 10:00:20 +0000
Manifest next update:     Tue 27 Oct 2026 10:00:20 +0000
Files and hashes:         1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: HfA6iZQshMOvnxRi6m6XrF5yyp16kdl9Fg3wl3lNa3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 10:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:a7:60:f0:9b:62:e9:e6:7a:0e:fc:26:15:93:9e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
        Validity
            Not Before: Oct 26 10:00:20 2026 GMT
            Not After : Oct 27 10:00:20 2026 GMT
        Subject: CN=cee766bd0da0a57a30c3497eeacfeaec14480a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:c4:fe:7f:df:2d:33:b2:8c:e2:4c:61:6d:
                    be:00:16:dc:81:59:40:67:cb:28:e9:10:8b:7e:10:
                    12:3f:67:35:ab:f9:89:e6:ad:0e:a8:89:4f:26:1f:
                    f5:bd:37:5d:22:98:c7:c1:4e:90:4a:6b:a3:c7:27:
                    62:0c:dc:c8:52:7e:ff:67:ec:f4:ab:42:11:da:7a:
                    15:a4:c8:d1:41:98:61:d2:6d:10:86:a1:84:c6:ff:
                    fd:d7:55:47:c5:9c:01:2e:2f:c1:ad:2f:a9:5a:f5:
                    99:c7:2f:e6:b2:4f:b3:8d:4f:84:e8:fa:26:6f:92:
                    34:62:4f:f9:03:0f:f8:c1:21:c2:c0:66:5e:cb:44:
                    c7:d4:74:45:10:0f:0d:a5:7e:fe:32:14:af:75:fb:
                    87:4e:62:25:fe:c6:78:45:6c:47:4c:2c:e1:f0:a0:
                    b0:ba:e2:77:88:42:1a:90:81:58:1f:cd:c5:95:37:
                    12:f0:3b:7a:2a:4a:69:53:d3:36:f1:6c:9b:74:12:
                    7f:45:f0:3c:bd:a3:2a:6f:84:5d:3e:96:1c:11:5b:
                    95:06:5e:4f:a4:50:e9:c3:8c:0e:87:5d:fe:6b:50:
                    73:72:ca:10:52:6b:3a:f3:d5:73:de:fa:04:e2:6c:
                    df:9a:e2:4a:fc:ff:70:46:0a:c7:f0:06:ae:2b:b0:
                    22:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E7:66:BD:0D:A0:A5:7A:30:C3:49:7E:EA:CF:EA:EC:14:48:0A:21
            X509v3 Authority Key Identifier:
                keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:a0:99:5e:a1:47:e3:5f:ab:69:71:69:28:d5:94:58:b3:
         69:c8:c9:f6:a9:ea:db:63:5a:b1:38:49:79:91:b3:56:2e:24:
         cb:e6:42:7d:5a:54:3b:83:17:ee:2e:fb:23:8a:60:56:1a:d3:
         c8:ab:3d:91:74:72:b6:8c:bc:01:e9:e8:3a:7e:c5:c4:32:bd:
         7a:60:2f:bd:3d:a6:bb:40:f1:1b:b3:65:65:84:b2:bf:df:86:
         da:3d:f5:5b:04:58:ba:83:83:fd:b1:03:93:9b:9e:bf:16:26:
         3f:cf:a0:bd:8d:6f:f2:4e:0d:81:91:5a:b0:35:dd:34:74:89:
         62:dc:7e:6d:2f:fd:0e:71:bc:bc:fd:ae:94:0b:bf:30:99:82:
         fd:65:fb:69:25:d0:55:0a:a9:4f:33:79:54:47:1e:bb:89:9d:
         77:38:e6:b6:db:d1:6d:89:57:bf:34:d2:2f:d9:90:d9:71:a1:
         53:ee:be:b2:1d:ae:df:55:8b:b2:88:5d:cc:bf:5d:95:c2:b9:
         88:10:c4:8e:20:66:db:3e:b5:26:a4:d8:a8:d5:06:b1:de:3c:
         73:af:27:14:25:26:77:1e:6e:af:b7:a8:7a:9b:d0:7d:a9:cb:
         05:02:68:6a:ec:4a:17:c2:cd:b3:aa:25:9b:4d:59:9a:f2:18:
         a5:db:69:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:03:12 2026 by rpki-client